Technologies for collecting advertising statistics in a privacy sensitive manner

• US 10,037,544 B2
• Filed: 12/18/2013
• Issued: 07/31/2018
• Est. Priority Date: 12/18/2013
• Status: Active Grant

• Current Assignee: Intel Corporation
• Original Assignee: Intel Corporation
• Inventors: Smith, Ned M., Sheller, Nathan Heldt
• Primary Examiner(s): Cao, Vincent M
• Application Number:
  US14/360,118
• Publication Number:
  US 20150170197A1
• Time in Patent Office: 1,686 Days
• CPC Class Codes: G06Q 2220/00 Business processing using cryptography postage metering system using cryptography G06Q2250/05
• CPC Class Codes: G06Q 30/0242 Determining effectiveness of advertisements
• CPC Class Codes: H04L 2209/46 Secure multiparty computation, e.g. millionaire problem
• CPC Class Codes: H04L 9/008 involving homomorphic encryption

Abstract

Generally, this disclosure provides technologies for collecting ad statistics in a privacy sensitive manner. In some embodiments the technology includes a system which includes a plurality of client devices, each hosting a context information management (CIMM) module in a secure processing environment. Each CIMM may be operable to select ads for display and calculate statistics for each of the selected ads. The CIMMs may generate a vector representative of those statistics, and may encrypt that vector using additive homomorphic encryption. The encrypted vector may be associated with a statistics collection counter, which may be incremented each time an encrypted vector is calculated. Each CIMM may compare the incremented counter value to a threshold, and may distribute the encrypted vector to another CIMM for further statistical tabulation if the incremented value is less than the threshold. In this way, the technologies described may ensure that a minimum statistical sample size is collected prior to the transmission of ad statistics to an ad network or advertiser, potentially maintaining or protecting user privacy.

Claims

1. A system for collecting advertising statistics, the system comprising a first client device comprising an ad publisher and a secure processing environment, the secure processing environment comprising a context information management circuitry (CIMC) that is operable to:

compute, within said secure processing environment, ad statistics for each advertisement of a plurality of advertisements that is delivered to said ad publisher for display on said first client device;

collect each of said ad statistics into a statistics collection;

correlate the statistics collection to a statistics collection counter;

encrypt, within said secure processing environment, said of ad statistics using additive homomorphic encryption, so as to produce encrypted ad statistics;

increment said statistics collection counter such that it has an incremented value; and

compare the incremented value to a threshold statistics collection value;

wherein if said incremented value is less than said threshold statistics collection value, said CIMC is further operable to;

authenticate a second client device;

upon authenticating the second client device, establish a secure communication link between said first client device and said second client device;

transmit said encrypted ad statistics and said incremented counter value to said second client device via said secure communication link;

compute, within said secure processing environment, ad statistics for each advertisement of a plurality of advertisements that is delivered to said ad publisher for display on said second client device;

collect each of said ad statistics into said statistics collection;

encrypt, within said secure processing environment, said ad statistics using additive homomorphic encryption, so as to produce encrypted ad statistics;

increment said previously incremented statistics collection counter such that it has a further incremented value; and

compare said further incremented value to the threshold statistics collection value; and

if said incremented value is greater than or equal to said threshold statistics collection value, said CIMC is further operable to transmit said encrypted ad statistics to an ad network.

2. The system of claim 1, wherein said secure processing environment is selected from the group consisting of a trusted execution environment (TEE), a memory enclave, or a combination thereof.

3. The system of claim 1, wherein said CIMC is operable to compute said first ad statistics with the following operations comprising:

computing a vector for each of said plurality of ads, wherein a value of said vector is indicative of whether a respective one of said plurality of advertisements has been delivered to said ad publisher for display on said first client device; and

multiplying each value of said vector with cost information for an advertisement to which said value pertains, so as to obtain a plurality of multiplied vector values, each multiplied vector value corresponding to one of said plurality of advertisements.

4. The system of claim 3, wherein said CIMC encrypts said ad statistics by at least encrypting said plurality of multiplied vector values using said additive homomorphic encryption.

5. The system of any claim 1, wherein said CIMC is further operable to receive at least a first public homomorphic encryption key (first PAHEK), and to perform said additive homomorphic encryption at least in part with said first PAHEK.

6. The system of claim 5, wherein said first PAHEK is associated with advertisements produced by a first advertiser of a plurality of advertisers participating in said ad network.

7. The system of claim 1, wherein:

said plurality of advertisements include at least first advertisements from a first advertiser and second advertisements from a second advertiser, wherein said first advertisements are associated with a first public additive homomorphic encryption key (PAHEK) and said second advertisements are associated with a second PAHEK;

said ad statistics comprise first ad statistics for said first advertisements and second ad statistics for said second advertisements; and

said CIMC is further operable to encrypt said first ad statistics with said first PAHEK and said second ad statistics with said second PAHEK, respectively, so as to produce first and second encrypted ad statistics.

8. The system of claim 7, wherein said first and second ad statistics are associated with first and second statistics collection counters, respectively;

and said CIMC is further operable to;

increment said first and second statistics collection counters such that they have a first incremented value and a second incremented value respectively; and

compare the first and second incremented values to respective first and second threshold statistics collection values;

wherein if;

said first incremented value is less than said first threshold statistics collection value, said CIMC is further operable to transmit said first encrypted ad statistics to said second client device;

said first incremented value is greater than or equal to said first threshold statistics collection value, said CIMC is further operable to transmit said first encrypted ad statistics to said ad network;

said second incremented value is less than said second threshold statistics collection value, said CIMC is further operable to transmit said first encrypted ad statistics to said second client device; and

said second incremented value is greater than or equal to said second threshold statistics collection value, said CIMC is further operable to transmit said first encrypted ad statistics to said ad network.

9. A method for collecting ad statistics with a first client device comprising an ad publisher and a secure processing environment, comprising:

receiving a plurality of advertisements within said secure processing environment;

within said secure processing environment, computing ad statistics for each advertisement that is delivered to said ad publisher for display on said first client device;

collecting each of said ad statistics into a statistics collection;

correlating the statistics collection to a statistics collection counter;

encrypting, within said secure processing environment, said ad statistics using additive homomorphic encryption, thereby producing encrypted ad statistics;

incrementing said statistics collection counter such that it has an incremented value;

comparing the incremented value to a threshold statistics collection value;

when said incremented value is determined to be less than said threshold statistics collection value;

authenticating a second client device;

upon authenticating the second client device, establishing a secure communication link between said first client device and said second client device;

transmitting said first encrypted ad statistics and said incremented counter value to said second client device via said secure communication link;

computing within said secure processing environment, ad statistics for each advertisement of a plurality of advertisements that is delivered to said ad publisher for display on said second client device;

collecting each of said ad statistics into said statistics collection;

encrypting, within said secure processing environment, said ad statistics using additive homomorphic encryption, so as to produce encrypted ad statistics;

incrementing said previously incremented statistics collection counter such that it has a further incremented value; and

comparing said further incremented value to the threshold statistics collection value; and

transmitting said encrypted ad statistics to an ad network when said incremented value is greater than or equal to said threshold statistics collection value.

10. The method of claim 9, wherein said secure processing environment is selected from the group consisting of a trusted execution environment (TEE), a memory enclave, or a combination thereof.

11. The method of claim 9, wherein computing said ad statistics comprises:

computing a vector for each of said plurality of ads, wherein a value of said vector is indicative of whether a respective one of said plurality of advertisements has been delivered to said ad publisher for display on said first client device; and

multiplying each value of said vector with cost information for an advertisement to which said value pertains, so as to obtain a plurality of multiplied vector values, each multiplied vector value corresponding to one of said plurality of advertisements.

12. The method of claim 11, wherein encrypting said ad statistics comprises encrypting said plurality of multiplied vector values using said additive homomorphic encryption.

13. The method of claim 9, further comprising:

receiving a first public homomorphic encryption key (first PAHEK) within said secure processing environment; and

performing said additive homomorphic encryption at least in part with said first PAHEK.

14. The method of claim 13, wherein said first PAHEK is received from said ad network.

15. The method of claim 13, wherein said first PAHEK is associated with advertisements produced by a first advertiser of a plurality of advertisers participating in said ad network.

16. The method of claim 9, further comprising establishing a secure communications channel with said ad network or said second client device, prior to transmitting said encrypted ad statistics.

17. A computer readable storage medium having instructions stored thereon which when executed by a processor result in the following operations for collecting ad statistics with a first client device comprising an ad publisher and a secure processing environment:

receiving a plurality of advertisements within said secure processing environment;

within said secure processing environment, computing ad statistics for each advertisement that is delivered to said ad publisher for display on said first client device;

collecting each of said ad statistics into a statistics collection;

correlating the statistics collection to a statistics collection counter;

encrypting, within said secure processing environment, said ad statistics using additive homomorphic encryption, thereby producing encrypted ad statistics;

incrementing said statistics collection counter such that it has an incremented value;

comparing the incremented value to a threshold statistics collection value;

when said incremented value is determined to be less than said threshold statistics collection value;

authenticating a second client device;

upon authenticating the second client device, establishing a secure communication link between said first client device and said second client device;

transmitting said first encrypted ad statistics and said incremented counter value to said second client device via said secure communication link;

computing within said secure processing environment, ad statistics for each advertisement of a plurality of advertisements that is delivered to said ad publisher for display on said second client device;

collecting each of said ad statistics into said statistics collection;

encrypting, within said secure processing environment, said ad statistics using additive homomorphic encryption, so as to produce encrypted ad statistics;

incrementing said previously incremented statistics collection counter such that it has a further incremented value; and

comparing said further incremented value to the threshold statistics collection value; and

transmitting said encrypted ad statistics to an ad network when said incremented value is greater than or equal to said threshold statistics collection value.

18. The computer readable storage medium of claim 17, wherein said secure processing environment is selected from the group consisting of a trusted execution environment (TEE), a memory enclave, or a combination thereof.

19. The computer readable storage medium of claim 17, wherein said computing ad statistics comprises:

computing a vector for each of said plurality of ads, wherein a value of said vector is indicative of whether a respective one of said plurality of advertisements has been delivered to said ad publisher for display on said first client device; and

multiplying each value of said vector with cost information for an advertisement to which said value pertains, so as to obtain a plurality of multiplied vector values, each multiplied vector value corresponding to one of said plurality of advertisements.

20. The computer readable storage medium of claim 19, wherein encrypting said ad statistics comprises encrypting said plurality of multiplied vector values using said additive homomorphic encryption.

21. The computer readable storage medium of claim 17, wherein said instructions when executed by said processor result in the following additional operations comprising:

receiving a first public homomorphic encryption key (first PAHEK) within said secure processing environment; and

performing said additive homomorphic encryption at least in part with said first PAHEK.

22. The computer readable medium of claim 21, wherein said instructions when executed by said processor result in the following additional operations comprising:

receiving said first PAHEK from said ad network.

23. The computer readable medium of claim 21, wherein said first PAHEK is associated with advertisements produced by a first advertiser of a plurality of advertisers participating in said ad network.

24. The computer readable medium of claim 17, wherein said instructions when executed by said processor result in the following additional operations comprising:

establishing a secure communications channel with said ad network or said second client device, prior to transmitting said encrypted ad statistics.