KEY PAIR PLATFORM AND SYSTEM TO MANAGE FEDERATED TRUST NETWORKS IN DISTRIBUTED ADVERTISING

• US 20170207916A1
• Filed: 04/03/2017
• Published: 07/20/2017
• Est. Priority Date: 03/15/2013
• Status: Active Grant

• Current Assignee: Commerce Signals Inc.
• Original Assignee: Commerce Signals Inc.
• Inventors: Cook, Rodney C., Noyes, Thomas, Luce, Marc
• Granted Patent: US 10,771,247 B2
• Time in Patent Office: Days
• CPC Class Codes: G06F 16/254 Extract, transform and load [ETL] procedures, e.g. ETL data flows in data warehouses
• CPC Class Codes: G06F 21/6254 by anonymising data, e.g. decorrelating personal data from the owner's identification
• CPC Class Codes: G06F 21/6263 during internet communication, e.g. revealing personal data from cookies
• CPC Class Codes: G06Q 30/0201 Market modelling; Market analysis; Collecting market data
• CPC Class Codes: G06Q 30/0202 Market predictions or forecasting for commercial activities
• CPC Class Codes: G06Q 30/0206 Price or cost determination based on market factors
• CPC Class Codes: G06Q 30/0244 Optimization
• CPC Class Codes: G06Q 30/0277 Online advertisement
• CPC Class Codes: G06Q 30/06 Buying, selling or leasing transactions
• CPC Class Codes: G06Q 30/0611 Request for offers or quotes
• CPC Class Codes: G06Q 30/08 Auctions
• CPC Class Codes: H04L 2209/42 Anonymization, e.g. involving pseudonyms
• CPC Class Codes: H04L 9/14 using a plurality of keys or algorithms

Abstract

Systems and methods are provided for object identifier translation using a key pairs platform in a virtualized or cloud-based computing system. A key pair refers to a pair of identifiers held by an entity. Each key pair includes at least one anonymized object identifier. Advantageously, the key pair system protects privacy and provides anonymity for objects by not disclosing the identity of the objects or the underlying data associated with the objects.

Claims

1. A key pair platform system for facilitating secure electronic exchange of anonymized data comprising:

a source set of anonymized object identifiers mapped to a source set of virtual internally held object identifiers, the source set of virtual internally held object identifiers corresponding to a source set of object information for a set of objects;

a destination set of anonymized object identifiers mapped to a destination set of virtual internally held object identifiers, the destination set of virtual internally held object identifiers corresponding to a destination set of object information for the set of objects;

a virtual key pair platform server computer operable to perform an object identifier translation between the source set of anonymized object identifiers and the destination set of anonymized object identifiers upon receiving a permission file over a network authorizing the object identifier translation;

wherein the source set of anonymized object identifiers and the destination set of anonymized object identifiers are anonymized such that individual identities of objects in the set of objects are not disclosed by the source set of anonymized object identifiers or the destination set of anonymized object identifiers; and

wherein the virtual key pair platform server computer does not receive the source set of virtual internally held object identifiers or the destination set of virtual internally held object identifiers.

2. The system of claim 1, wherein the source set of virtual internally held object identifiers is electronically held by at least one source computer connected to the virtual key pair platform server computer over the network, wherein the destination set of virtual internally held object identifiers is electronically held by at least one destination computer connected to the virtual key pair platform server computer over the network, wherein the source set of anonymized object identifiers and the source set of virtual internally held object identifiers are never sent to the at least one destination computer and wherein the destination set of anonymized object identifiers and the destination set of virtual internally held object identifiers are never sent to the at least one source computer.

3. The system of claim 1, wherein the virtual key pair platform server computer performs the object identifier translation using a key pair table, where the virtual key pair platform server computer maintains a separate key pair table for each source set of anonymized object identifiers and each destination set of anonymized object identifiers.

4. The system of claim 1, wherein the source set of anonymized object identifiers and the destination set of anonymized object identifiers are not encrypted, wherein no private key or public key is associated with the source set of anonymized object identifiers or the destination set of anonymized object identifiers, and wherein underlying data associated with the source set of anonymized object identifiers and the destination set of anonymized object identifiers cannot be derived through the source set of anonymized object identifiers or the destination set of anonymized object identifiers.

5. The system of claim 1, wherein the source set of anonymized object identifiers is only disclosed to at least one source computer, an identity broker computer, and the virtual key pair platform server computer, thereby providing anonymity, security, and privacy for the set of objects.

6. The system of claim 1, wherein the destination set of anonymized object identifiers is only disclosed to at least one destination computer, an identity broker computer, and the virtual key pair platform server computer, thereby providing anonymity and security for the set of objects.

7. The system of claim 1, further comprising a report constructed based on the destination set of virtual internally held object identifiers, wherein the report does not disclose the destination set of virtual internally held object identifiers or any raw data associated with the destination set of virtual internally held object identifiers.

8. The system of claim 1, wherein the source set of anonymized object identifiers and the destination set of anonymized object identifiers are transferred between the virtual key platform server and other devices on the network as Extensible Markup Language (XML) files.

9. The system of claim 1, wherein the source set of anonymized object identifiers is constructed at a first identity broker computer and the destination set of anonymized object identifiers is constructed at a second identity broker computer.

10. The system of claim 1, wherein the at least one permission file includes a permission file from at least one source computer, a permission file from at least one destination computer, and at least one permission file from at least one identity broker computer.

11. A method for facilitating secure electronic exchange of anonymized data via a key pair platform comprising:

a virtual key value pair platform server computer receiving a request over a network for a report for a set of objects, wherein the request includes a source set of anonymized object identifiers, at least one permission file, and at least one destination;

the virtual key pair platform server computer performing object identifier translation on the source set of anonymized object identifiers to convert the source set of anonymized object identifiers to a destination set of anonymized object identifiers; and

based upon the destination set of anonymized object identifiers, the key pair platform receiving the report for the set of objects,

wherein each anonymized object identifier in the source set of anonymized object identifiers is mapped to source virtual internally held object identifiers;

wherein each anonymized object identifier in the destination set of anonymized object identifiers is mapped to destination virtual internally held object identifiers; and

wherein the platform does not receive any source virtual internally held object identifiers, any destination virtual internally held object identifiers, raw data, or underlying data for any object.

12. The method of claim 11, wherein the source virtual internally held object identifiers is electronically held by the at least one source computer connected to the virtual key pair platform server computer over the network and wherein the destination virtual internally held object identifiers is electronically held by the at least one destination computer connected to the virtual key pair platform server computer over the network, wherein the source set of anonymized object identifiers and the source virtual internally held object identifiers are never sent to the at least one destination computer and wherein the destination set of anonymized object identifiers and the destination virtual internally held object identifiers are never sent to the at least one source computer.

13. The method of claim 11, further comprising:

the virtual key pair platform server computer sending the destination set of anonymized object identifiers to the at least one destination computer;

upon receiving the report based on the destination set of anonymized object identifiers from the at least one destination computer, the virtual key pair platform server computer sending the report to the at least one source computer connected to the virtual key pair platform over the network, wherein the report does not disclose any virtual internally held object identifiers, raw data, or underlying data relating to the set of objects and protects anonymity of the set of objects.

14. The method of claim 11, wherein the source set of anonymized object identifiers and the destination set of anonymized object identifiers are not encrypted, wherein no private key or public key is associated with the source set of anonymized object identifiers or the destination set of anonymized object identifiers, and wherein underlying data associated with the source set of anonymized object identifiers and the destination set of anonymized object identifiers cannot be derived through the source set of anonymized object identifiers or the destination set of anonymized object identifiers.

15. The method of claim 11, wherein the source set of anonymized object identifiers is only disclosed to the at least one source computer, an identity broker computer, and the virtual key pair platform server computer, thereby providing anonymity and security for the set of objects.

16. The method of claim 11, wherein the destination set of anonymized object identifiers is only disclosed to the at least one destination computer, an identity broker computer, and the virtual key pair platform server computer, thereby providing anonymity and security for the set of objects.

17. The method of claim 11, wherein the report does not disclose the set of destination virtual internally held object identifiers or any raw data underlying the set of destination virtual internally held object identifiers.

18. The method of claim 11, wherein the virtual key pair platform server computer performs the object identifier translation using a key pair table, where the virtual key pair platform server computer maintains a separate key pair table for each source set of anonymized object identifiers and each destination set of anonymized object identifiers.

19. The method of claim 11, wherein the source set of anonymized object identifiers is constructed at a first identity broker computer and the destination set of anonymized object identifiers is constructed at a second identity broker computer.

20. The method of claim 11, wherein the at least one permission file includes a permission file from the at least one source computer, a permission file from the at least one destination computer, and at least one permission file from at least one identity broker computer.