Anonymous aggregated data collection

• US 7,444,655 B2
• Filed: 06/11/2002
• Issued: 10/28/2008
• Est. Priority Date: 06/11/2002
• Status: Expired due to Fees

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Corporation
• Inventors: Sardera, Esteban
• Primary Examiner(s): Kelley, Chris
• Assistant Examiner(s): Hicks, Charles N
• Application Number:
  US10/171,200
• Publication Number:
  US 20030229892A1
• Time in Patent Office: 2,331 Days
• Field of Search: 725/9, 725/10, 725/11, 725/12, 725/13, 725/14, 725 15- 21
• US Class Current: 725/9
• CPC Class Codes: H04N 21/252 Processing of multiple end-users' preferences to derive collaborative data
• CPC Class Codes: H04N 21/44224 Monitoring of user activity on external systems, e.g. Internet browsing
• CPC Class Codes: H04N 21/6156 specially adapted to the upstream path of the transmission network
• CPC Class Codes: H04N 21/6582 Data stored in the client, e.g. viewing habits, hardware capabilities, credit card number arrangements where receivers interact with the broadcast H04H20/38
• CPC Class Codes: H04N 7/17309 Transmission or handling of upstream communications

Abstract

An anonymous aggregated data collection system aggregates media access information in an anonymous data collection component without associating the media access information with any one particular client device. The anonymous data collection component further prevents a network operator, content provider, or third party from correlating the media access information obtained from a client device with any one particular subscriber by comparing a unique identifier of the client device with corresponding subscription account and subscriber personal identification information.

Claims

1. A data collection system, comprising:

client devices each configured to receive content from a content provider;

a first client device configured to perform a method comprising;

receiving an anonymous data collection component from a second client device, the anonymous data collection component having aggregated media access information for one or more additional client devices, wherein the aggregated media access information in the anonymous data collection component is configured to maintain anonymity in terms of the one or more client devices from which each of the media access information is received;

storing media access information of the first client device in the anonymous data collection component, wherein the media access information of tile first client device in the anonymous data collection component is configured to maintain anonymity in terms of the first client device;

determining whether each client device identified in a set of unique identifiers has received the anonymous data collection component;

selecting randomly a third client device from the set of unique identifiers if the third client device has not received the anonymous data collection component; and

communicating the anonymous data collection component to the third client device.

2. A data collection system as recited in claim 1, wherein the method further comprises encrypting the anonymous data collection component to generate an encrypted data structure;

and communicating the encrypted data structure to the third client device.

3. A data collection system, comprising:

client devices each configured to receive content from a content provider;

a first client device configured to;

create an anonymous data collection component to maintain aggregated media access information for one or more of the client devices, wherein the aggregated media access information in the anonymous data collection component is configured to maintain anonymity in terms of the one or more of the client devices from which each of the media access information is received;

randomly select a second client device to receive the anonymous data collection component; and

communicate the anonymous data collection component to the second client device.

4. A data collection system as recited in claim 3, wherein the first client device is further configured to store media access information of the first client device in the anonymous data collection component, and wherein the media access information of the first client device is configured to maintain anonymity in terms of the first client device.

5. A data collection system as recited in claim 3, wherein the first client device is further configured to store viewer profile data associated with the first client device in the anonymous data collection component.

6. A data collection system as recited in claim 3, wherein the first client device is further configured to store random media access information in the anonymous data collection component.

7. A data collection system as recited in claim 3, wherein the first client device is further configured to:

store media access information of the first client device in the anonymous data collection component, wherein the media access information of the first client device is configured to maintain anonymity in terms of the first client device; and

store random media access information in the anonymous data collection component to obscure the media access information of the first client device.

8. A data collection system as recited in claim 3, wherein the first client device is further configured to:

request a unique identifier corresponding to the second client device;

receive the unique identifier; and

communicate the anonymous data collection component to the second client device based on the unique identifier.

9. A data collection system as recited in claim 8, wherein the first client device is further configured to receive an email address as the second client device unique identifier, and email the anonymous data collection component to the second client device.

10. A data collection system as recited in claim 8, wherein the first client device is further configured to receive an Internet protocol address as the second client device unique identifier.

11. A data collection system as recited in claim 8, wherein the first client device is further configured to:

request a public key corresponding to the second client device from a key server;

receive the public key and an email address as the second client device unique identifier;

encrypt the anonymous data collection component with the public key to generate an encrypted data structure; and

email the encrypted data structure to the second client device.

12. A data collection system as recited in claim 8, wherein the first client device is further configured to:

request a public key corresponding to the second client device from a key server;

receive the public key and an Internet protocol address as the second client device unique identifier;

encrypt the anonymous data collection component with the public key to generate an encrypted data structure; and

communicate the encrypted data structure to the second client device.

13. A data collection system as recited in claim 3, wherein the first client device is further configured to receive a set of unique identifiers, each unique identifier corresponding to a client device and the second client device randomly selected from the set of unique identifiers.

14. A data collection system as recited in claim 13, wherein the first client device is further configured to store the set of unique identifiers in the anonymous data collection component.

15. A television-based entertainment system comprising the data collection system as recited in claim 3.

16. A digital video recording system comprising the data collection system as recited in claim 3.

17. A personal video recording system comprising the data collection system as recited in claim 3.

18. A data collection system, comprising:

client devices, each configured to receive content from a content provider and execute a data collection application;

each data collection application configured to perform a method comprising;

receiving an anonymous data collection component from a client device;

storing media access information of a corresponding client device in the anonymous data collection component, the anonymous data collection component configured to maintain aggregated media access information for one or more of the client devices, wherein the aggregated media access information in the anonymous data collection component is configured to maintain anonymity in terms of the one or more client devices from which each of the media access information is received;

determining from a set of unique identifiers each corresponding to a client device whether each client device identified in the set of unique identifiers has received the anonymous data collection component;

selecting randomly a recipient client device from the set of unique identifiers if each client device identified in the set of unique identifiers has not received the anonymous data collection component; and

communicating the anonymous data collection component to the recipient client device.

19. A data collection system as recited in claim 18, wherein the method further comprises encrypting the anonymous data collection component to generate an encrypted data structure before communicating the encrypted data structure to the recipient client.

20. A data collection system as recited in claim 19, wherein the encrypting anonymous data collection component is performed by using a public key corresponding to the recipient client device, and wherein the public key corresponding to the recipient client device is requested from a key server.

21. A data collection system as recited in claim 18, wherein the method further comprises:

creating a second anonymous data collection component to maintain aggregated media access information for one or more of the client devices;

storing media access information of the corresponding client device in the second anonymous data collection component, wherein the media access information of the corresponding client device in the second anonymous data collection component is configured to maintain anonymity in terms of the corresponding client device; and

communicating the second anonymous data collection component to a randomly selected recipient client device.

22. A data collection system as recited in claim 21, wherein the method further comprises storing viewer profile data associated with the corresponding client device in the second anonymous data collection component.

23. A data collection system as recited in claim 21, wherein the method further comprises requesting a unique identifier corresponding to the recipient client device and communicate the second anonymous data collection component to the recipient client device based on the unique identifier.

24. A data collection system as recited in claim 21, wherein the method further comprises:

requesting a public key corresponding to the recipient client device from a key Server;

requesting an address identifier from an address server;

receiving the address identifier and the public key;

encrypting the second anonymous data collection component with the public key to generate an encrypted data structure; and

communicating the encrypted data structure to the recipient client device.

25. A method for anonymously collecting data, comprising:

creating an anonymous data collection component to maintain aggregated media access information for one or more client devices, wherein the aggregated media access information in the anonymous data collection component is configured to maintain anonymity in terms of the one or more client devices from which each of the media access information is received;

randomly selecting a client device to receive the anonymous data collection component; and

communicating the anonymous data collection component to the client device.

26. A method for anonymously collecting data as recited in claim 25, further comprising storing media access information in the anonymous data collection component, the media access information to be stored in the anonymous data collection component is configured to maintain anonymity in terms of a client device from which the media access information is received.

27. A method for anonymously collecting data as recited in claim 25, further comprising storing viewer profile data in the anonymous data collection component.

28. A method for anonymously collecting data as recited in claim 25, further comprising storing random media access information in the anonymous data collection component.

29. A method for anonymously collecting data as recited in claim 25, further comprising:

storing media access information in the anonymous data collection component, wherein the media access information to be stored in the anonymous data collection component is configured to maintain anonymity in terms of a client device from which the media access information is received; and

storing random media access information in the anonymous data collection component to obscure the media access information.

30. A method for anonymously collecting data as recited in claim 25, further comprising receiving a set of unique identifiers from a content provider, each unique identifier corresponding to the one or more client devices and the client device randomly selected from the set of unique identifiers.

31. A method for anonymously collecting data as recited in claim 30, further comprising storing the set of unique identifiers in the anonymous data collection component.

32. A method for anonymously collecting data as recited in claim 25, further comprising:

requesting a unique identifier corresponding to the client device;

receiving the unique identifier; and

communicating the anonymous data collection component to the client device based on the unique identifier.

33. A method for anonymously collecting data as recited in claim 32, wherein:

receiving the unique identifier includes receiving an email address as the unique identifier; and

communicating includes emailing the anonymous data collection component to the client device.

34. A method for anonymously collecting data as recited in claim 32, wherein receiving the unique identifier includes receiving an Internet protocol address as the unique identifier.

35. A method for anonymously collecting data as recited in claim 32, further comprising:

requesting a public key corresponding to the client device;

receiving the public key and an email address as the unique identifier;

encrypting the anonymous data collection component with the public key to generate an encrypted data structure; and

emailing the encrypted data structure to the client device.

36. A method for anonymously collecting data as recited in claim 32, further comprising:

requesting a public key corresponding to the client device;

receiving the public key and an Internet protocol address as the unique identifier;

encrypting the anonymous data collection component with the public key to generate an encrypted data structure; and

communicating the encrypted data structure to the client device.

37. One or more computer-readable media comprising computer-executable instructions that, when executed, direct a digital video recording system to perform the method of claim 25.

38. One or more computer-readable media comprising computer-executable instructions that, when executed, direct a digital video recording system to:

create a first anonymous data collection component to maintain aggregated media access information for one or more digital video recorders, wherein the aggregated media access information in the first anonymous data collection component is configured to maintain anonymity in terms of the one or more digital video recorders from which each of the media access information is received;

store media access information in the anonymous data collection component, wherein the media access information in the anonymous data collection component is configured to maintain anonymity in terms of the digital video recording system;

randomly select a digital video recorder to receive the anonymous data collection component;

obtain a public key and an address identifier corresponding to the digital video recorder;

encrypt the anonymous data collection component with the public key corresponding to the digital video recorder to generate an encrypted data structure; and

communicate the encrypted data structure to the digital video recorder.

39. One or more computer-readable media as recited in claim 38, further comprising computer executable instructions that, when executed, direct the digital video recording system to store viewer profile data in the anonymous data collection component.

40. One or more computer-readable media as recited in claim 38, further comprising computer executable instructions that, when executed, direct the digital video recording system to:

receive at least a second anonymous data collection component;

decrypt the second anonymous data collection component with a private key and password corresponding to the digital video recording system;

store media access information in the second anonymous data collection component, the media access information being aggregated with additional media access information from one or more digital video recorders, wherein the aggregated media access information in the second anonymous data collection component is configured to maintain anonymity in terms of the one or more digital video recorders from which each of the media access information is received;

randomly select a second digital video recorder to receive the second anonymous data collection component;

obtain a public key and an address identifier corresponding to the second digital video recorder;

encrypt the second anonymous data collection component with the public key corresponding to the second digital video recorder to generate a second encrypted data structure; and

communicate the second encrypted data structure to the second digital video recorder.

41. One or more computer-readable media as recited in claim 38, further comprising computer executable instructions that, when executed, direct the digital video recording system to:

receive at least a second anonymous data collection component;

decrypt the second anonymous data collection component with a private key and password corresponding to the digital video recording system;

store media access information in the second anonymous data collection component, the media access information being aggregated with additional media access information from one or more digital video recorders, wherein the aggregated media access information in the second anonymous data collection component is configured to maintain anonymity in terms of the one or more digital video recorders from which each of the media access information is received;

delete data that associates the media access information with the digital video recording system and that associates the additional media access information with any of the one or more digital video recorders; and

communicate the second anonymous data collection component to a content provider.