SYSTEMS AND METHODS FOR IMPROVING PRECISION OF A LOCATION SENSOR

• US 20170026345A1
• Filed: 02/12/2016
• Published: 01/26/2017
• Est. Priority Date: 07/24/2015
• Status: Active Grant

• Current Assignee: Google LLC (Alphabet Inc.)
• Original Assignee: Google Inc. (Alphabet Inc.)
• Inventors: Salek, Mahyar, McDonnell, Philip, Charaniya, Amin, Saxena, Shobhit
• Granted Patent: US 10,142,296 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: H04L 2209/46 Secure multiparty computation, e.g. millionaire problem
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/0478 applying multiple layers of encryption, e.g. nested tunnels or encrypting the content with a first key and then with at least a second key cryptographic mechanisms or cryptographic arrangements using a plurality of keys or algorithms H04L9/14
• CPC Class Codes: H04L 9/0872 using geo-location information, e.g. location data, time, relative position or proximity to other entities
• CPC Class Codes: H04W 12/033 of the user plane, e.g. user's traffic
• CPC Class Codes: H04W 4/022 with dynamic range variability

Abstract

Systems and methods of cryptographically protecting location data transferred between servers via a network to tune a location engine are described herein. A first encryption module determines a first hash value for each location determination, encrypts the first hash value for each location determination using a first encryption protocol to generate a first encrypted data set, and transmits the first encrypted data set to a server. The first encryption module receives, from the server, a second encrypted data set with second hash values generated by a second encryption module of the server using a second encryption protocol. The first encryption module creates a first double encrypted data set from the second encrypted data set. A tuner compares the first double encrypted data set with a second double encrypted data set received from the server to adjust the location engine.

Claims

1. A system that cryptographically protects location data transferred between a plurality of servers via a computer network to tune a location engine, comprising:

a bridging module executed by one or more processors of a data processing system to retrieve, from a location database stored in memory, a plurality of location determinations made by the location engine of the data processing system, each location determination associated with a respective first identifier;

the bridging module configured to map each respective first identifier to a respective second identifier using a mapping function;

a first encryption module executed by the one or more processors to determine a first hash value for each location determination using a first hash function applied to a tuple formed of the second identifier and a timestamp of each location determination;

the first encryption module configured to encrypt the first hash value for each location determination using a first encryption protocol to generate a first encrypted data set;

a communication interface of the data processing system to transmit, via the computer network, the first encrypted data set to one or more servers configured to process electronic transactions;

the communication interface configured to receive, from the one or more servers, a second encrypted data set comprising second hash values generated by a second encryption module for the electronic transactions, each of the second hash values generated by the second encryption module via application of a second hash function to a tuple formed of an identifier and a timestamp of each of the electronic transactions, the second encrypted data set encrypted by the second encryption module with a second encryption protocol, wherein the first encryption protocol and the second encryption protocol are commutative encryption protocols;

the first encryption module configured to use the first encryption protocol to encrypt the second encrypted data set received from the one or more servers to generate a first double encrypted data set;

the communication interface configured to receive, from the one or more servers, a second double encrypted data set generated by the second encryption module via application of the second encryption protocol to the first encrypted data set transmitted by the data processing system to the one or more servers;

a tuner executed by the one or more processors to compare the first double encrypted data set with the second double encrypted data set to determine a precision metric and a recall metric based on a total number of correct location determinations, a total number of location determinations, and a total number of actual location events; and

the tuner configured to adjust a tuning parameter of the location engine based on at least one of the precision metric or the recall metric.

2. The system of claim 1, comprising the location engine configured to:

receive, via a network interface of a portable device, geographic coordinates determined by a sensor of the portable device;

determine, based on the geographic coordinates, a location of the portable device; and

store, in the location database, the location of the portable device.

3. The system of claim 1, comprising:

the communication interface configured to receive, via a network interface of a portable device, location information determined via at least two of a global positioning sensor of the portable device, a wireless network interface of the portable device, cell phone tower triangulation, or a beacon;

the location engine configured to determine, based on the location information, a location of the portable device; and

the location engine configured to store, in the location database, the location of the portable device.

4. The system of claim 1, comprising the tuner configured to:

determine the total number of correct location determinations based on a number of entries of the second double encrypted data set that match entries of the first double encrypted data set;

determine the total number of location determinations based on a number of entries of the second double encrypted data set; and

determine the precision metric by dividing the total number of correct location determinations by the total number of location determinations.

5. The system of claim 1, comprising the tuner configured to:

determine the total number of correct location determinations based on a number of entries of the second double encrypted data set that match entries of the first double encrypted data set;

determine the total number of location determinations based on a number of entries of the second double encrypted data set; and

determine the precision metric by dividing the total number of correct location determinations by a product of the total number of location determinations and an electronic transaction rate.

6. The system of claim 1, comprising the tuner configured to:

determine the total number of correct location determinations based on a number of entries of the second double encrypted data set that match entries of the first double encrypted data set;

determine the total number of actual location events based on a number of entries of the first double encrypted data set; and

determine the recall metric by dividing the total number of correct location determinations by the total number of actual location events.

7. The system of claim 1, comprising the first encryption module configured to:

apply a predetermined quantization to the timestamp of each location determination prior to determination of the hash value for each location determination.

8. The system of claim 7, wherein the second encrypted data set comprising the second hash values is generated by the second encryption module configured to apply the predetermined quantization to the time stamp of each of the electronic transactions prior to generation of the second hash values.

9. The system of claim 7, comprising the first encryption module configured to:

receive the predetermined quantization from the one or more servers.

10. The system of claim 1, comprising the tuner configured to:

determine the precision metric is less than a threshold; and

adjust, responsive to the precision metric less than the threshold, the tuning parameter of the location engine to cause the location engine to increase a minimum number or quality of location information sources used by the location engine to make the plurality of location determinations.

11. The system of claim 1, comprising the tuner configured to:

determine the precision metric is less than a threshold; and

adjust, responsive to the precision metric less than the threshold, the tuning parameter of the location engine to increase a cluster time threshold used by the location engine to make the plurality of location determinations.

12. The system of claim 1, comprising the tuner configured to:

determine the recall metric is less than a threshold; and

adjust, responsive to the recall metric less than the threshold, the tuning parameter of the location engine to cause the location engine to increase a frequency of location pings used by the location engine to make the plurality of location determinations.

13. The system of claim 1, comprising the tuner to:

determine the recall metric is less than a threshold; and

adjust, responsive to the recall metric less than the threshold, the tuning parameter of the location engine to decrease a cluster distance threshold used by the location engine to make the plurality of location determinations.

14. A method of cryptographically protecting location data transferred between a plurality of servers via a computer network to tune a location engine, comprising:

retrieving, by a bridging module executed by one or more processors of a data processing system, from a location database stored in memory, a plurality of location determinations made by the location engine of the data processing system, each location determination associated with a respective first identifier;

mapping, by the bridging module, each respective first identifier to a respective second identifier using a mapping function;

determining, by a first encryption module executed by the one or more processors, a first hash value for each location determination using a first hash function applied to a tuple formed of the second identifier and a timestamp of each location determination;

encrypting, by the first encryption module, the first hash value for each location determination using a first encryption protocol to generate a first encrypted data set;

transmitting, by a communication interface of the data processing system, via the computer network, the first encrypted data set to one or more servers configured to process electronic transactions;

receiving, by the communication interface, from the one or more servers, a second encrypted data set comprising second hash values generated by a second encryption module for the electronic transactions, each of the second hash values generated by the second encryption module via application of a second hash function to a tuple formed of an identifier and a timestamp of each of the electronic transactions, the second encrypted data set encrypted by the second encryption module with a second encryption protocol, wherein the first encryption protocol and the second encryption protocol are commutative encryption protocols;

using, by the first encryption module, the first encryption protocol to encrypt the second encrypted data set received from the one or more servers to generate a first double encrypted data set;

receiving, by the communication interface, from the one or more servers, a second double encrypted data set generated by the second encryption module via application of the second encryption protocol to the first encrypted data set transmitted by the data processing system to the one or more servers;

comparing, by a tuner executed by the one or more processors, the first double encrypted data set with the second double encrypted data set to determine a precision metric and a recall metric based on a total number of correct location determinations, a total number of location determinations, and a total number of actual location events; and

adjusting, by the tuner, a tuning parameter of the location engine based on at least one of the precision metric or the recall metric.

15. The method of claim 14, comprising:

receiving, by the data processing system via a network interface of a portable device, geographic coordinates determined by a sensor of the portable device;

determining, by the data processing system, based on the geographic coordinates, a location of the portable device; and

storing, by the data processing system in the location database, the location of the portable device.

16. The method of claim 14, comprising:

receiving, by the data processing system via a network interface of a portable device, location information determined via at least two of a global positioning sensor of the portable device, a wireless network interface of the portable device, cell phone tower triangulation, or a beacon;

determine, by the data processing system based on the location information, a location of the portable device; and

storing, by the data processing system in the location database, the location of the portable device.

17. The method of claim 14, comprising:

determining, by the data processing system, the total number of correct location determinations based on a number of entries of the second double encrypted data set that match entries of the first double encrypted data set;

determining, by the data processing system, the total number of location determinations based on a number of entries of the second double encrypted data set; and

determining, by the data processing system, the precision metric by dividing the total number of correct location determinations by the total number of location determinations.

18. The method of claim 14, comprising:

determining, by the data processing system, the total number of correct location determinations based on a number of entries of the second double encrypted data set that match entries of the first double encrypted data set;

determining, by the data processing system, the total number of location determinations based on a number of entries of the second double encrypted data set; and

determining, by the data processing system, the precision metric by dividing the total number of correct location determinations by a product of the total number of location determinations and an electronic transaction rate.

19. The method of claim 14, comprising:

determining, by the data processing system, the total number of correct location determinations based on a number of entries of the second double encrypted data set that match entries of the first double encrypted data set;

determining, by the data processing system, the total number of actual location events based on a number of entries of the first double encrypted data set; and

determining, by the data processing system, the recall metric by dividing the total number of correct location determinations by the total number of actual location events.

20. The method of claim 14, comprising:

applying, by the data processing system, a predetermined quantization to the timestamp of each location determination prior to determination of the hash value for each location determination.