MAINTAINING PRIVACY DURING USER PROFILING

• US 20110164746A1
• Filed: 01/07/2010
• Published: 07/07/2011
• Est. Priority Date: 01/07/2010
• Status: Active Grant

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Corporation
• Inventors: WIEDER, EHUD, YACOBI, YACOV, OPHIR, SEFY, FELDBAUM, BOAZ, SHAMIR, ERAN, FRIEDMAN, ARIE, NICE, NIR
• Granted Patent: US 8,520,842 B2
• Time in Patent Office: Days
• US Class Current: 380/30
• CPC Class Codes: G06F 21/6263 during internet communication, e.g. revealing personal data from cookies
• CPC Class Codes: H04L 2209/84 Vehicles
• CPC Class Codes: H04L 63/0442 wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption cryptographic mechanisms or cryptographic arrangements for public-key encryption H04L9/30
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 67/306 User profiles
• CPC Class Codes: H04L 67/53 using third party service providers
• CPC Class Codes: H04L 67/535 Tracking the activity of the user network monitoring arrangements H04L43/00; recording of computer activity G06F11/34
• CPC Class Codes: H04L 9/30 Public key, i.e. encryption algorithm being computationally infeasible to invert or user's encryption keys not requiring secrecy

Abstract

Systems, methods, and computer storage media having computer-executable instructions embodied thereon that maintain privacy during user profiling are provided. A profiling service receives, from a first device, rules for profiling a user. The rules were encrypted using a private key. The profiling service also receives, from a second device, user data. The user data was encrypted using a public key communicated to the second device by the first device. The profiling service then matches the encrypted rules with the encrypted user data, and based on the matching, generates a profile for the user. In embodiments, such a user profile can be utilized to deliver personalized digital content to a user.

Claims

1. One or more computer-readable media storing computer-useable instructions that, when used by one or more computing devices, causes the one or more computing devices to perform a method, the method comprising:

receiving, from a first device, one or more rules for profiling a user, wherein the one or more rules were encrypted using a private key;

receiving, from a second device, user data, wherein the user data was encrypted using a public key communicated to the second device by the first device;

matching the encrypted one or more rules with the encrypted user data; and

based on matching the encrypted user data with the encrypted one or more rules, generating a profile for the user.

2. The one or more computer-readable media of claim 1, wherein encrypting the user data using a public key comprises using a random number and the public key to encrypt the user data.

3. The one or more computer-readable media of claim 1, wherein the first device generates the one or more rules for profiling a user based on user profile definitions.

4. The one or more computer-readable media of claim 1 wherein encrypting the one or more rules using a private key comprises:

creating one or more corresponding trapdoors for each of the one or more rules using a private key; and

building an encrypted rule for each of the one or more rules by replacing each of the one or more rules with the one or more corresponding trapdoors.

5. The one or more computer-readable media of claim 4, wherein generating a profile for the user comprises matching the one or more trapdoors of the encrypted rules with the encrypted user data using a pairwise function.

6. The one or more computer-readable media of claim 4, wherein the one or more corresponding trapdoors for each of the one or more rules has one or more of a finite lifespan and a defined domain name associated with the one or more corresponding trapdoors.

7. The one or more computer-readable media of claim 4, wherein the first device received the one or more rules from a third device that generated the one or more rules.

8. The one or more computer-readable media of claim 7, wherein the third device encrypts the one or more rules using a second private key and the first device encrypts the one or more rules using the private key.

9. The one or more computer-readable media of claim 8, wherein the first device generates the public key based on a first part of the public key received from the third device.

10. The one or more computer-readable media of claim 1, wherein the user data is encrypted using the public key by encrypting the data label of the user data and keeping a value of the user data clear.

11. The one or more computer-readable media of claim 1, wherein the method further comprises receiving false data values with the user data received from the second device.

12. A computer system executed by one or more computer processors, comprising:

a user component for encrypting user data, wherein the user component encrypts the user data using a public key;

an encryption service component for encrypting one or more rules for profiling a user, wherein the encryption service component encrypts the one or more rules using a private key and communicates the public key to the user component; and

a profiling service component for profiling a user, wherein the profiling service component matches encrypted user data received from the user component with encrypted one or more rules received from the encryption service component using a pairwise function.

13. The system of claim 12, wherein the user component receiving the public key from the encryption service component and uses the public key and a random number to encrypt the user data.

14. The system of claim 12, wherein the user component encrypts the data label of the user data using the public key while keeping a value of the user data clear, and including false data values with the user data.

15. The system of claim 12, wherein the encryption service component generates the one or more rules for profiling a user based on profile definitions.

16. They system of claim 12, wherein encryption service component creates a corresponding trapdoor for each of the one or more rules using the private key and builds the encrypted rule or each of the one or more rules by replacing each of the one or more rules with a corresponding trapdoor to encrypt the one or more rules using the private key.

17. The system of claim 16, wherein one or more of the corresponding trapdoors have finite life spans.

18. The system of claim 12, wherein the system further comprises:

a rule generator component for generating the one or more rules and communicating the one or more rules to the encryption service component.

19. The system of claim 18, wherein the rule-generator component encrypts the one or more rules using a second private key, creates a first part of the public key, and communicates the encrypted one or more rules and the first part of the public key to the encryption service that encrypts the encrypted one or more rules using the private key and completes the public key from the first part of the public key.

20. One or more computer-readable media storing computer-useable instructions that, when used by one or more computing devices, causes the one or more computing devices to perform a method, the method comprising:

receiving, from a first device, one or more encrypted rules for profiling a user, wherein the one or more rules were generated by the first device based on one or more profile definitions created by the first device and encrypted by the first device using a private key to create trapdoors for the one or more rules that were being encrypted;

receiving, from a second device, encrypted user data from a user, wherein the user data was encrypted using a random number and a public key communicated to the second device by the first device;

matching the one or more encrypted rules with the encrypted user data using a pairwise function; and

based on matching the encrypted user data with the encrypted rules, generating a profile for the user.