Techniques for monetizing anonymized context

• US 9,202,230 B2
• Filed: 04/06/2010
• Issued: 12/01/2015
• Est. Priority Date: 04/06/2010
• Status: Active Grant

• Current Assignee: Intel Corporation
• Original Assignee: Intel Corporation
• Inventors: Yarvis, Mark D., Wood, Matthew D.
• Primary Examiner(s): SIGMOND, BENNETT M
• Application Number:
  US12/754,643
• Publication Number:
  US 20110246273A1
• Time in Patent Office: 2,065 Days
• Field of Search: 705/14.19, 705/7.29, 705/14.1, 705/14.17, 705/26.42, 705/7.11, 705/14.36, 705/14.53, 705 50- 54, 705/14.49
• US Class Current: 1/1
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: G06F 21/6254 by anonymising data, e.g. decorrelating personal data from the owner's identification
• CPC Class Codes: G06Q 30/02 Marketing; Price estimation or determination; Fundraising
• CPC Class Codes: G06Q 30/0217 involving input on products or services in exchange for incentives or rewards
• CPC Class Codes: G06Q 30/0236 Incentive or reward received by requiring registration or ID from user
• CPC Class Codes: G06Q 30/0251 Targeted advertisements
• CPC Class Codes: G06Q 30/0615 Anonymizing

Abstract

An embodiment of the present invention provides a method of offering anonymous incentive based context to service providers, comprising delivering context information of a user to the service provider, wherein prior to delivery of the context information to the service provider, the context is anonymized by removing identifying information and aggregating it with context from additional users.

Claims

1. A method of offering anonymous incentive based context to service providers, comprising:

anonimizing, by an anonymizer computer of a computer system comprising one or more computers, context information of a user by removing identifying information and aggregating said context information with context from other users;

delivering, by an anonymizer computer, context information of the user to a service provider computer of the computer system;

delivering, by said anonymizer computer, an offer request for a list of available offers from said service provider computer;

receiving, by the anonymizer computer, at least one offer from said service provider computer in response to said offer request;

receiving, by a client computer of the computer system, a user choice to participate in said at least one offer and in response to the user choice, delivering a context bundle to the anonymizer computer in one of the following manners;

sending the context bundle from said user to said anonymizer computer to be aggregated with the context of other users;

or

sending the context bundle from said client computer to said service provider computer, wherein context is initially provided to the service provider computer in an obscured form as part of a service request, said service provider computer then forwards said obscured context to said anonymizer computer, said anonymizer computer attests to said service provider computer that said context has been received, and said service provider computer provides an improved service response to the client;

removing, by the anonymizer computer, identifying information after receiving said context bundle;

assembling, by the anonymizer computer, context information packages in random order into an anonymized bundle list after context information is collected from a required number of users for a given offer;

delivering, by the anonymizer computer, the context information packages in the anonymized bundle list to the service provider computer;

unpacking each context information package by said service provider computer;

combining, by the service provider computer, reward requests into a reward request list containing a list of reward requests;

delivering, by said service provider computer, the reward request list to a reward provider computer of the computer system;

delivering, by said reward provider computer, the reward request list to said anonymizer computer;

caching, by the anonymizer computer, each reward for a random amount of time to prevent correlation across rewards; and

addressing, by the anonymizer computer, each reward to a specific recipient in a reward message.

2. The method of claim 1, further comprising said user receiving compensation for the user'"'"'s contribution of the context information.

3. The method of claim 2, wherein the anonymizer computer is configured to know the identities of users but has no access to context information or monetary rewards, and wherein said service provider computer receives said anonymized context information but cannot attribute said anonymized context information to a specific user, the method further comprising:

optionally arranging, by the service provider computer, for said compensation, and

generating rewards by the reward provider computer, wherein the reward provider computer has no knowledge of reward recipients at a time said rewards are generated.

4. The method of claim 1, further comprising enforcing at least one rule during processing of context bundles from the rules group consisting of:

all context bundles in satisfaction of a given offer contain an identical copy of the offer and a signature;

all offers follow a generic format that contains four fields;

a context being requested, a level of aggregation, an amount of compensation, and a type of compensation;

valid offers are registered in advance with said anonymizer computer; and

context bundles responsive to offers that do not meet a desired set of criteria are rejected.

5. The method of claim 1, further comprising signing each offer using a private key of said service provider computer for authenticity, wherein each offer specifies:

a set of desired context;

a level of aggregation that the context bundle is configured to receive before delivery; and

a form and amount of compensation.

6. The method of claim 5, further comprising protecting from tampering by signing, by the client computer, the context bundle delivered in response to the user choice with a private key tied to the client computer'"'"'s identity, and accessible only by said anonymizer computer as a result of encryption of said context bundle using a public key of said anonymizer computer and wherein said context bundle contains:

the client computer'"'"'s identity, a real or virtual timestamp for freshness;

a copy of an original offer signed by the service provider computer;

a context information package for said service provider computer, encrypted using a public key of the service provider computer containing said original offer;

the context requested in said offer;

an obscured form of a node'"'"'s identity encrypted using the public key of the anonymizer computer; and

a public key generated by said client computer.

7. The method of claim 1, further comprising randomly delaying, by the anonymizer computer, delivery of said anonymized bundle list to further protect identities of a set of client computers, data from which are contained in said context bundle.

8. The method of claim 1, further comprising, prior to delivering the context packages in the anonymized bundle list from said anonymizer computer to said service provider computer, signing, by the anonymizer computer, the anonymized bundle list using a private key belonging to the anonymizer computer for authenticity, and wherein the anonymized bundle list includes a timestamp for freshness and a list of context packages in random order.

9. The method of claim 1, further comprising:

upon receipt of said anonymized bundle list by said service provider computer, unpacking, by said service provider computer said anonymized bundle list;

checking for authenticity and freshness by said service provider computer;

unpacking each context information package by said service provider computer; and

performing the following steps by said service provider computer;

validating the at least one offer;

saving received context for further processing; and

formulating a reward request using an obscured node identity and public key.

10. The method of claim 1, further comprising protecting said reward request by signing said reward request with a private key of said service provider computer for authenticity, and encrypting said reward request with a public key of said service provider computer for secrecy, and wherein each reward request contains:

a timestamp for freshness;

a value of the requested reward;

an obscured identity of the client computer that will receive the reward; and

a public key provided by such client computer.

11. A system, comprising:

an anonymizer computer configured to;

offer anonymous incentive based context information via delivery of context information of a user; and

prior to delivery of said context information, anonymize said context information via removal of identifying information and aggregation of said context information with context from other users;

a service provider computer configured to receive said context and context information;

a client computer configured to;

communicate an offer request for a list of available offers to said service provider computer,

receive from said service provider computer a set of offers, and

upon receipt of a choice from said user to accept an offer of said set of offers, to send a context bundle to said anonymizer computer; and

a reward provider computer configured to receive a reward request list sent from said service provider computer;

wherein said anonymizer computer is further configured to;

aggregate said context information with context of other users and after collection of said context from a required number of the other users for a given offer, assemble context information packages in random order into an anonymized bundle list, and

send the anonymized bundle list to said service provider computer;

wherein said service provider computer is further configured to;

prepare a reward request list,

unpack each context information package received from said anonymizer computer,

combine reward requests into said reward request list, and send the reward request list; and

wherein said anonymizer computer is further configured to;

receive a reward request list from said reward provider computer, the reward request list containing a list of reward requests, and

cache each reward for a random amount of time to prevent correlation across rewards, each reward being addressed to a specific recipient in a reward message.

12. The system of claim 11, wherein said anonymizer computer is further configured to know the identities of users but has no access to context information or monetary rewards provided to said users, and wherein said service provider computer is further configured to receive anonymized context information but said service provider computer cannot attribute said anonymized context information to a specific user and arranges for compensation to users, and wherein a reward provider computer is configured to generate rewards but has no knowledge of recipient users at a time said rewards are generated.