Google Inc.

Intuit, Inc.

Microsoft Technology Licensing, LLC

Storz Endoskop Produktions Gmbh

Ncr Corporation

Bridgelux Incorporated

Amazon Technologies, Inc.

Microsoft Corporation

Storz Endoskop Producktions Gmbh

Gang Wang

Kevin M McCluskey

Marcel M Moti Yung

Luis Felipe Cabrera

David Alan Hanekamp, Jr

Alex Daniel Jacobson

Jay J Yu

Michael J Graves

Alex G Balazs

Per-Kristian G Halvorsen

Matthew L Sivertson

Marcel M M Yung

Michael A Artamonov

Matteo Contolini

Sagnik Nandy

Vinay Kumar

Michael Kleber

Paul C Sutton

Daniel P Dunbar

Gerald Baron Huff

Yi-Qun Li

Igor A Podgorny

Amir R Eftekhari

Thomas G Phillips

Sarvar M Patel

Marcel Mordechay Yung

Daniel Ramage

William Taylor Laaser

Shreedhar Madhavapeddi

Carol Ann Howe

P Keith Muller

Joseph Ted Dibene, Ii

Mariana Raykova

Zhenyu Liu

Deepak Ravichandran

Benjamin Kreuter

Jun-Gang Zhao

Qing Feng Zhang

David Chatenever

Bennett R Blank

Massimo Mascaro

Curt Andrew Steeb

Joseph Elwell

Nankun Huang

Kevin Yeo

Yian Gao

Arien C Ferrell

Heinz-Werner Stiller

Jennifer Lynn Keenan

Yong Yao

Chengyi Zheng

Kevin Wei Li Yeo

Kyle J Ryan

Suzette Tritt

David Bruce Turner

Gregory W Miller

Sasha Mikhael Perez

Josh Karlin

Ronald Jason Char

Yijian Bai

Ardian Poernomo

Nitish John Korula

Ganesh Bhat

Andre Felipe Luis

Peter Lubczynski

Jonathan Michael Krafcik

Matthew Allen Brincho

Steven J Atkinson

Paul A Parks

Matthew A Lisowski

Matthew Young-Lai

Karn Seth

Troy D Otillio

Zoltan Szamonek

Bojan Beran

Haskell Aaron Garon

Creighton Thomas

Jeffery Weber

Erikheath A Thomas

Andres Munoz Medina

Arpana Hosabettu

Douglas N Gordin

James Leo Knighten

Evgeny Skvortsov

Anu Sreepathy

Saikat Mukherjee

Zeyong Xu

Martin Holladay

Manish Ramesh Shah

Cem Unsal

Sheldon Israel Walfish

Jeffrey P Ludwig

John Brian Moss

Aminish Sharma

Thirugnanam Subbiah

Kenneth W Hanscom

Nicholas Neil Kralevich, Iv

Raghunath Battula

Paul Bober

Anoop Makwana

Methods, systems, and apparatus, including medium-encoded computer program products, for providing secure workflows with rule-based data access security are described. In one aspect, a method includes receiving a digital component (DC) request. A workflow, which can include customizable stages, for selecting a DC is identified. Stages can include executable instructions and can be executed as defined by the workflow. The method can include, for each stage: initiating an isolated environment, receiving a data access request and, for each request, obtaining access rules associated with the request, processing access rules to determine whether to return the data requested by the request, and whenever it is determined to return the data, providing the data to the isolated environment. The method can include, receiving output data from customizable stages and selecting, using a stage and based on the output data received, a DC, which can be sent to the client device.

Secure workflows with rule-based data access security

Embodiments of a privacy preserving supplemental content server (PPSCS) implements a privacy preserving protocol with a content server that requests the PPSCS to serve supplemental content for users. In embodiments, a user-to-segment map (USM) containing user-private information is split into secret shares and stored separately at the PPSCS and the content server. When servicing a request, the USM data is used to identify a key segment of a user, which is in turn used to select a supplemental content for the user. Advantageously, the selection process is performed according to the privacy preserving protocol, which guarantees that (a) the content server does not learn any user-private information about the user in the USM, (b) the PPSCS learns at most one user segment of the user (e.g. the key segment), and (c) the PPSCS cannot track the user over time using any user-private information about the user learned during the execution.

Privacy preserving protocol for serving user-specific supplemental content

Methods, systems, and apparatus, including an apparatus for verifying the integrity of requests. In some aspects, a method includes receiving, from an application, a request including an attestation token of the application. The attestation token includes a set of data that includes at least a public key of the application and a token creation time that indicates a time at which the attestation token was created. The attestation also includes a signature of the set of data. The signature is generated using a private key that corresponds to the public key. The integrity of the request is verified using the attestation token. The verification includes determining that the integrity of the request is valid based on a determination that the token creation time is within a threshold duration of the time at which the request was received and a determination that the set of data has not been.

Securing browser cookies

This document describes systems and techniques for improving the integrity and protecting the security of information in content selection and distribution. In one aspect, a method includes receiving, by a first server of a secure multi-party computation (MPC) system and from an application on a client device, a request for a selection value. In response to receiving the request, the first server conducts, in collaboration with a second server of the secure MPC system, a privacy-preserving selection process and a counterfactual selection process. The first server transmits a selection result defining the first winning selection value from the privacy-preserving selection process and the second winning selection value from the counterfactual selection process and receives, from the application on the client device, a notification indicating that a digital component corresponding to the winning selection value from the privacy-preserving selection process was presented at the client device.

Privacy-preserving techniques for content selection and distribution

Methods, systems, and apparatus, including computer programs encoded on a computer storage medium, for selecting and providing digital contents to a client device are described. The system receives a request including a user membership probabilistic data structure encoding user membership information, and constructs, based on the user membership probabilistic data structure, a query for identifying candidate digital components that are eligible for distribution to users. The system obtains the set of candidate digital components by querying one or more digital component databases using the constructed query, selects, from the candidate digital components, one or more digital components, and provides the one or more digital components to the client device for presentation to the user.

Digital content delivery with privacy-preserving membership check

Methods, systems, and apparatus, including computer programs encoded on a computer storage medium, for securely executing customized computing workflows for selecting digital components are described. In one aspect, a method includes receiving a request for a digital component for presentation by a client device. In response to receiving the request, a pool of candidate digital components is retrieved from a repository of digital components, and each stage of a multi-stage workflow for selecting a digital component from the pool of digital components is executed in a sequence defined by the multi-stage workflow, including a filtering stage, a selection stage, and a rendering stage. After the rendering stage has been executed, a selected and packaged digital component is transmitted for receipt by the client device.

Secure workflows for generating and applying digital component distribution directives

This disclosure relates to data security and cryptography. In one aspect, a method includes updating a user interface of a client device to present user interface controls that enable a user to specify data privacy settings that define how entities collect, store, and use data of the user. The data security system receives a request to modify a data privacy setting for one or more entities from the client device based on user interaction with one or more of the user interface controls. The request includes an ephemeral user identifier for the user and an attestation token. The data security system validates the request using at least the ephemeral user identifier and the attestation token. The data security system transmits data instructing the entity to modify usage of the user data based on the modified given data privacy setting to each of the one or more entities.

Cryptographically secure request verification

Methods, systems, and apparatus, including computer programs encoded on a computer storage medium, for selecting and distributing digital components to client devices in ways that protect user privacy and confidential data of content platforms and/or digital component providers are described. In one aspect, a method includes receiving, by a secure distribution system and from a client device of a user, a digital component request that includes, for each of multiple content platforms that distribute digital components to users, a corresponding user embedding comprising weights indicative of the relevance of multiple features to the user. The secure distribution system provides each user embedding as input to a respective isolated execution environment for the content platform corresponding to the user embedding, wherein the secure distribution system hosts each isolated execution environment. Digital component selection data generated based on the user embedding is received from each isolated execution environment.

Privacy preserving custom embeddings

This document relates to using secure MPC to select digital components in ways that preserve user privacy and protects the security of data of each party that is involved in the selection process. In one aspect, a method includes receiving, by a first server of a secure MPC system from a client device, a digital component request. The first server identifies, for each digital component in a set, a selection value and a priority tier. For each tier, the first server determines, using a secure MPC process in collaboration with one or more second servers of the secure MPC system, a first secret share of a winner parameter for each digital component in the priority tier. The first server identifies a highest tier for which a given digital component has a winner parameter that indicates that the given digital component is a winning digital component.

Flexible content selection processes using secure multi-party computation

This disclosure relates to verifying the trustworthiness of web applications. In one aspect, a method includes obtaining, by a browser of a client device, an electronic resource comprising code for a web application. The browser renders the electronic resource, including processing the code of the web application. The code causes the browser to initiate a request to a remote server. In response to processing the code, the request is generated and modified to include at least a portion of an integrity element for the web application. The modified request is sent to the remote server. A response to the request is received from the remote server. The response is based on the remote server verifying that the web application is trustworthy using the integrity element. Data is displayed based on the response.

Verifying the trustworthiness of web applications

Methods, systems, and apparatus, including medium-encoded computer program products, for secure workflows that enhance data security are described. In one aspect, a digital component request is received. In response to receiving the digital component request, a multi-stage workflow for selecting a digital component is identified, and can include customizable stages. The execution of workflow stages includes: (A) identifying a given customizable stage; (B) for the stage: (i) identifying, a customization specific to the stage that generates an output for use in selecting the digital component; (ii) initiating an isolated execution environment for each customization; (iii) executing, within each isolated execution environment, the customization for which the isolated execution environment was initiated; and (iv) obtaining the output generated by the code of each isolated execution environment; and (C) executing a final stage to select a digital component based on the outputs. The selected digital component is sent to the client device.

Secure workflows that enhance data security

This document describes systems and techniques for improving the integrity and protecting the security of information in content selection and distribution. In one aspect, a method includes receiving, by a first server of a secure multi-party computation (MPC) system from an application on a user device, a request for a digital component. The request is parsed into distinct sub-requests. Each sub-request is transmitted to a different server. A set of candidate selection values is received from a separate server. The first server performs, in collaboration with one or more second servers of the MPC system, a selection process to generate a selection result for a winning digital component, including merging, the first set of candidate selection values and a set of cached selection values to create a final set of candidate selection values and sorting the final set according to the values of the candidate selection values.

Using secure multi-party computation to improve content selection process integrity

Methods, systems, and apparatus, including computer programs encoded on a computer storage medium, for distributing digital component while securing user data are described. In one aspect, a method includes receiving, by a multi-platform server and from a client device, a request for a digital component for presentation by the client device. The request for the digital component includes (i) request data that is opaque to the multi-platform server, and (ii) sensitive user data that is managed by the client device. In response to receiving the request for the digital component, the multi-platform server transmits, to a first content platform, a contextual request that includes the request data from the client device and that does not include the sensitive user data. After transmitting the contextual request, the multi-platform server receives, from the first content platform, a contextual response that includes a selection data unit for a first repository of digital components.

Distributing digital components while securing user data

An LED-filament comprising: a partially light transmissive substrate; a plurality of LED chips on a front face of the substrate; a photoluminescence material that is in direct contact with and covers all of the plurality of LED chips; and a light scattering layer that is in direct contact with and covers at least the photoluminescence material, wherein the light scattering layer comprises particles of light scattering material, and wherein the photoluminescence material comprises broadband green to red photoluminescence materials and narrowband red photoluminescence material.

LED-filament comprising a light scattering material layer

Methods, systems, and apparatus, including an apparatus for verifying the integrity of requests and the devices that sent the requests. In some aspects, a method includes receiving, from a client device, a request including an attestation token generated by the client device. The attestation token includes a set of data that includes at least a public key of the client device, a token creation, and a device integrity token that includes a verdict. The attestation token also includes a digital signature of the set of data generated using a private key corresponding to the public key. The integrity of the request is verified using the attestation token by determining that the token creation time being within a threshold duration of the time at which the request was received, the set of data was not modified since the attestation token was created, and the verdict indicates the client device is trustworthy.

Protecting the integrity of communications from client devices

Growing community of inventors

San Diego, CA, United States of America

Gang Wang