DATA ANONYMITY SYSTEM

• US 20100042833A1
• Filed: 08/12/2008
• Published: 02/18/2010
• Est. Priority Date: 08/12/2008
• Status: Active Grant

• Current Assignee: TiVo Solutions Inc. (Adeia Inc.)
• Original Assignee: TiVo Inc. (Adeia Inc.)
• Inventors: PLATT, DAVID C.
• Granted Patent: US 8,862,877 B2
• Time in Patent Office: Days
• US Class Current: 713/168
• CPC Class Codes: G06F 21/6254 by anonymising data, e.g. decorrelating personal data from the owner's identification
• CPC Class Codes: H04L 63/0421 Anonymous communication, i.e. the party's identifiers are hidden from the other party or parties, e.g. using an anonymizer
• CPC Class Codes: H04L 63/0464 using hop-by-hop encryption, i.e. wherein an intermediate entity decrypts the information and re-encrypts it before forwarding it
• CPC Class Codes: H04N 21/25883 being end-user demographical data, e.g. age, family status or address arrangements for identifying locations of users in broadcast systems H04H60/52
• CPC Class Codes: H04N 21/441 Acquiring end-user identification , e.g. using personal code sent by the remote control or by inserting a card
• CPC Class Codes: H04N 21/4415 using biometric characteristics of the user, e.g. by voice recognition or fingerprint scanning cryptography using biological data H04L9/3231; authentication in networks using biometric H04L63/0861
• CPC Class Codes: H04N 21/47815 Electronic shopping payment schemes, payment architectures or payment protocols for electronic shopping systems G06Q20/12

Abstract

A method and system for providing data anonymously is provided. The method involves receiving an encrypted operator match ID by a client device from a first entity, where the encrypted operator match ID is encrypted using a first encryption key; decrypting the encrypted operator match ID using a first decryption key, associated with the first encryption key, by the client device to obtain a decrypted operator match ID; encrypting the decrypted operator match ID using a second encryption key by the client device to obtain a re-encrypted operator match ID; and sending the client device usage information with the re-encrypted operator match ID by the client device to a second entity through an anonymous channel, where the second entity decrypts the re-encrypted operator match ID using a second decryption key, associated with the second encryption key, to obtain the operator match ID.

Claims

1. A method for anonymous data collection, comprising:

receiving an encrypted operator match ID by a client device from a first entity, wherein the encrypted operator match ID is encrypted using a first encryption key;

decrypting the encrypted operator match ID using a first decryption key, associated with the first encryption key, by the client device to obtain a decrypted operator match ID;

encrypting the decrypted operator match ID using a second encryption key by the client device to obtain a re-encrypted operator match ID; and

sending client device usage information with the re-encrypted operator match ID by the client device to a second entity through an anonymous channel, wherein the second entity decrypts the re-encrypted operator match ID using a second decryption key, associated with the second encryption key, to obtain the operator match ID.

2. The method of claim 1, further comprising updating the client device usage information to obtain updated client device usage information and sending the updated client device usage information with the re-encrypted operator match ID by the client device to the second entity, wherein the re-encrypted operator match ID is persistently stored on the client device.

3. The method of claim 1, wherein the anonymous channel prevents the second entity from identifying the client device.

4. The method of claim 1, further comprising receiving the operator match ID and purchasing history associated with the operator match ID by the second entity, wherein the second entity associates the client device usage information with the purchasing history based on the operator match ID.

5. The method of claim 1, wherein receiving the encrypted operator match ID by the client device from the first entity comprises:

receiving the encrypted operator ID and a client device ID by a third entity from the first entity; and

identifying the client device based on the client device ID by the third entity and forwarding the encrypted operator match ID by the third entity to the client device.

6. The method of claim 5, wherein the third entity provides a television programming service to the client device.

7. The method of claim 1, wherein sending the re-encrypted operator match ID and the client device usage information by the client device to the second entity through an anonymous channel comprises:

sending the re-encrypted operator match ID and the client device usage information by the client device to a third entity through the anonymous channel; and

forwarding the re-encrypted operator match ID and the client device usage information to the second entity by the third entity.

8. The method of claim 7, wherein the third entity forwards the re-encrypted operator match ID and the client device usage information with a plurality of operator match IDs and corresponding client device usage information for each of the plurality of operator match IDs, wherein a minimum number of operator match IDs and corresponding client device usage information are sent in each transmission to the second entity.

9. The method of claim 1, wherein the encrypted operator match ID is assigned to the client device by the first entity.

10. The method of claim 1, further comprising:

receiving encrypted purchase history by a client device from a first entity, wherein the encrypted purchase history is encrypted using the second encryption key; and

sending the encrypted purchase history with the re-encrypted operator match ID and the client device usage information to the second entity by the client device through the anonymous channel.

11. A method for providing client device usage information, comprising:

receiving an encrypted operator match ID by a client device from a first entity, wherein the encrypted operator match ID is encrypted using an encryption key, wherein data encrypted by the encryption key can be decrypted using a decryption key held by a second entity;

forwarding the encrypted operator match ID by the client device with client device usage information from the client device to the second entity; and

decrypting the encrypted operator match ID using the decryption key by the second entity.

12. A computer readable storage medium having encoded instructions which, when executed by one or more processors, cause the one or more processors to perform the steps of:

receiving an encrypted operator match ID by a client device from a first entity, wherein the encrypted operator match ID is encrypted using a first encryption key;

decrypting the encrypted operator match ID using a first decryption key, associated with the first encryption key, by the client device to obtain a decrypted operator match ID;

encrypting the decrypted operator match ID using a second encryption key by the client device to obtain a re-encrypted operator match ID; and

sending client device usage information with the re-encrypted operator match ID by the client device to a second entity through an anonymous channel, wherein the second entity decrypts the re-encrypted operator match ID using a second decryption key, associated with the second encryption key, to obtain the operator match ID.

13. The computer readable storage medium of claim 12, wherein the encoded instructions, when executed by one or more processors, cause the one or more processors to further perform the steps of updating the client device usage information by the client device to obtain updated client device usage information and sending the updated client device usage information with the re-encrypted operator match ID by the client device to the second entity, wherein the re-encrypted operator match ID is persistently stored on the client device.

14. The computer readable storage medium of claim 12, wherein the anonymous channel prevents the second entity from identifying the client device.

15. The computer readable storage medium of claim 12, wherein the encoded instructions, when executed by one or more processors, cause the one or more processors to further perform the step of receiving the operator match ID and purchasing history associated with the operator match ID by the second entity, wherein the second entity associates the client device usage information with the purchasing history based on the operator match ID.

16. The computer readable storage medium of claim 12, wherein receiving the encrypted operator match ID by the client device from the first entity comprises:

receiving the encrypted operator ID and a client device ID by a third entity from the first entity; and

identifying the client device based on the client device ID by the third entity and forwarding the encrypted operator match ID by the third entity to the client device.

17. The computer readable storage medium of claim 16, wherein the third entity provides a television programming service to the client device.

18. The computer readable storage medium of claim 12, wherein sending the re-encrypted operator match ID and the client device usage information by the client device to the second entity through an anonymous channel comprises:

sending the re-encrypted operator match ID and the client device usage information by the client device to a third entity through the anonymous channel; and

forwarding the re-encrypted operator match ID and the client device usage information to the second entity by the third entity.

19. The computer readable storage medium of claim 17, wherein the third entity forwards the re-encrypted operator match ID and the client device usage information with a plurality of operator match IDs and corresponding client device usage information for each of the plurality of operator match IDs, wherein a minimum number of operator match IDs and corresponding client device usage information are sent in each transmission to the second entity.

20. The computer readable storage medium of claim 12, wherein the encrypted operator match ID is assigned to the client device by the first entity.

21. The computer readable storage medium of claim 12, wherein the encoded instructions, when executed by one or more processors, cause the one or more processors to further perform the steps of:

receiving encrypted purchase history by a client device from a first entity, wherein the encrypted purchase history is encrypted using the second encryption key; and

sending the encrypted purchase history with the re-encrypted operator match ID and the client device usage information to the second entity by the client device through the anonymous channel.

22. A system for anonymous data collection, comprising:

at least one processor, and

a computer readable storage medium that includes one or more sequences of instructions, which when executed with the processor, cause the processor to perform the steps of;

receiving an encrypted operator match ID by a client device from a first entity, wherein the encrypted operator match ID is encrypted using a first encryption key;

decrypting the encrypted operator match ID using a first decryption key, associated with the first encryption key, by the client device to obtain a decrypted operator match ID;

encrypting the decrypted operator match ID using a second encryption key by the client device to obtain a re-encrypted operator match ID; and

sending the re-encrypted operator match ID and client device usage information by the client device to a second entity through an anonymous channel, wherein the second entity decrypts the re-encrypted operator match ID using a second decryption key, associated with the second encryption key, to obtain the operator match ID.

23. The system of claim 22, wherein the one or more sequences of instructions when executed with the processor, cause the processor to further perform the steps of updating the client device usage information by the client device to obtain updated client device usage information and sending the updated client device usage information with the re-encrypted operator match ID by the client device to the second entity, wherein the re-encrypted operator match ID is persistently stored on the client device.

24. The system of claim 22, wherein the anonymous channel prevents the second entity from identifying the client device.

25. The system of claim 22, wherein the one or more sequences of instructions when executed with the processor, cause the processor to further perform the step of receiving the operator match ID and purchasing history associated with the operator match ID by the second entity, wherein the second entity associates the client device usage information with the purchasing history based on the operator match ID.

26. The system of claim 22, wherein receiving the encrypted operator match ID by the client device from the first entity comprises:

receiving the encrypted operator ID and a client device ID by a third entity from the first entity; and

identifying the client device based on the client device ID by the third entity and forwarding the encrypted operator match ID by the third entity to the client device.

27. The system of claim 22, wherein sending the re-encrypted operator match ID and the client device usage information by the client device to the second entity through an anonymous channel comprises:

sending the re-encrypted operator match ID and the client device usage information by the client device to a third entity; and

forwarding the re-encrypted operator match ID and the client device usage information to the second entity by the third entity through the anonymous channel.

28. The system of claim 27, wherein the third entity provides a television programming service to the client device.

29. The system of claim 27, wherein the third entity forwards the re-encrypted operator match ID and the client device usage information with a plurality of operator match IDs and corresponding client device usage information for each of the plurality of operator match IDs, wherein a minimum number of operator match IDs and corresponding client device usage information are sent in each transmission to the second entity.

30. The system of claim 22, wherein the encrypted operator match ID is assigned to the client device by the first entity.

31. The system of claim 22, wherein the one or more sequences of instructions when executed with the processor, cause the processor to further perform the steps of:

receiving encrypted purchase history by a client device from a first entity, wherein the encrypted purchase history is encrypted using the second encryption key; and

sending the encrypted purchase history with the re-encrypted operator match ID and the client device usage information to the second entity by the client device through the anonymous channel.