Google Inc.

Intuit, Inc.

Microsoft Technology Licensing, LLC

Storz Endoskop Produktions Gmbh

Ncr Corporation

Bridgelux Incorporated

Microsoft Corporation

Storz Endoskop Producktions Gmbh

Gang Wang

Kevin M McCluskey

Marcel M Moti Yung

Luis Felipe Cabrera

David Alan Hanekamp, Jr

Alex Daniel Jacobson

Jay J Yu

Yian Gao

Michael J Graves

Alex G Balazs

Per-Kristian G Halvorsen

Arien C Ferrell

Matthew L Sivertson

Marcel M M Yung

Michael A Artamonov

Matteo Contolini

Heinz-Werner Stiller

Jennifer Lynn Keenan

Yong Yao

Chengyi Zheng

Sagnik Nandy

Vinay Kumar

Kevin Wei Li Yeo

Kyle J Ryan

Suzette Tritt

Michael Kleber

Paul C Sutton

Gerald Baron Huff

Daniel P Dunbar

David Bruce Turner

Gregory W Miller

Sasha Mikhael Perez

Josh Karlin

Yi-Qun Li

Igor A Podgorny

Amir R Eftekhari

Thomas G Phillips

Ronald Jason Char

Yijian Bai

Ardian Poernomo

Nitish John Korula

Ganesh Bhat

Andre Felipe Luis

Matthew Allen Brincho

Peter Lubczynski

Jonathan Michael Krafcik

Steven J Atkinson

Matthew A Lisowski

Nunzio Thron

Sarvar M Patel

Marcel Mordechay Yung

Daniel Ramage

William Taylor Laaser

Shreedhar Madhavapeddi

Carol Ann Howe

P Keith Muller

Joseph Ted Dibene, Ii

Mariana Raykova

Zhenyu Liu

Deepak Ravichandran

Benjamin Kreuter

Jun-Gang Zhao

Karn Seth

Troy D Otillio

Matthew Young-Lai

Zoltan Szamonek

Bojan Beran

Haskell Aaron Garon

Creighton Thomas

Jeffery Weber

Erikheath A Thomas

Andres Munoz Medina

Arpana Hosabettu

Douglas N Gordin

Qing Feng Zhang

David Chatenever

Bennett R Blank

Massimo Mascaro

Curt Andrew Steeb

Joseph Elwell

Nankun Huang

James Leo Knighten

Evgeny Skvortsov

Saikat Mukherjee

Anu Sreepathy

Zeyong Xu

Martin Holladay

Manish Ramesh Shah

Cem Unsal

Jeffrey P Ludwig

John Brian Moss

Aminish Sharma

Thirugnanam Subbiah

Nicholas Neil Kralevich, Iv

Kenneth W Hanscom

Raghunath Battula

Paul Bober

Anoop Makwana

Charles Richard Honton

Tancrède Lepoint

Methods, systems, and apparatus, including computer programs encoded on a computer storage medium, for selecting and providing digital contents to a client device are described. The system receives a request including a user membership probabilistic data structure encoding user membership information, and constructs, based on the user membership probabilistic data structure, a query for identifying candidate digital components that are eligible for distribution to users. The system obtains the set of candidate digital components by querying one or more digital component databases using the constructed query, selects, from the candidate digital components, one or more digital components, and provides the one or more digital components to the client device for presentation to the user.

Digital content delivery with privacy-preserving membership check

Methods, systems, and apparatus, including computer programs encoded on a computer storage medium, for securely executing customized computing workflows for selecting digital components are described. In one aspect, a method includes receiving a request for a digital component for presentation by a client device. In response to receiving the request, a pool of candidate digital components is retrieved from a repository of digital components, and each stage of a multi-stage workflow for selecting a digital component from the pool of digital components is executed in a sequence defined by the multi-stage workflow, including a filtering stage, a selection stage, and a rendering stage. After the rendering stage has been executed, a selected and packaged digital component is transmitted for receipt by the client device.

Secure workflows for generating and applying digital component distribution directives

This disclosure relates to data security and cryptography. In one aspect, a method includes updating a user interface of a client device to present user interface controls that enable a user to specify data privacy settings that define how entities collect, store, and use data of the user. The data security system receives a request to modify a data privacy setting for one or more entities from the client device based on user interaction with one or more of the user interface controls. The request includes an ephemeral user identifier for the user and an attestation token. The data security system validates the request using at least the ephemeral user identifier and the attestation token. The data security system transmits data instructing the entity to modify usage of the user data based on the modified given data privacy setting to each of the one or more entities.

Cryptographically secure request verification

Methods, systems, and apparatus, including computer programs encoded on a computer storage medium, for selecting and distributing digital components to client devices in ways that protect user privacy and confidential data of content platforms and/or digital component providers are described. In one aspect, a method includes receiving, by a secure distribution system and from a client device of a user, a digital component request that includes, for each of multiple content platforms that distribute digital components to users, a corresponding user embedding comprising weights indicative of the relevance of multiple features to the user. The secure distribution system provides each user embedding as input to a respective isolated execution environment for the content platform corresponding to the user embedding, wherein the secure distribution system hosts each isolated execution environment. Digital component selection data generated based on the user embedding is received from each isolated execution environment.

Privacy preserving custom embeddings

This document relates to using secure MPC to select digital components in ways that preserve user privacy and protects the security of data of each party that is involved in the selection process. In one aspect, a method includes receiving, by a first server of a secure MPC system from a client device, a digital component request. The first server identifies, for each digital component in a set, a selection value and a priority tier. For each tier, the first server determines, using a secure MPC process in collaboration with one or more second servers of the secure MPC system, a first secret share of a winner parameter for each digital component in the priority tier. The first server identifies a highest tier for which a given digital component has a winner parameter that indicates that the given digital component is a winning digital component.

Flexible content selection processes using secure multi-party computation

This disclosure relates to verifying the trustworthiness of web applications. In one aspect, a method includes obtaining, by a browser of a client device, an electronic resource comprising code for a web application. The browser renders the electronic resource, including processing the code of the web application. The code causes the browser to initiate a request to a remote server. In response to processing the code, the request is generated and modified to include at least a portion of an integrity element for the web application. The modified request is sent to the remote server. A response to the request is received from the remote server. The response is based on the remote server verifying that the web application is trustworthy using the integrity element. Data is displayed based on the response.

Verifying the trustworthiness of web applications

Methods, systems, and apparatus, including medium-encoded computer program products, for secure workflows that enhance data security are described. In one aspect, a digital component request is received. In response to receiving the digital component request, a multi-stage workflow for selecting a digital component is identified, and can include customizable stages. The execution of workflow stages includes: (A) identifying a given customizable stage; (B) for the stage: (i) identifying, a customization specific to the stage that generates an output for use in selecting the digital component; (ii) initiating an isolated execution environment for each customization; (iii) executing, within each isolated execution environment, the customization for which the isolated execution environment was initiated; and (iv) obtaining the output generated by the code of each isolated execution environment; and (C) executing a final stage to select a digital component based on the outputs. The selected digital component is sent to the client device.

Secure workflows that enhance data security

This document describes systems and techniques for improving the integrity and protecting the security of information in content selection and distribution. In one aspect, a method includes receiving, by a first server of a secure multi-party computation (MPC) system from an application on a user device, a request for a digital component. The request is parsed into distinct sub-requests. Each sub-request is transmitted to a different server. A set of candidate selection values is received from a separate server. The first server performs, in collaboration with one or more second servers of the MPC system, a selection process to generate a selection result for a winning digital component, including merging, the first set of candidate selection values and a set of cached selection values to create a final set of candidate selection values and sorting the final set according to the values of the candidate selection values.

Using secure multi-party computation to improve content selection process integrity

Methods, systems, and apparatus, including computer programs encoded on a computer storage medium, for distributing digital component while securing user data are described. In one aspect, a method includes receiving, by a multi-platform server and from a client device, a request for a digital component for presentation by the client device. The request for the digital component includes (i) request data that is opaque to the multi-platform server, and (ii) sensitive user data that is managed by the client device. In response to receiving the request for the digital component, the multi-platform server transmits, to a first content platform, a contextual request that includes the request data from the client device and that does not include the sensitive user data. After transmitting the contextual request, the multi-platform server receives, from the first content platform, a contextual response that includes a selection data unit for a first repository of digital components.

Distributing digital components while securing user data

An LED-filament comprising: a partially light transmissive substrate; a plurality of LED chips on a front face of the substrate; a photoluminescence material that is in direct contact with and covers all of the plurality of LED chips; and a light scattering layer that is in direct contact with and covers at least the photoluminescence material, wherein the light scattering layer comprises particles of light scattering material, and wherein the photoluminescence material comprises broadband green to red photoluminescence materials and narrowband red photoluminescence material.

LED-filament comprising a light scattering material layer

Methods, systems, and apparatus, including an apparatus for verifying the integrity of requests and the devices that sent the requests. In some aspects, a method includes receiving, from a client device, a request including an attestation token generated by the client device. The attestation token includes a set of data that includes at least a public key of the client device, a token creation, and a device integrity token that includes a verdict. The attestation token also includes a digital signature of the set of data generated using a private key corresponding to the public key. The integrity of the request is verified using the attestation token by determining that the token creation time being within a threshold duration of the time at which the request was received, the set of data was not modified since the attestation token was created, and the verdict indicates the client device is trustworthy.

Protecting the integrity of communications from client devices

This disclosure relates to systems and techniques that can be implemented by content platforms to optimize (a) demographic-based digital component distribution used to categorize each user into a particular demographic so as to appropriately target that user for purposes of maximizing the efficacy of digital components shown to that user, and (b) demographic reporting used to report to digital component providers the effectiveness of the digital component.

Privacy preserving machine learning for content distribution and analysis

This disclosure relates to preserving the privacy of users and preventing access to information of other entities. In one aspect, a method includes receiving, from a client device, a content request including request signals specifying user group identifiers that each identify a user group that includes a user of the client device. One or more user group identifiers that satisfy a first k-anonymity process are identified. Selection parameter elements that each include data indicating a respective digital component and a selection parameter for the respective digital component are received from one or more first content platforms. At least a portion of the selection parameters and, for each selection parameter, data identifying the first content platform from which the selection parameter was received are transmitted to a second content platform. Data specifying a given first content platform selected based on the selection parameters is received from the second content platform.

Protecting access to information in online interactions

This disclosure relates to a method for anonymous attestation that includes receiving, by an application running on a client device and from a first content provider, an authentication request to authenticate a user to receive content from a second domain of a second content provider, redeeming, with an attestation token issuing system that issued an anonymous attestation token attesting to the user's authentication to the second content provider, the anonymous attestation token by transmitting the anonymous attestation token with a second request, receiving a redemption result representing whether the attestation token was successfully redeemed, signed by the attestation token issuing system using a digital signature and is operable to verify, to the second content provider, that the user is authenticated to the second content provider without identifying the user to the second content provider, and transmitting, to the first content provider, the redemption result.

Anonymous authentication with token redemption

This disclosure relates to generating telecommunication network measurements. In one aspect, a method includes presenting, by a client device, a digital component that, when interacted with, initiates a call by the client device to a phone number specified by the digital component. A trusted program stores, in a presentation event data structure, a presentation event data element specifying the phone number and resource locator for a reporting system to which reports for the digital component are sent. The trusted program detects a phone call by the client device to a given phone number. The given phone number is compared to one or more presentation event data elements stored in the presentation event data structure. A determination is made that the given phone number matches the phone number specified by the digital component. In response, an event report is transmitted to the reporting system.

Preventing data manipulation and protecting user privacy in telecommunication network measurements

Growing community of inventors

San Diego, CA, United States of America

Gang Wang