Targeted delivery of informational content with privacy protection

• US 7,472,093 B2
• Filed: 03/08/2001
• Issued: 12/30/2008
• Est. Priority Date: 03/08/2000
• Status: Expired due to Term

• Current Assignee: RSA Security LLC (Symphony Technology Group LLC)
• Original Assignee: RSA Security Incorporated (Symphony Technology Group LLC)
• Inventors: Juels, Ari
• Primary Examiner(s): Elisca; Pierre E
• Application Number:
  US09/802,278
• Publication Number:
  US 20020026345A1
• Time in Patent Office: 2,854 Days
• Field of Search: 705/80, 705/14, 705/51
• US Class Current: 705/80
• CPC Class Codes: G06Q 30/02 Marketing; Price estimation or determination; Fundraising
• CPC Class Codes: G06Q 40/04 Trading; Exchange, e.g. stocks, commodities, derivatives or currency exchange
• CPC Class Codes: G06Q 50/188 Electronic negotiation

Abstract

A system and method for enabling use of detailed consumer profiles for the purposes of targeted information delivery while protecting these profiles from disclosure to information providers or hostile third parties are disclosed herein. Rather than gathering data about a consumer in order to decide which information to send her, an information provider makes use of a client-side executable software module called a negotiant function. The negotiant function acts as a client-side proxy to protect consumer data, and it also directs the targeting of information, requesting items of information from the information provider that are tailored to the profile provided by the consumer.

Claims

1. A method for enabling targeted information retrieval while protecting consumer privacy by processing aggregated requests, the method comprising:

(a) distributing a negotiant function for execution to a plurality of consumers, the negotiant function designed to produce an information request as output;

(b) receiving a plurality of information requests, a first information request of the plurality of information requests associated with a first consumer and obtained by applying a first negotiant function to an element of data associated with the first consumer, a second information request of the plurality of information requests associated with a second consumer and obtained by applying a second negotiant function to an element of data associated with the second consumer; and

after step (b), the steps of encrypting the plurality of information requests; and

aggregating a plurality of request pairs V₁, said plurality of request pairs having a sequence, each of said plurality of request pairs comprising an encrypted information request and a consumer identifier.

2. The method of claim 1, the method further comprising, the step of applying a mix network to said plurality of request pairs V₁ obtain a plurality of request pairs V₂, the plurality of request pairs V₁ having a first sequence, each of the plurality of request pairs V₁ comprising an information request, said information request encrypted with a first public key and a first random encryption factor, and an identifier, the plurality of request pairs V₂ having a second sequence comprising the first sequence permuted by a first random secret permutation, each of the plurality of request pairs V₂ comprising the information request in plaintext and the identifier encrypted with a second public key and a second random encryption factor.

3. The method of claim 2, the method further comprising, the step of replacing the information request in each of the plurality of request pairs V₂ with an element of information to create a plurality of response pairs V₂′

.

4. The method of claim 3, the method further comprising, the step of applying a mix network to the plurality of response pairs V₂′

to obtain a plurality of response pairs V₃, the plurality of response pairs V₃ having a third sequence comprising the second sequence permuted by a second random secret permutation, each of the plurality of response pairs V₃ comprising the element of information, said element of information encrypted with a third public key and a third random encryption factor, and the identifier in plaintext.

5. The method of claim 4, wherein the first public key, the second public key, and the third public key are a single public key.

6. The method of claim 4, the method further comprising, after step (b), the step of applying asymmetric proxy re-encryption to the plurality of response pairs V₃ to obtain a plurality of response pairs V₄, each of the plurality of response pairs V₄ comprising the element of information encrypted with a fourth public key and the identifier in plaintext.

7. The method of claim 6, the method further comprising, the step of making the element of information encrypted with the fourth public key available to a consumer based on the identifier.

8. The method of claim 6 wherein quorum-controlled asymmetric proxy re-encryption is applied to the plurality of response pairs V₃ to obtain a plurality of response pairs V₄, each of the plurality of response pairs V₄ comprising the element of information encrypted with the fourth public key and the identifier in plaintext.

9. The method of claim 8 wherein the fourth public key is a key of the consumer;

and wherein making the element of information encrypted with the fourth key available to the consumer based on the identifier comprises transmitting the element of information encrypted with the fourth public key to the consumer in response to the identifier.

10. The method of claim 1 wherein:

the elements of data associated with the first and second consumers includes demographic information about the first and second consumers, respectively;

receiving the first information request includes receiving a first selection of advertisements from a plurality of advertisements, the first selection of advertisements being based on the demographic information about the first consumer; and

receiving the second information request includes receiving a second selection of advertisements from a plurality of advertisements, the second selection of advertisements being based on the demographic information about the second consumer.

11. A method for targeted information retrieval while protecting consumer privacy by comparing blinded ciphertexts, the method comprising:

(a) distributing a negotiant function for execution to a plurality of consumers, the negotiant function designed to produce an information request as output;

(b) receiving a request pair in response to the negotiant function, the request pair comprising a consumer identifier and the information request and a first random encryption factor, the information request encrypted with the first public key and the first random encryption factor having a first underlying plaintext;

(c) constructing a first plurality of information pairs, the first plurality of information pairs having a first sequence, each of the first plurality of information pairs comprising an element identifier and an element of information encrypted with a second public key and a second random encryption factor;

(d) applying a mix network to the first plurality of information pairs to obtain a second plurality of information pairs, the second plurality of information pairs having a second sequence comprising the first sequence permuted by a random secret permutation, each of the second plurality of request pairs comprising the element identifier encrypted with a third public key arid a third random encryption factor and the element of information re-encrypted with the third public key and the third random encryption factor, the element identifier encrypted with the third public key and the third random encryption factor having a second underlying plaintext; and

(e) performing a distributed plaintext equality test to identify at least one of the second plurality of request pairs in which the second underlying plaintext is identical to the first underlying plaintext.

12. The method of claim 11 wherein the first public key, the second public key, and the third public key are a single public key.

13. The method of claim 11, the method further comprising, after step (e), the step of applying asymmetric proxy re-encryption to the at least one of the second plurality of request pairs in which the second underlying plaintext is identical to the first underlying plaintext to obtain at least one response pair, each of the at least one response pair comprising the element of information encrypted with a fourth public key and the consumer identifier.

14. The method of claim 13 wherein quorum-controlled asymmetric proxy re-encryption is applied to the at least one of the second plurality of request pairs in which the second underlying plaintext is identical to the first underlying plaintext to obtain at least one response pair, each of the at least one response pair comprising the element of information encrypted with the fourth public key and the consumer identifier.

15. The method of claim 14, the method further comprising, after step (e), the step of making the element of information encrypted with the fourth public key available to the consumer based on the consumer identifier.

16. The method of claim 15 wherein the step of making the element of information encrypted with the fourth public key available to the consumer based on the consumer identifier comprises transmitting the element of information encrypted with the fourth public key to the consumer in response to the consumer identifier.