Methods and apparatus to maintain audience privacy while determining viewing of video-on-demand programs

• US 9,565,473 B2
• Filed: 03/24/2014
• Issued: 02/07/2017
• Est. Priority Date: 04/23/2004
• Status: Active Grant

• Current Assignee: The Nielsen Company LLC (MOOD Media Corporation)
• Original Assignee: The Nielsen Company LLC (MOOD Media Corporation)
• Inventors: Ramaswamy, Arun, Luff, Robert A.
• Primary Examiner(s): TAYLOR, JOSHUA D
• Application Number:
  US14/223,560
• Publication Number:
  US 20140208341A1
• Time in Patent Office: 1,051 Days
• US Class Current: 1/1
• CPC Class Codes: H04H 20/14 for monitoring programmes
• CPC Class Codes: H04H 2201/90 characterised by the use of signatures
• CPC Class Codes: H04H 60/372 Programme
• CPC Class Codes: H04H 60/40 for identifying broadcast time
• CPC Class Codes: H04H 60/43 for identifying broadcast channels
• CPC Class Codes: H04H 60/45 for identifying users
• CPC Class Codes: H04H 60/58 of audio determination or detection of speech characteristics in general G10L25/00; speech recognition in general G10L15/00
• CPC Class Codes: H04H 60/59 of video recognising characters or patterns in general G06F18/00, G06V20/00
• CPC Class Codes: H04H 60/64 for providing detail information
• CPC Class Codes: H04N 21/254 Management at additional data server, e.g. shopping server, rights management server arrangements for maintenance or administration in data networks H04L41/00; network services using third party service providers H04L67/53
• CPC Class Codes: H04N 21/25866 Management of end-user data customer care in data networks H04L41/5077
• CPC Class Codes: H04N 21/442 Monitoring of processes or resources, e.g. detecting the failure of a recording device, monitoring the downstream bandwidth, the number of times a movie has been viewed, the storage space available from the internal hard disk arrangements for monitoring broadcast services or broadcast-related services H04H60/29; arrangements for identifying or recognising characteristics with a direct linkage to broadcast information H04H60/35; monitoring of user activities for profile generation for accessing a video database G06F16/739; monitoring in wireless networks H04W24/00
• CPC Class Codes: H04N 21/44222 Analytics of user selections, e.g. selection of programs or purchase activity monitoring of user selections in data processing systems G06F11/34; arrangements for monitoring the user's behaviour or opinions in broadcast systems H04H60/33
• CPC Class Codes: H04N 21/47202 for requesting content on demand, e.g. video on demand
• CPC Class Codes: H04N 21/6582 Data stored in the client, e.g. viewing habits, hardware capabilities, credit card number arrangements where receivers interact with the broadcast H04H20/38
• CPC Class Codes: H04N 21/8352 involving content or source identification data, e.g. Unique Material Identifier [UMID]
• CPC Class Codes: H04N 7/173 with two-way working, e.g. subscriber sending a programme selection signal

Abstract

Methods and apparatus to maintain audience privacy while determining viewing of video-on-demand (VOD) programs are disclosed. An example method disclosed herein comprises obtaining subscriber metering data from a site metering device monitoring presentation of VOD content at a first subscriber site, obtaining server metering data from a VOD server, the server metering data including identification information for a plurality of subscriber sites to identify particular VOD content provided uniquely to each of the subscriber sites, the identification information manipulated to preserve anonymity of the plurality of subscriber sites, manipulating at least a portion of the subscriber metering data to determine a first manipulated identifier to identify the first subscriber site, and using the first manipulated identifier to cross-reference the manipulated identification information included in the server metering data to merge the subscriber metering data and the portion of the server metering data uniquely associated with the first subscriber site.

Claims

1. A method to share data between a service provider and a media monitoring system, the method comprising:

accessing a data set provided by the service provider to the media monitoring system, the data set including service usage data and first encrypted identification data collected by the service provider for subscribers of the service provider, the first encrypted identification data being encrypted to hide identities of the subscribers from the media monitoring system;

encrypting, with a processor, a combination of first and second personal identification data retrieved based on device identification data associated with a monitored device to determine second encrypted identification data;

comparing, with the processor, a value of the second encrypted identification data with values of the first encrypted identification data in the data set to identify an entry of the data set that is associated with the second encrypted identification data; and

adding, with the processor, a respective portion of the service usage data associated with the identified entry of the data set to a database of the media monitoring system.

2. The method of claim 1, further including using the portion of the service usage data added to the database of the media monitoring system to perform audience measurement.

3. The method of claim 1, wherein the monitored device is a first monitored device, the second encrypted identification data further includes encrypted combinations of personal identification data retrieved based on respective device identification data associated with a plurality of monitored devices including the first monitored device, and subscribers of the service provider who are not associated with the second encrypted identification data are not identifiable to the media monitoring system from the first encrypted identification data.

4. The method of claim 1, wherein the service usage data and the first encrypted identification data in the data set correspond to respective ones of substantially all of the subscribers of the service provider.

5. The method of claim 4, wherein the monitored device is a first monitored device, the second encrypted identification data further includes encrypted combinations of personal identification data retrieved based on respective device identification data associated with a plurality of monitored devices including the first monitored device, and further including discarding portions of the service usage data from the data set corresponding to subscribers of the service provider that are not identified as associated with the second encrypted identification data.

6. The method of claim 1, wherein the first encrypted identification data is determined based on device identifiers associated with the subscribers.

7. The method of claim 1, wherein the first encrypted identification data is encrypted using a hash function, and encrypting the combination of the first and the second personal identification data includes processing the combination of the first and the second identification data with the hash function to determine the second encrypted identification data.

8. A tangible computer readable storage device or storage disk comprising computer readable instructions which, when executed, cause a computing device to at least:

access a data set provided by a service provider to a media monitoring system, the data set including service usage data and first encrypted identification data collected by the service provider for subscribers of the service provider, the first encrypted identification data being encrypted to hide identities of the subscribers from the media monitoring system;

encrypt a combination of first and second personal identification data retrieved based on device identification data associated with a monitored device to determine second encrypted identification data;

compare a value of the second encrypted identification data with values of the first encrypted identification data in the data set to identify an entry of the data set that is associated with the second encrypted identification data; and

add a respective portion of the service usage data associated with the identified entry of the data set to a database of the media monitoring system.

9. The storage device or storage disk of claim 8, wherein the instructions, when executed, further cause the computing device to use the portion of the service usage data added to the database of the media monitoring system to perform audience measurement.

10. The storage device or storage disk as defined of claim 8, wherein the monitored device is a first monitored device, the second encrypted identification data further includes encrypted combinations of personal identification data retrieved based on respective device identification data associated with a plurality of monitored devices including the first monitored device, and subscribers of the service provider who are not associated with the second encrypted identification data are not identifiable to the media monitoring system from the first encrypted identification data.

11. The storage device or storage disk of claim 8, wherein the service usage data and the first encrypted identification data in the data set correspond to substantially all of the subscribers of the service provider.

12. The storage device or storage disk of claim 11, wherein the monitored device is a first monitored device, the second encrypted identification data further includes encrypted combinations of personal identification data retrieved based on respective device identification data associated with a plurality of monitored devices including the first monitored device, and the instructions, when executed, further cause the computing device to discard portions of the service usage data from the data set corresponding to subscribers of the service provider that are not identified as associated with the second encrypted identification data.

13. The storage device or storage disk of claim 8, wherein the first encrypted identification data is determined based on device identifiers associated with the subscribers.

14. The storage device or storage disk of claim 8, wherein the first encrypted identification data is encrypted using a hash function, and the instructions, when executed, further cause the computing device to encrypt the combination of the first and the second personal identification data by processing the combination of the first and the second identification data with the hash function to determine the second encrypted identification data.

15. An apparatus to share data between a service provider and a media monitoring system, the apparatus comprising:

a data interface to access a data set provided by the service provider to the media monitoring system, the data set including service usage data and first encrypted identification data collected by the service provider for subscribers of the service provider, the first encrypted identification data being encrypted to hide identities of the subscribers from the media monitoring system;

a hash generator implemented with hardware to encrypt a combination of first and second personal identification data retrieved based on device identification data associated with a monitored device to determine second encrypted identification data; and

a record identifier to;

compare a value of the second encrypted identification data with values of the first encrypted identification data in the data set to identify an entry of the data set that is associated with the second encrypted identification data; and

add a respective portion of the service usage data associated with the identified entry of the data set to a database of the media monitoring system.

16. The apparatus of claim 15, further including a processor to use the portion of the service usage data added to the database of the media monitoring system to perform audience measurement.

17. The apparatus of claim 15, wherein the monitored device is a first monitored device, the second encrypted identification data further includes encrypted combinations of personal identification data retrieved based on respective device identification data associated with a plurality of monitored devices including the first monitored device, and subscribers of the service provider who are not associated with the second encrypted identification data are not identifiable to the media monitoring system from the first encrypted identification data.

18. The apparatus of claim 15, wherein the service usage data and the first encrypted identification data in the data set correspond to respective ones of substantially all of the subscribers of the service provider.

19. The apparatus of claim 15, wherein the first encrypted identification data is determined based on a plurality of device identifiers associated with the subscribers.

20. The apparatus of claim 15, wherein the first encrypted identification data is encrypted using a hash function, and the hash generator is further to encrypt the combination of the first and the second personal identification data by processing the combination of the first and the second identification data with the hash function to determine the second encrypted identification data.