Google Inc.

Intuit, Inc.

Microsoft Technology Licensing, LLC

Storz Endoskop Produktions Gmbh

Ncr Corporation

Bridgelux Incorporated

Microsoft Corporation

Storz Endoskop Producktions Gmbh

Gang Wang

Kevin M McCluskey

Marcel M Moti Yung

Luis Felipe Cabrera

David Alan Hanekamp, Jr

Alex Daniel Jacobson

Jay J Yu

Michael J Graves

Alex G Balazs

Per-Kristian G Halvorsen

Matthew L Sivertson

Marcel M M Yung

Michael A Artamonov

Matteo Contolini

Sagnik Nandy

Vinay Kumar

Michael Kleber

Paul C Sutton

Daniel P Dunbar

Gerald Baron Huff

Yi-Qun Li

Igor A Podgorny

Amir R Eftekhari

Thomas G Phillips

Sarvar M Patel

Marcel Mordechay Yung

Daniel Ramage

William Taylor Laaser

Shreedhar Madhavapeddi

Carol Ann Howe

P Keith Muller

Joseph Ted Dibene, Ii

Mariana Raykova

Zhenyu Liu

Deepak Ravichandran

Benjamin Kreuter

Jun-Gang Zhao

Qing Feng Zhang

David Chatenever

Bennett R Blank

Massimo Mascaro

Curt Andrew Steeb

Joseph Elwell

Nankun Huang

Kevin Yeo

Yian Gao

Arien C Ferrell

Heinz-Werner Stiller

Jennifer Lynn Keenan

Yong Yao

Chengyi Zheng

Kevin Wei Li Yeo

Kyle J Ryan

Suzette Tritt

David Bruce Turner

Gregory W Miller

Sasha Mikhael Perez

Josh Karlin

Ronald Jason Char

Yijian Bai

Ardian Poernomo

Nitish John Korula

Ganesh Bhat

Andre Felipe Luis

Peter Lubczynski

Jonathan Michael Krafcik

Matthew Allen Brincho

Steven J Atkinson

Paul A Parks

Matthew A Lisowski

Matthew Young-Lai

Karn Seth

Troy D Otillio

Zoltan Szamonek

Bojan Beran

Haskell Aaron Garon

Creighton Thomas

Jeffery Weber

Erikheath A Thomas

Andres Munoz Medina

Arpana Hosabettu

Douglas N Gordin

James Leo Knighten

Evgeny Skvortsov

Anu Sreepathy

Saikat Mukherjee

Zeyong Xu

Martin Holladay

Manish Ramesh Shah

Cem Unsal

Sheldon Israel Walfish

Jeffrey P Ludwig

John Brian Moss

Aminish Sharma

Thirugnanam Subbiah

Kenneth W Hanscom

Nicholas Neil Kralevich, Iv

Raghunath Battula

Paul Bober

Anoop Makwana

Methods, systems, and apparatus, including an apparatus for verifying the integrity of requests. In some aspects, a method includes receiving, from an application, a request including an attestation token of the application. The attestation token includes a set of data that includes at least a public key of the application and a token creation time that indicates a time at which the attestation token was created. The attestation also includes a signature of the set of data. The signature is generated using a private key that corresponds to the public key. The integrity of the request is verified using the attestation token. The verification includes determining that the integrity of the request is valid based on a determination that the token creation time is within a threshold duration of the time at which the request was received and a determination that the set of data has not been.

Securing browser cookies

This document describes systems and techniques for improving the integrity and protecting the security of information in content selection and distribution. In one aspect, a method includes receiving, by a first server of a secure multi-party computation (MPC) system and from an application on a client device, a request for a selection value. In response to receiving the request, the first server conducts, in collaboration with a second server of the secure MPC system, a privacy-preserving selection process and a counterfactual selection process. The first server transmits a selection result defining the first winning selection value from the privacy-preserving selection process and the second winning selection value from the counterfactual selection process and receives, from the application on the client device, a notification indicating that a digital component corresponding to the winning selection value from the privacy-preserving selection process was presented at the client device.

Privacy-preserving techniques for content selection and distribution

Methods, systems, and apparatus, including computer programs encoded on a computer storage medium, for selecting and providing digital contents to a client device are described. The system receives a request including a user membership probabilistic data structure encoding user membership information, and constructs, based on the user membership probabilistic data structure, a query for identifying candidate digital components that are eligible for distribution to users. The system obtains the set of candidate digital components by querying one or more digital component databases using the constructed query, selects, from the candidate digital components, one or more digital components, and provides the one or more digital components to the client device for presentation to the user.

Digital content delivery with privacy-preserving membership check

Methods, systems, and apparatus, including computer programs encoded on a computer storage medium, for securely executing customized computing workflows for selecting digital components are described. In one aspect, a method includes receiving a request for a digital component for presentation by a client device. In response to receiving the request, a pool of candidate digital components is retrieved from a repository of digital components, and each stage of a multi-stage workflow for selecting a digital component from the pool of digital components is executed in a sequence defined by the multi-stage workflow, including a filtering stage, a selection stage, and a rendering stage. After the rendering stage has been executed, a selected and packaged digital component is transmitted for receipt by the client device.

Secure workflows for generating and applying digital component distribution directives

This disclosure relates to data security and cryptography. In one aspect, a method includes updating a user interface of a client device to present user interface controls that enable a user to specify data privacy settings that define how entities collect, store, and use data of the user. The data security system receives a request to modify a data privacy setting for one or more entities from the client device based on user interaction with one or more of the user interface controls. The request includes an ephemeral user identifier for the user and an attestation token. The data security system validates the request using at least the ephemeral user identifier and the attestation token. The data security system transmits data instructing the entity to modify usage of the user data based on the modified given data privacy setting to each of the one or more entities.

Cryptographically secure request verification

Methods, systems, and apparatus, including computer programs encoded on a computer storage medium, for selecting and distributing digital components to client devices in ways that protect user privacy and confidential data of content platforms and/or digital component providers are described. In one aspect, a method includes receiving, by a secure distribution system and from a client device of a user, a digital component request that includes, for each of multiple content platforms that distribute digital components to users, a corresponding user embedding comprising weights indicative of the relevance of multiple features to the user. The secure distribution system provides each user embedding as input to a respective isolated execution environment for the content platform corresponding to the user embedding, wherein the secure distribution system hosts each isolated execution environment. Digital component selection data generated based on the user embedding is received from each isolated execution environment.

Privacy preserving custom embeddings

This document relates to using secure MPC to select digital components in ways that preserve user privacy and protects the security of data of each party that is involved in the selection process. In one aspect, a method includes receiving, by a first server of a secure MPC system from a client device, a digital component request. The first server identifies, for each digital component in a set, a selection value and a priority tier. For each tier, the first server determines, using a secure MPC process in collaboration with one or more second servers of the secure MPC system, a first secret share of a winner parameter for each digital component in the priority tier. The first server identifies a highest tier for which a given digital component has a winner parameter that indicates that the given digital component is a winning digital component.

Flexible content selection processes using secure multi-party computation

This disclosure relates to verifying the trustworthiness of web applications. In one aspect, a method includes obtaining, by a browser of a client device, an electronic resource comprising code for a web application. The browser renders the electronic resource, including processing the code of the web application. The code causes the browser to initiate a request to a remote server. In response to processing the code, the request is generated and modified to include at least a portion of an integrity element for the web application. The modified request is sent to the remote server. A response to the request is received from the remote server. The response is based on the remote server verifying that the web application is trustworthy using the integrity element. Data is displayed based on the response.

Verifying the trustworthiness of web applications

Methods, systems, and apparatus, including medium-encoded computer program products, for secure workflows that enhance data security are described. In one aspect, a digital component request is received. In response to receiving the digital component request, a multi-stage workflow for selecting a digital component is identified, and can include customizable stages. The execution of workflow stages includes: (A) identifying a given customizable stage; (B) for the stage: (i) identifying, a customization specific to the stage that generates an output for use in selecting the digital component; (ii) initiating an isolated execution environment for each customization; (iii) executing, within each isolated execution environment, the customization for which the isolated execution environment was initiated; and (iv) obtaining the output generated by the code of each isolated execution environment; and (C) executing a final stage to select a digital component based on the outputs. The selected digital component is sent to the client device.

Secure workflows that enhance data security

This document describes systems and techniques for improving the integrity and protecting the security of information in content selection and distribution. In one aspect, a method includes receiving, by a first server of a secure multi-party computation (MPC) system from an application on a user device, a request for a digital component. The request is parsed into distinct sub-requests. Each sub-request is transmitted to a different server. A set of candidate selection values is received from a separate server. The first server performs, in collaboration with one or more second servers of the MPC system, a selection process to generate a selection result for a winning digital component, including merging, the first set of candidate selection values and a set of cached selection values to create a final set of candidate selection values and sorting the final set according to the values of the candidate selection values.

Using secure multi-party computation to improve content selection process integrity

Methods, systems, and apparatus, including computer programs encoded on a computer storage medium, for distributing digital component while securing user data are described. In one aspect, a method includes receiving, by a multi-platform server and from a client device, a request for a digital component for presentation by the client device. The request for the digital component includes (i) request data that is opaque to the multi-platform server, and (ii) sensitive user data that is managed by the client device. In response to receiving the request for the digital component, the multi-platform server transmits, to a first content platform, a contextual request that includes the request data from the client device and that does not include the sensitive user data. After transmitting the contextual request, the multi-platform server receives, from the first content platform, a contextual response that includes a selection data unit for a first repository of digital components.

Distributing digital components while securing user data

An LED-filament comprising: a partially light transmissive substrate; a plurality of LED chips on a front face of the substrate; a photoluminescence material that is in direct contact with and covers all of the plurality of LED chips; and a light scattering layer that is in direct contact with and covers at least the photoluminescence material, wherein the light scattering layer comprises particles of light scattering material, and wherein the photoluminescence material comprises broadband green to red photoluminescence materials and narrowband red photoluminescence material.

LED-filament comprising a light scattering material layer

Methods, systems, and apparatus, including an apparatus for verifying the integrity of requests and the devices that sent the requests. In some aspects, a method includes receiving, from a client device, a request including an attestation token generated by the client device. The attestation token includes a set of data that includes at least a public key of the client device, a token creation, and a device integrity token that includes a verdict. The attestation token also includes a digital signature of the set of data generated using a private key corresponding to the public key. The integrity of the request is verified using the attestation token by determining that the token creation time being within a threshold duration of the time at which the request was received, the set of data was not modified since the attestation token was created, and the verdict indicates the client device is trustworthy.

Protecting the integrity of communications from client devices

This disclosure relates to systems and techniques that can be implemented by content platforms to optimize (a) demographic-based digital component distribution used to categorize each user into a particular demographic so as to appropriately target that user for purposes of maximizing the efficacy of digital components shown to that user, and (b) demographic reporting used to report to digital component providers the effectiveness of the digital component.

Privacy preserving machine learning for content distribution and analysis

This disclosure relates to preserving the privacy of users and preventing access to information of other entities. In one aspect, a method includes receiving, from a client device, a content request including request signals specifying user group identifiers that each identify a user group that includes a user of the client device. One or more user group identifiers that satisfy a first k-anonymity process are identified. Selection parameter elements that each include data indicating a respective digital component and a selection parameter for the respective digital component are received from one or more first content platforms. At least a portion of the selection parameters and, for each selection parameter, data identifying the first content platform from which the selection parameter was received are transmitted to a second content platform. Data specifying a given first content platform selected based on the selection parameters is received from the second content platform.

Protecting access to information in online interactions

Growing community of inventors

San Diego, CA, United States of America

Gang Wang