GENERATING BRIDGE MATCH IDENTIFIERS FOR LINKING IDENTIFIERS FROM SERVER LOGS

• US 20170317994A1
• Filed: 07/14/2017
• Published: 11/02/2017
• Est. Priority Date: 07/24/2015
• Status: Active Grant

• Current Assignee: Google LLC (Alphabet Inc.)
• Original Assignee: Google Inc. (Alphabet Inc.)
• Inventors: Salek, Mahyar, McDonnell, Philip, Ramachandran, Vinod Kumar, Saxena, Shobhit, Shanahan, David Owen
• Granted Patent: US 10,182,042 B2
• Time in Patent Office: Days
• CPC Class Codes: G06F 21/6254 by anonymising data, e.g. decorrelating personal data from the owner's identification
• CPC Class Codes: H04L 63/06 for supporting key management in a packet data network cryptographic mechanisms or cryptographic arrangements for key management H04L9/08
• CPC Class Codes: H04L 63/068 using time-dependent keys, e.g. periodically changing keys cryptographic mechanisms or cryptographic arrangements for controlling usage of secret information H04L9/088

Abstract

Systems and methods of matching identifiers between multiple datasets are described herein. A system can transmit a first identifier vector to a third party server. The first identifier vector can include a first identifier, first parameters, and second parameters. The system can receive, from the third party server, the first identifier vector encrypted based on a third-party encryption. The system can receive, from the third party server, a second identifier vector encrypted based on the third-party encryption associated with the third party server. The second identifier vector can include a second identifier, third parameters, and fourth parameters. The system can determine a correlation count between the first identifier vector and the second identifier vector. The system can determine that the first identifier corresponds to the second identifier based on the correlation count. The system can generate one identifier key for both the first identifier and the second identifier.

Claims

1-20. -20. (canceled)

21. A system to bridge encrypted datasets, comprising:

a data processing system comprising one or more processors and memory, the data processing system configured to;

transmit a first identifier vector to a server, the first identifier vector encrypted with a first encryption that is commutative and comprising a first identifier, a plurality of first parameters, and a plurality of second parameters;

receive from the server, an encrypted first identifier vector comprising the first identifier vector encrypted based on the first encryption and further encrypted by a second encryption associated with the server, the second encryption commutative and different from the first encryption;

receive a second identifier vector, encrypted based on the second encryption associated with the server, the second identifier vector comprising a second identifier, a plurality of third parameters, and a plurality of fourth parameters;

encrypt the second identifier vector with the first encryption to generate an encrypted second identifier vector that is encrypted based on the second encryption and further encrypted based on the first encryption;

determine a correlation count between the encrypted first identifier vector and the encrypted second identifier vector based on a match between at least some of the plurality of first parameters and at least some of the plurality of the third parameters of the encrypted first identifier vector and between at least some of the plurality of the second parameters and at least some of the plurality of fourth parameters of the encrypted second identifier vector;

determine that the first identifier corresponds to the second identifier based on the correlation count between the first identifier vector and the second identifier vector;

generate, responsive to the determination that the first identifier corresponds to the second identifier, one identifier key for both the first identifier and the second identifier; and

provide the one identifier key for input into an application to process interactions, the one identifier key generated based on the correlation between the encrypted first identifier vector encrypted with the first encryption and further encrypted with the second encryption, and the encrypted second identifier vector encrypted with the second encryption and further encrypted with the first encryption.

22. The system of claim 21, wherein the second identifier vector corresponds to offline transactions processed by the server.

23. The system of claim 21, wherein the first identifier vector corresponds to online transactions processed by the data processing system.

24. The system of claim 21, wherein the first identifier vector corresponds to online transactions between the data processing system and a computing device comprising a digital assistant.

25. The system of claim 21, wherein the first identifier vector corresponds to online transactions between the data processing system and a computing device configured to receive speech input.

26. The system of claim 21, comprising:

the data processing system to use the key to determine a rate among online transactions that correspond to the first identifier and processed via the data processing system and offline interactions corresponding to the second identifier and processed via the server.

27. The system of claim 21, comprising:

the data processing system to determine that the first identifier corresponds to the second identifier based on the correlation count between the first identifier vector and the second identifier vector above a threshold.

28. The system of claim 21, comprising:

the data processing system to determine that a predefined time has passed since generation of the one identifier key and delete the first identifier vector and the second identifier vector, responsive to the determination that the predefined time that has passed.

29. The system of claim 21, wherein the plurality of first parameters and the plurality of third parameters are a first type of parameter and the plurality of second parameters and the plurality of fourth parameters are a second type of parameter.

30. The system of claim 28, wherein the first type of parameter includes location identifiers and the second type of parameter includes time stamps, the location identifiers and the time stamps each identify a location and a time of a recorded interaction.

31. The system of claim 21, comprising:

the data processing system to determine the correlation count based on at least some of the plurality of the first parameters within a threshold distance of at least some of the plurality of the third parameters and at least some of the plurality of the second parameters within a time window of at least some of the plurality of the fourth parameters.

32. A method of bridging encrypted datasets, comprising:

transmitting, by a data processing system comprising one or more processors and memory, a first identifier vector to a server, the first identifier vector encrypted with a first encryption that is commutative and comprising a first identifier, a plurality of first parameters, and a plurality of second parameters;

receiving, by the data processing system from the server, an encrypted first identifier vector comprising the first identifier vector encrypted based on the first encryption and further encrypted by a second encryption associated with the server, the second encryption being commutative and different from the first encryption;

receiving, by the data processing system, a second identifier vector, encrypted based on the second encryption associated with the server, the second identifier vector comprising a second identifier, a plurality of third parameters, and a plurality of fourth parameters;

encrypting, by the data processing system, the second identifier vector with the first encryption to generate an encrypted second identifier vector that is encrypted based on the second encryption and further encrypted based on the first encryption;

determining, by the data processing system, a correlation count between the encrypted first identifier vector and the encrypted second identifier vector based on a match between at least some of the plurality of first parameters and at least some of the plurality of the third parameters of the encrypted first identifier vector and between at least some of the plurality of the second parameters and at least some of the plurality of fourth parameters of the encrypted second identifier vector;

determining, by the data processing system, that the first identifier corresponds to the second identifier based on the correlation count between the first identifier vector and the second identifier vector;

generating, by the data processing system, responsive to determining that the first identifier corresponds to the second identifier, one identifier key for both the first identifier and the second identifier; and

providing, by the data processing system, the one identifier key for input into an application to process interactions, the one identifier key generated based on the correlation between the encrypted first identifier vector encrypted with the first encryption and further encrypted with the second encryption, and the encrypted second identifier vector encrypted with the second encryption and further encrypted with the first encryption.

33. The method of claim 32, wherein the second identifier vector corresponds to offline transactions processed by the server.

34. The method of claim 32, wherein the first identifier vector corresponds to online transactions processed by the data processing system.

35. The method of claim 32, wherein the first identifier vector corresponds to online transactions between the data processing system and a computing device comprising a digital assistant.

36. The method of claim 32, comprising:

using, by the data processing system, the key to determine a rate among online transactions corresponding to the first identifier and processed via the data processing system and offline interactions corresponding to the second identifier and processed via the server.

37. The method of claim 32, comprising:

determining, by the data processing system, that the first identifier corresponds to the second identifier based on the correlation count between the first identifier vector and the second identifier vector being above a threshold.

38. The method of claim 32, comprising:

determining, by the data processing system, that a predefined time has passed since generating the one identifier key and delete the first identifier vector and the second identifier vector, responsive to determining that the predefined time that has passed.

39. The method of claim 32, wherein the plurality of first parameters and the plurality of third parameters are a first type of parameter and the plurality of second parameters and the plurality of fourth parameters are a second type of parameter.

40. The method of claim 39, wherein the first type of parameter includes location identifiers and the second type of parameter includes time stamps, the location identifiers and time stamps each identifying a location and a time of a recorded interaction.