Exposure of public internet protocol addresses in an advertising exchange server to improve relevancy of advertisements

• US 9,961,388 B2
• Filed: 10/21/2016
• Issued: 05/01/2018
• Est. Priority Date: 11/26/2008
• Status: Active Grant

• Current Assignee: Samba TV Incorporated
• Original Assignee: Alvir Navin, Ashwin Navin, David Harrison, Josh Smallman
• Inventors: Harrison, David, Smallman, Josh, Navin, Alvir, Navin, Ashwin
• Primary Examiner(s): Kumar, Pankaj
• Assistant Examiner(s): BOYD, ALEXANDER L
• Application Number:
  US15/299,491
• Publication Number:
  US 20170041655A1
• Time in Patent Office: 557 Days
• CPC Class Codes: H04L 2101/622 Layer-2 addresses, e.g. medium access control [MAC] addresses
• CPC Class Codes: H04L 61/5007 Internet protocol [IP] addresses
• CPC Class Codes: H04L 67/104 Peer-to-peer [P2P] networks
• CPC Class Codes: H04L 67/535 Tracking the activity of the user network monitoring arrangements H04L43/00; recording of computer activity G06F11/34
• CPC Class Codes: H04L 67/561 Adding application-functional data or data for application control, e.g. adding metadata
• CPC Class Codes: H04N 21/233 Processing of audio elementary streams monitoring, identification or recognition of audio in broadcast systems H04H60/58
• CPC Class Codes: H04N 21/23418 involving operations for analysing video streams, e.g. detecting features or characteristics television picture signal circuitry for scene change detection H04N5/147; filtering for image enhancement G06T5/00; methods or arrangements for recognising scenes G06V20/00; arrangements characterised by components specially adapted for monitoring, identification or recognition of video in broadcast systems H04H60/59
• CPC Class Codes: H04N 21/237 Communication with additional data server
• CPC Class Codes: H04N 21/2407 Monitoring of transmitted content, e.g. distribution time, number of downloads arrangements for monitoring programmes for broadcast or for distribution combined with broadcast H04H20/14
• CPC Class Codes: H04N 21/25841 involving the geographical location of the client retrieval from the Internet by querying based on geographical locations G06F16/9537; arrangements for identifying locations of receiving stations in broadcast systems H04H60/51; location of the user terminal in data switching networks H04L67/52; services making use of the location of users or terminals in wireless networks H04W4/02; locating users or terminals in wireless networks H04W64/00
• CPC Class Codes: H04N 21/25858 involving client software characteristics, e.g. OS identifier
• CPC Class Codes: H04N 21/2668 Creating a channel for a dedicated end-user group, e.g. insertion of targeted commercials based on end-user profiles information retrieval from the Internet by querying with filtering and personalisation G06F16/9535; arrangements for replacing or switching information during the broadcast H04H20/10; push services over packet-switching network H04L12/1859; adaptation of message content in packet-switching networks H04L51/063
• CPC Class Codes: H04N 21/4331 Caching operations, e.g. of an advertisement for later insertion during playback
• CPC Class Codes: H04N 21/4394 involving operations for analysing the audio stream, e.g. detecting features or characteristics in audio streams arrangements characterised by components specially adapted for monitoring, identification or recognition of audio in broadcast systems H04H60/58
• CPC Class Codes: H04N 21/44008 involving operations for analysing video streams, e.g. detecting features or characteristics in the video stream arrangements characterised by components specially adapted for monitoring, identification or recognition of video in broadcast systems H04H60/59
• CPC Class Codes: H04N 21/458 Scheduling content for creating a personalised stream, e.g. by combining a locally stored advertisement with an incoming stream; Updating operations, e.g. for OS modules ; time-related management operations arrangements for replacing or switching information during the broadcast or during the distribution H04H20/10
• CPC Class Codes: H04N 21/4782 Web browsing , e.g. WebTV
• CPC Class Codes: H04N 21/6125 involving transmission via Internet transmission by internet of broadcast information H04H60/82
• CPC Class Codes: H04N 21/64322 IP
• CPC Class Codes: H04N 21/812 involving advertisement data advertising per se G06Q30/02
• CPC Class Codes: H04N 21/8146 : involving graphical data, e.g. 3D object, 2D graphics
• CPC Class Codes: H04N 21/858 : Linking data to content, e.g. by linking an URL to a video object, by creating a hotspot
• CPC Class Codes: H04N 21/8586 : by using a URL processing chained hypermedia data for information retrieval G06F16/94; information retrieval from the Internet by using URLs G06F16/955; URL in broadcast information H04H20/93; Web-based protocols H04L67/02

Abstract

A method, apparatus and system of exposure of public internet protocol addresses in an advertising exchange server to improve relevancy of advertisements are disclosed. In one embodiment, a method of a client device includes applying an automatic content recognition algorithm to determine a content identifier of an audio-visual data. The client device then associates the content identifier with an advertisement data based on a semantic correlation between a meta-data of the advertisement provided by a content provider and/or the content identifier. The advertisement data may be generated through an advertising exchange server based on the content identifier of the audio-visual data and/or a public internet-protocol address associated with an application requesting the advertisement data. A provider of the content identifier may receive a compensation when the advertisement data is associated with the audio-visual data based on the public internet protocol address associated with the application requesting the advertisement data.

Claims

1. A method of a client device comprising:

applying an automatic content recognition algorithm to determine a content identifier of an audio-visual data;

associating the content identifier with an advertisement data based on a semantic correlation between a meta-data of the advertisement data provided by a content provider and the content identifier,

wherein the advertisement data is generated through an advertising exchange server based on the content identifier of the audio-visual data and a public internet-protocol address associated with an application requesting the advertisement data;

referencing an additional meta-data comprising at least one of the content identifier and the advertisement based on a video processing algorithm,

wherein the additional meta-data is at least one of a title, a description, a thumbnail, a name of an individual, and a historical data, and

wherein the additional meta-data is determined from a browser history captured from the client device based on a capture policy, and correlating a relevance of the browser history with the at least one of the content identifier and the advertisement;

constraining an executable environment in a security sandbox;

executing a sandboxed application in the executable environment using a processor and a memory;

automatically instantiating a connection between the sandboxed application and an unannounced device associated with a networked media device based on the determination that an IP address of a port from the unannounced device is associated with the networked media device;

processing an identification data associated with a sandbox reachable service of the networked media device sharing a public address with the client device;

determining a private address pair of the sandbox reachable service based on the identification data;

establishing a communication session between the sandboxed application and the sandbox reachable service using a cross-site scripting technique of the security sandbox;

appending a header of a hypertext transfer protocol to permit the networked media device to communicate with the sandboxed application as a permitted origin domain through a Cross-origin resource sharing (CORS) algorithm,

wherein the header is either one of an origin header when the CORS algorithm is applied and a referrer header in an alternate algorithm,

wherein the sandboxed application queries a MAC address of the sandbox reachable service in a common private network,

wherein the sandbox reachable service optionally verifies that the sandboxed application is in the common private network,

wherein the sandbox reachable service communicates a MAC address of the sandboxed application to the sandboxed application when the common private network is shared,

wherein the sandboxed application stores the MAC address of the sandboxed application and a unique identifier derived from the MAC address of the sandboxed application, and

wherein the sandboxed application communicates the MAC address and the unique identifier to a pairing server; and

automatically regenerating a script embedded in at least one of the client device, a supply-side platform, and a data provider integrated with the supply side platform when the common private network is shared by the sandboxed application and sandbox reachable service based on the MAC address of the sandboxed application and the unique identifier communicated to the pairing server.

2. The method of claim 1, further comprising:

requesting, through the sandboxed application of the client device, access to at least one of a microphone and a camera on the client device to capture a raw audio/video data; and

executing, through the sandboxed application, arbitrary cross-site scripts based on the script embedded in the at least one of the client device, the supply-side platform, and the data provider integrated with the supply-side platform to improve advertisement targeting,

wherein a provider of the content identifier receives a compensation when the advertisement data is associated with the audio-visual data based on the public internet protocol address associated with the application requesting the advertisement data,

wherein the content provider appends at least one of a set of content identifiers from associated clients and a viewing history from the associated clients to a plurality of advertisements and resells the advertisement data back to an advertising exchange based on the appended content identifiers,

wherein a capture infrastructure annotates the audio-visual data with at least one of a brand name and a product name by comparing entries in a master database with at least one of a closed captioning data of the audio-visual data and through an application of an optical character recognition algorithm in the audio-visual data,

wherein the capture infrastructure processes the raw audio/video data with the at least one of the brand name and the product name by comparing the entries in the master database with at least one of the raw audio/video data and through an application of a sensory recognition algorithm of the raw audio/video data,

wherein the content identifier is obfuscated to enable a particular demand-side platform to eliminate a need to query the provider of the content identifier on a per advertisement spot basis,

wherein the demand-side platform submits requests to the advertising exchange based on a constraint type rather than through a bidding methodology on the per advertisement spot basis,

wherein the content identifier is at least one of a music identification, an object identification, a facial identification, and a voice identification,

wherein a minimal functionality comprising accessing at least one of a tuner and a stream decoder that identifies at least one of a channel and a content is found in the networked media device,

wherein the networked media device produces at least one of an audio fingerprint and a video fingerprint that are communicated with the capture infrastructure,

wherein the capture infrastructure compares the at least one of the audio fingerprint and the video fingerprint with the master database,

wherein the capture infrastructure annotates the audio-visual data with a logo name by comparing the entries in the master database with a logo data of the audio-visual data identified using a logo detection algorithm,

wherein the capture infrastructure automatically divides the audio-visual data into a series of scenes based on a semantic grouping of actions in the audio-visual data,

wherein the audio-visual data is analyzed in advance of a broadcast to determine content identifiers associated with each commercial in the audio-visual data to enable pre-insertion of advertisements into the audio-visual data prior to the broadcast,

wherein the capture infrastructure applies a time-order algorithm to automatically match the advertisements to the audio-visual data when a correlation pattern is identified by the capture infrastructure with other audio-visual content previously analyzed,

wherein the capture infrastructure includes a buffer that is saved to a persistent storage and for which a label is generated to facilitate identification of reoccurring sequences,

wherein a post processing operation is at least one of automated through a post-processing algorithm and a crowd-sourced operation using a plurality of users in which a turing test is applied to determine a veracity of an input,

wherein a device pairing algorithm is used in which a cookie data associated with a web page visited by a user stored on a browser on the client device is paired with the networked media device when the client device is communicatively coupled with the networked media device,

wherein a transitive public IP matching algorithm is utilized in which at least one of the client device and the networked media device communicates each public IP address with any paired entity to the capture infrastructure,

wherein a tag that is unconstrained from a same-origin policy is used to automatically load an advertisement in the browser, and

wherein the tag is at least one of an image tag, a frame, an iframe, and a script tag.

3. The method of claim 1, further comprising:

accessing the pairing server when processing the identification data associated with the sandbox reachable service sharing the public address with the client device,

wherein the pairing server performs a discovery lookup of any device that has announced sharing of the public address associated with the client device, and

wherein the sandbox reachable service announces itself to the pairing server prior to the establishment of the communication session between the sandboxed application and the sandbox reachable service.

4. The method of claim 3, wherein at least one of:

the sandbox reachable service announces an availability of the sandbox reachable service across a range of public addresses such that the sandboxed application communicates with the sandbox reachable service in any one of the range of the public addresses,

the range of public addresses is known by the pairing server to render the announcement of the availability of the sandbox reachable service across the range of public addresses unnecessary,

the sandbox reachable service communicates at least one of a global unique identifier and an alphanumeric name to the pairing server along with the private address pair of the sandbox reachable service, and

the private address pair includes a private IP address and a port number associated with the sandbox reachable service.

5. The method of claim 1, further comprising:

eliminating a communication through a centralized infrastructure when the sandboxed application and the sandbox reachable service communicate in a shared network common to the client device and the networked media device when the connection is instantiated, wherein the shared network is at least one of a local area network, a multicast network, an anycast network, and a multilan network;

minimizing a latency in the communication session when the sandboxed application and the sandbox reachable service communicate in the shared network common to the client device and the networked media device when the connection is instantiated; and

improving privacy in the communication session when the sandboxed application and the sandbox reachable service communicate in the shared network common to the client device and the networked media device when the connection is instantiated.

6. The method of claim 1,

wherein the sandboxed application is at least one of a web page, another script, a binary executable, an intermediate bytecode, an abstract syntax tree, and an executable application in the security sandbox,

wherein the sandboxed application comprises at least one of a HyperText Markup Language 5 (HTML5) application, a Javascript®

application, an Adobe®

Flash®

application, a Microsoft®

Silverlight®

application, a JQuery®

application, an Asynchronous Javascript® and

an XML (AJAX) application, and

wherein an access control algorithm governs a policy through which a secondary authentication is required when establishing the communication session between the sandboxed application and the networked media device.

7. The method of claim 6, further comprising:

utilizing an exception to a same origin policy through a use of at least one of a hyperlink, a form, the another script, a frame, a header, and an image when instantiating the connection between the sandboxed application and the sandbox reachable service.

8. The method of claim 1, further comprising:

extending the security sandbox with a discovery algorithm and a relay algorithm through a discovery module and a relay module added to the security sandbox; and

bypassing the pairing server having the discovery algorithm and the relay algorithm when instantiating the connection between the sandboxed application and the sandbox reachable service when the security sandbox is extended with the discovery algorithm and the relay algorithm through the discovery module and the relay module added to the security sandbox.

9. The method of claim 8, further comprising:

applying the discovery algorithm of the security sandbox to determine that the networked media device having the sandbox reachable service communicates in a shared network common to the client device and the networked media device; and

applying the relay algorithm of the security sandbox to instantiate the connection between the sandboxed application and the sandbox reachable service of the networked media device.

10. The method of claim 8:

wherein the discovery algorithm utilizes a protocol comprising at least one of a Bonjour®

protocol, a SSDP protocol, a LSD uTorrent®

protocol, a multicast protocol, an anycast protocol, and another Local Area Network based protocol that discovers services in a Local Area Network based on a broadcast from any one of an operating system service, the security sandbox, the client device, the sandbox reachable service, and the networked media device.

11. The method of claim 1:

wherein a cookie associated with the security sandbox is used to store a remote access token on a storage of the client device,

wherein the remote access token identifies at least one of a set of communicable private IP addresses and hardware addresses associated with sandbox reachable services that previously operated on a common shared network with the client device, and

wherein the client device is capable of communicating with the sandbox reachable services that previously operated on the common shared network through the remote access token.

12. The method of claim 8:

wherein the networked media device comprises a plurality of sandbox reachable applications including the sandbox reachable application,

wherein a service agent module of the networked media device coordinates communications with the discovery module of at least one of the security sandbox and the pairing server,

wherein the security sandbox is at least one of an operating system on which the sandboxed application is hosted and a browser application of the operating system, and

wherein the networked media device is at least one of a television, a projection screen, a multimedia display, a touchscreen display, an audio device, and a multidimensional visual presentation device.

13. The method of claim 1:

wherein the client device and the networked media device reside on networks that are incommunicable with each other comprising at least one of a firewall separation, a different network separation, a physical separation, and an unreachable connection separation, and

wherein the sandboxed application of the security sandbox of the client device and the sandbox reachable service of the networked media device communicate with each other through a relay service employed by the pairing server having a discovery module and a relay module to facilitate a trusted communication between the sandboxed application and the sandbox reachable service.

14. The method of claim 13:

wherein, in accordance with the trusted communication, the sandboxed application never learns at least one of a private IP address and a hardware address of the networked media device when;

a first Network Address Translator (NAT) device coupled with a network on which the client device operates receives communications from a public IP address of a different network on which the sandbox reachable service operates, and

a second NAT device coupled with the different network on which the networked media device operates translates the private IP address of the networked media device to the public IP address visible to the sandboxed application.

15. The method of claim 13, further comprising:

utilizing at least one of a WebSocket and a long polling service message query interface to reduce a latency of message delivery during the trusted communication between the sandboxed application and the sandbox reachable service; and

optimizing a polling period between polling to be less than a timeout period of a session through the relay service.

16. The method of claim 13, further comprising:

initiating the relay service through at least one of a series of web pages where information is communicated using hyperlinks that point at the pairing server, and a form having a confirmation dialog that is submitted back to the pairing server, and

wherein a global unique identifier is masked through the pairing server when the confirmation dialog is served from the pairing server.

17. A method of a networked device comprising:

applying an automatic content recognition algorithm to determine a content identifier of an audio-visual data;

associating the content identifier with an advertisement data based on a semantic correlation between a meta-data of the advertisement provided by a content provider and the content identifier,

wherein the advertisement data is generated through an advertising exchange server based on the content identifier of the audio-visual data and a public internet protocol address associated with an application requesting the advertisement data;

accessing a pairing server when processing an identification data associated with a sandbox reachable service of the networked device that shares a public address with a client device,

wherein the pairing server performs a discovery lookup of any device that has announced sharing of the public address associated with the client device, and

wherein the sandbox reachable service announces itself to the pairing server prior to establishment of a communication session between a sandboxed application executing on the client device and the sandbox reachable service;

appending a header of a hypertext transfer protocol to permit the networked device to communicate with the sandboxed application as a permitted origin domain through a CORS algorithm,

wherein the header is either one of a origin header when the CORS algorithm is applied and a referrer header in an alternate algorithm, and

wherein the client device;

processes an identification data associated with the sandbox reachable service sharing the public address with the client device,

determines a private address pair of the sandbox reachable service based on the identification data, and

establishes the communication session between the sandboxed application and the sandbox reachable service using a cross-site scripting technique of a security sandbox,

wherein the sandboxed application queries a MAC address of the sandbox reachable service in a common private network,

wherein the sandbox reachable service optionally verifies that the sandboxed application is in the common private network,

wherein the sandbox reachable service communicates a MAC address of the sandboxed application to the sandboxed application when the common private network is shared,

wherein the sandboxed application stores the MAC address of the sandboxed application and a unique identifier derived from the MAC address of the sandboxed application, and

wherein the sandboxed application communicates the MAC address and the unique identifier to the pairing server; and

automatically regenerating a script embedded in at least one of the client device, a supply-side platform, and a data provider integrated with the supply side platform when the common private network is shared by the sandboxed application and sandbox reachable service based on the MAC address of the sandboxed application and the unique identifier communicated to the pairing server.

18. The method of claim 17, wherein at least one of:

a provider of the content identifier receives a compensation when the advertisement data is associated with the audio-visual data based on the public internet protocol address associated with the application requesting the advertisement data,

the content provider appends at least one of a set of content identifiers from associated clients and a viewing history from the associated clients to a plurality of advertisements and resells the advertisement data back to an advertising exchange based on the appended content identifiers,

a capture infrastructure annotates the audio-visual data with at least one of a brand name and a product name by comparing entries in a master database with at least one of a closed captioning data of the audio-visual data and through an application of an optical character recognition algorithm in the audio-visual data,

the sandboxed application of the client device requests access to at least one of a microphone and a camera on the client device to capture a raw audio/video data,

the capture infrastructure processes the raw audio/video data with the at least one of the brand name and the product name by comparing entries in the master database with at least one of the raw audio/video data and through an application of a sensory recognition algorithm of the raw audio/video data,

advertisement targeting is improved when the script is embedded in the at least one of the client device, the supply-side platform, and the data provider integrated with the supply-side platform to execute arbitrary cross-site scripts in the sandboxed application of the client device,

the content identifier is obfuscated to be relevant to a particular demand-side platform to eliminate a need to query the provider of the content identifier on a per advertisement spot basis,

the demand-side platform submits requests to the advertising exchange based on a constraint type rather than through a bidding methodology on the per advertisement spot basis,

the content identifier is at least one of a music identification, an object identification, a facial identification, and a voice identification,

a minimal functionality comprising accessing at least one of a tuner and a stream decoder that identifies at least one of a channel and a content is found in the networked device,

the networked device produces at least one of an audio fingerprint and a video fingerprint that are communicated with the capture infrastructure,

the capture infrastructure compares the at least one of the audio fingerprint and the video fingerprint with the master database,

the capture infrastructure annotates the audio-visual data with a logo name by comparing the entries in the master database with a logo data of the audio-visual data identified using a logo detection algorithm,

the capture infrastructure automatically divides the audio-visual data into a series of scenes based on a semantic grouping of actions in the audio-visual data,

the audio-visual data is analyzed in advance of a broadcast to determine content identifiers associated with each commercial in the audio-visual data to enable pre-insertion of advertisements into the audio-visual data prior to the broadcast,

the capture infrastructure applies a time-order algorithm to automatically match the advertisements to the audio-visual data when a correlation pattern is identified by the capture infrastructure with other audio-visual content previously analyzed,

the capture infrastructure includes a buffer that is saved to a persistent storage and for which a label is generated to facilitate identification of reoccurring sequences,

a post processing operation is at least one of automated through a post-processing algorithm and a crowd-sourced operation using a plurality of users in which a turing test is applied to determine a veracity of an input,

a device pairing algorithm is used in which a cookie data associated with a web page visited by a user stored on a browser on the client device is paired with the networked device when the client device is communicatively coupled with the networked device,

a transitive public IP matching algorithm is utilized in which at least one of the client device and the networked device communicates each public IP address with any paired entity to the capture infrastructure,

a tag that is unconstrained from a same-origin policy is used to automatically load an advertisement in the browser, and

the tag is at least one of an image tag, a frame, an iframe, and a script tag.

19. The method of claim 17, further comprising at least one of:

announcing an availability of the sandbox reachable service across a range of public addresses such that the sandboxed application communicates with the sandbox reachable service in any one of the range of the public addresses; and

communicating at least one of a global unique identifier, a hardware address, and an alphanumeric name to the pairing server along with the private address pair of the sandbox reachable service,

wherein the private address pair includes a private IP address and a port number associated with the sandbox reachable service.

20. The method of claim 17, further comprising:

eliminating a communication through a centralized infrastructure when the sandboxed application and the sandbox reachable service communicate in a shared network common to the client device and the networked device when the communication session is established,

wherein the shared network is at least one of a local area network, a multicast network, an anycast network, and a multilan network;

minimizing a latency in the communication session when the sandboxed application and the sandbox reachable service communicate in the shared network common to the client device and the networked device when the communication session is established; and

improving privacy in the communication session when the sandboxed application and the sandbox reachable service communicate in the shared network common to the client device and the networked device when the communication session is established.

21. The method of claim 17:

wherein the sandboxed application is at least one of a web page, another script, a binary executable, an intermediate bytecode, an abstract syntax tree, and an executable application in the security sandbox,

wherein the sandboxed application comprises at least one of a HyperText Markup Language 5 (HTML5) application, a Javascript®

application, an Adobe®

Flash®

application, a Microsoft®

Silverlight®

application, a JQuery®

application, an Asynchronous Javascript® and

an XML (AJAX) application, and

wherein an access control algorithm governs a policy through which a secondary authentication is required when establishing the communication session between the sandboxed application and the networked device.

22. The method of claim 21, wherein the communication session with the client device is in accordance with the client device:

utilizing an exception to a same origin policy through a use of at least one of a hyperlink, a form, the another script, a frame, a header, and an image when establishing the communication session between the sandboxed application and the sandbox reachable service.

23. The method of claim 17, wherein the establishment of the communication session with the client device is in accordance with the client device:

extending the security sandbox with a discovery algorithm and a relay algorithm through a discovery module and a relay module added to the security sandbox; and

bypassing the pairing server having the discovery algorithm and the relay algorithm when establishing the communication session between the sandboxed application and the sandbox reachable service when the security is extended with the discovery algorithm and the relay algorithm through the discovery module and the relay module added to the security sandbox.

24. The method of claim 23, wherein the establishment of the communication session with the client device is in accordance with the client device:

applying the discovery algorithm of the security sandbox to determine that the networked device having the sandbox reachable service communicates in a shared network common to the client device and the networked device; and

applying the relay algorithm of the security sandbox to establish the communication session between the sandboxed application and the sandbox reachable service of the networked device.

25. The method of claim 23:

wherein the discovery algorithm utilizes a protocol comprising at least one of a Bonjour®

protocol, a SSDP protocol, a LSD uTorrent®

protocol, a multicast protocol, an anycast protocol, and another Local Area Network based protocol that discovers services in a Local Area Network based on a broadcast from any one of an operating system service, the security sandbox, the client device, the sandbox reachable service, and the networked device.

26. The method of claim 23:

wherein the client device and the networked device reside on networks that are incommunicable with each other comprising at least one of a firewall separation, a different network separation, a physical separation, and an unreachable connection separation, and

wherein the sandboxed application of the security sandbox of the client device and the sandbox reachable service of the networked device communicate with each other through a relay service employed by the pairing server having the discovery module and the relay module to facilitate a trusted communication between the sandboxed application and the sandbox reachable service.

27. The method of claim 26:

wherein, in accordance with the trusted communication, the sandboxed application never learns at least one of a private IP address and a hardware address of the networked device when;

a first NAT device coupled with a network on which the client device operates receives communications from a public IP address of a different network on which the sandbox reachable service operates, and

a second NAT device coupled with the different network on which the networked device operates translates the private IP address of the networked device to the public IP address visible to the sandboxed application.

28. The method of claim 23:

wherein the networked device comprises a plurality of sandbox reachable applications including the sandbox reachable application,

wherein a service agent module of the networked device coordinates communications with the discovery module of at least one of the security sandbox and the pairing server,

wherein the security sandbox is at least one of an operating system on which the sandboxed application is hosted and a browser application of the operating system, and

wherein the networked device is at least one of a television, a projection screen, a multimedia display, a touchscreen display, an audio device, a weather measurement device, a traffic monitoring device, a status update device, a global positioning device, a geospatial estimation device, a tracking device, a bidirectional communication device, a unicast device, a broadcast device, and a multidimensional visual presentation device.

29. The method of claim 26, wherein the communication session with the client device is in accordance with the client device:

utilizing at least one of a WebSocket and a long polling service message query interface to reduce a latency of message delivery during the trusted communication between the sandboxed application and the sandbox reachable service; and

optimizing a polling period between polling to be less than a timeout period of a session through the relay service.

30. The method of claim 29, wherein the communication session with the client device is in accordance with the client device:

initiating the relay service through at least one of a series of web pages where information is communicated using hyperlinks that point at the pairing server, and a form having a confirmation dialog that is submitted back to the pairing server, and

wherein a global unique identifier is masked through the pairing server when the confirmation dialog is served from the pairing server.

31. The method of claim 17:

wherein a cookie associated with the security sandbox is used to store a remote access token on a storage of the client device,

wherein the remote access token identifies at least one of a set of communicable private IP addresses and hardware addresses associated with sandbox reachable services that previously operated on a common shared network with the client device, and

wherein the client device is capable of communicating with the sandbox reachable services that previously operated on the common shared network through the remote access token.

32. A system comprising:

a networked device and a client device to apply an automatic content recognition algorithm to determine a content identifier of an audio-visual data and to associate the content identifier with an advertisement data based on a semantic correlation between a meta-data of the advertisement provided by a content provider and the content identifier, the networked device executing a sandbox reachable service thereon and the client device executing a sandboxed application thereon;

a capture infrastructure to annotate the audio-visual data with at least one of a brand name and a product name by comparing entries in a master database with at least one of a closed captioning data of the audio-visual data and through an application of an optical character recognition algorithm in the audio-visual data; and

an advertising exchange server to generate an advertisement based on the content identifier of the audio-visual data and a public internet protocol address associated with an application requesting the advertisement data,

wherein a communication session between the networked device and the client device is established by appending a header of a hypertext transfer protocol to permit the networked device to communicate with the sandboxed application as a permitted origin domain through a CORS algorithm,

wherein the header is either one of an origin header when the CORS algorithm is applied and a referrer header in an alternate algorithm,

wherein the sandboxed application queries a MAC address of the sandbox reachable service in a common private network,

wherein the sandbox reachable service optionally verifies that the sandboxed application is in the common private network,

wherein the sandbox reachable service communicates a MAC address of the sandboxed application to the sandboxed application when the common private network is shared,

wherein the sandboxed application stores the MAC address of the sandboxed application and a unique identifier derived from the MAC address of the sandboxed application,

wherein the sandboxed application communicates the MAC address and the unique identifier to a pairing server, and

wherein the client device automatically regenerates a script embedded in at least one of the client device, a supply-side platform, and a data provider integrated with the supply side platform when the common private network is shared by the sandboxed application and sandboxed application based on the MAC address of the sandboxed application and the unique identifier communicated to the pairing server.

33. The system of claim 32, wherein at least one of:

a provider of the content identifier receives a compensation when the advertisement data is associated with the audio-visual data based on the public internet protocol address associated with the application requesting the advertisement data,

the content provider appends at least one of a set of content identifiers from associated clients and a viewing history from the associated clients to a plurality of advertisements and resells the advertisement data back to an advertising exchange based on the appended content identifiers,

the sandboxed application of the client device requests access to at least one of a microphone and a camera on the client device to capture a raw audio/video data,

the capture infrastructure processes the raw audio/video data with the at least one of the brand name and the product name by comparing the entries in the master database with at least one of the raw audio/video data and through an application of a sensory recognition algorithm of the raw audio/video data,

advertisement targeting is improved when the script is embedded in the at least one of the client device, the supply-side platform, and the data provider integrated with the supply side platform to execute arbitrary cross-site scripts in the sandboxed application of the client device,

the content identifier is obfuscated to be relevant to a particular demand-side platform to eliminate a need to query the provider of the content identifier on a per advertisement spot basis,

the demand-side platform submits requests to the advertising exchange based on a constraint type rather than through a bidding methodology on the per advertisement spot basis,

the content identifier is at least one of a music identification, an object identification, a facial identification, and a voice identification,

a minimal functionality comprising accessing at least one of a tuner and a stream decoder that identifies at least one of a channel and a content is found in the networked device,

the networked device produces at least one of an audio fingerprint and a video fingerprint that are communicated with the capture infrastructure,

the capture infrastructure compares the at least one of the audio fingerprint and the video fingerprint with the master database,

the capture infrastructure annotates the audio-visual data with a logo name by comparing the entries in the master database with a logo data of the audio-visual data identified using a logo detection algorithm,

the capture infrastructure automatically divides the audio-visual data into a series of scenes based on a semantic grouping of actions in the audio-visual data,

the audio-visual data is analyzed in advance of a broadcast to determine content identifiers associated with each commercial in the audio-visual data to enable pre-insertion of advertisements into the audio-visual data prior to the broadcast,

the capture infrastructure applies a time-order algorithm to automatically match the advertisements to the audio-visual data when a correlation pattern is identified by the capture infrastructure with other audio-visual content previously analyzed,

the capture infrastructure includes a buffer that is saved to a persistent storage and for which a label is generated to facilitate identification of reoccurring sequences,

a post processing operation is at least one of automated through a post-processing algorithm and a crowd-sourced operation using a plurality of users in which a turing test is applied to determine a veracity of an input,

a device pairing algorithm is used in which a cookie data associated with a web page visited by a user stored on a browser on the client device is paired with the networked device when the client device is communicatively coupled with the networked device,

a transitive public IP matching algorithm is utilized in which at least one of the client device and the networked device communicates each public IP address with any paired entity to the capture infrastructure,

a tag that is unconstrained from a same-origin policy is used to automatically load an advertisement in the browser, and

the tag is at least one of an image tag, a frame, an iframe, and a script tag.

34. The system of claim 32, wherein the client device:

accesses the pairing server when processing an identification data associated with the sandbox reachable service sharing a public address with the client device,

wherein the pairing server performs a discovery lookup of any devices that have announced sharing of the public address associated with the client device, and

wherein the sandbox reachable service announces itself to the pairing server prior to the establishment of the communication session between the sandboxed application and the sandbox reachable service.

35. The system of claim 34, wherein the networked device to at least one of:

announce the sandbox reachable service of the networked device to a discovery module using a processor and memory,

announce an availability of the sandbox reachable service across a range of public addresses such that the sandboxed application communicates with the sandbox reachable service in any one of the range of the public addresses,

communicate at least one of a global unique identifier and an alphanumeric name to the pairing server along with at least one of a hardware address associated with the networked device, a public address pair associated with a sandbox reachable service of the networked device, and a private address pair associated with the sandbox reachable service of the networked device, and

wherein the private address pair includes a private IP address and a port number associated with the sandbox reachable service.

36. The system of claim 32, wherein the client device:

eliminates a communication through a centralized infrastructure when the sandboxed application and the sandbox reachable service communicate in a shared network common to the client device and the networked device when the communication session is established,

wherein the shared network is at least one of a local area network, a multicast network, an anycast network, and a multilan network,

minimizes a latency in the communication session when the sandboxed application and the sandbox reachable service communicate in the shared network common to the client device and the networked device when the communication session is established, and

improves privacy in the communication session when the sandboxed application and the sandbox reachable service communicate in the shared network common to the client device and the networked device when the communication session is established.

37. The system of claim 32:

wherein the sandboxed application is at least one of a web page, another script, a binary executable, an intermediate bytecode, an abstract syntax tree, and an executable application in the security sandbox,

wherein the sandboxed application comprises at least one of a HyperText Markup Language 5 (HTML5) application, a Javascript®

application, an Adobe®

Flash®

application, a Microsoft®

Silverlight®

application, a JQuery®

application, an Asynchronous Javascript® and

an XML (AJAX) application, and

wherein an access control algorithm governs a policy through which a secondary authentication is required when establishing the communication session between the sandboxed application and the networked device.

38. The system of claim 37, wherein the client device:

utilizes an exception to a same origin policy through a use of at least one of a hyperlink, a form, the another script, a frame, a header, and an image when establishing the communication session between the sandboxed application and the sandbox reachable service.

39. The system of claim 32, wherein the client device:

extends the security sandbox with a discovery algorithm and a relay algorithm through a discovery module and a relay module added to the security sandbox, and

bypasses the pairing server having the discovery algorithm and the relay algorithm when establishing the communication session between the sandboxed application and the sandbox reachable service when the security is extended with the discovery algorithm and the relay algorithm through the discovery module and the relay module added to the security sandbox.

40. The system of claim 39, wherein the client device:

applies the discovery algorithm of the security sandbox to determine that the networked device having the sandbox reachable service communicates in a shared network common to the client device and the networked device, and

applies the relay algorithm of the security sandbox to establish the communication session between the sandboxed application and the sandbox reachable service of the networked device.

41. The system of claim 39:

wherein the discovery algorithm utilizes a protocol comprising at least one of a Bonjour®

protocol, a SSDP protocol, a LSD uTorrent®

protocol, a multicast protocol, an anycast protocol, and another Local Area Network based protocol that discovers services in a Local Area Network based on a broadcast from any one of an operating system service, the security sandbox, the client device, the sandbox reachable service, and the networked device.

42. The system of claim 39:

wherein the client device and the networked device reside on networks that are incommunicable with each other comprising at least one of a firewall separation, a different network separation, a physical separation, and an unreachable connection separation, and

wherein the sandboxed application of the security sandbox of the client device and the sandbox reachable service of the networked device communicate with each other through a relay service employed by the pairing server having the discovery module and the relay module to facilitate a trusted communication between the sandboxed application and the sandbox reachable service.

43. The system of claim 42:

wherein, in accordance with the trusted communication, the sandboxed application never learns at least one of a private IP address and a hardware address of the networked device when;

a first NAT device coupled with a network on which the client device operates receives communications from a public IP address of a different network on which the sandbox reachable service operates, and

a second NAT device coupled with the different network on which the networked device operates translates the private IP address of the networked device to the public IP address visible to the sandboxed application.

44. The system of claim 42, wherein the client device:

utilizes at least one of a WebSocket and a long polling service message query interface to reduce a latency of message delivery during the trusted communication between the sandboxed application and the sandbox reachable service, and

optimizes a polling period between polling to be less than a timeout period of a session through the relay service.

45. The system of claim 42, wherein the client device:

initiates the relay service through at least one of a series of web pages where information is communicated using hyperlinks that point at the pairing server, and a form having a confirmation dialog that is submitted back to the pairing server, and

wherein a global unique identifier is masked through the pairing server when the confirmation dialog is served from the pairing server.

46. The system of claim 39:

wherein the networked device comprises a plurality of sandbox reachable applications including the sandbox reachable application,

wherein a service agent module of the networked device coordinates communications with the discovery module of at least one of the security sandbox and the pairing server,

wherein the security sandbox is at least one of an operating system on which the sandboxed application is hosted and a browser application of the operating system, and

wherein the networked device is at least one of a television, a projection screen, a multimedia display, a touchscreen display, an audio device, a weather measurement device, a traffic monitoring device, a status update device, a global positioning device, a geospatial estimation device, a tracking device, a bidirectional communication device, a unicast device, a broadcast device, and a multidimensional visual presentation device.

47. The system of claim 32:

wherein a cookie associated with the security sandbox is used to store a remote access token on a storage of the client device,

wherein the remote access token identifies at least one of a set of communicable private IP addresses and hardware addresses associated with sandbox reachable services that previously operated on a common shared network with the client device, and

wherein the client device is capable of communicating with the sandbox reachable services that previously operated on the common shared network through the remote access token.