Systems, methods, and devices for digital advertising ecosystems implementing content delivery networks utilizing edge computing
View Patent ↗Disclosed herein are systems and techniques for using a content delivery network to perform various functions within a digital advertising ecosystem, in ways that yield technological benefits such as improved security, efficiency, and speed (for example, reduction in publisher load times). As one specific example, a content delivery network can be used for the creation of electronic tokens for user identity protection between demand side platforms, supply side platforms, content creators (for example, advertisers), and publishers.
1. A computing system for a content delivery network enabling identity escrow and preventing user-based data leakage and cookie-mapping, the computing system comprising:
a computer readable storage medium having program instructions embodied therewith; and
one or more processors configured to execute the program instructions to cause the computer system to perform the processes of:
initiating delivery of content to a computing system of a user in response to a request for the content by the computing system of the user;
storing a first deterministic identifier associated with the user, wherein the first deterministic identifier comprises a first lexical token associated with at least one type of identifying data for the user;
storing user-specific preference information associated with the user based on the first deterministic identifier associated with the user;
receiving, from a publisher, a second deterministic identifier, wherein the second deterministic identifier comprises a second lexical token, wherein the publisher does not have access to the first deterministic identifier or the at least one type of identifying data for the user or the user-specific preference information;
determining if the second deterministic identifier is associated with the user associated with the first deterministic identifier;
retrieving the stored user-specific preference information associated with the user based on a determination that the second deterministic identifier and the first deterministic identifier are both associated with the user;
generating an encrypted token for identity escrow based on the retrieved user-specific preference information associated with the user, wherein the generated encrypted token does not comprise any personally identifiable information for the user, wherein personally identifiable information comprises data that could potentially identify the user, distinguish the user from another user, or be used for de-anonymizing previously anonymous user data;
determining a level of permission associated with one or more of a plurality of demand side platforms to possess a subset of the personally identifiable information for the user, wherein the subset of the personally identifiable information comprises data owned by the one or more of the plurality of demand side platforms or data enabled to be shared to one or more demand side platforms via a subscription;
if at least one of the plurality of demand side platforms is determined to be associated with a level of permission to possess the subset of the personally identifiable information:
retrieving the subset of the personally identifiable information for the user that at least one of the plurality of demand side platforms is authorized to possess based at least in part on the determined level of permission associated with the at least one of the plurality of demand side platforms, wherein the at least one of the plurality of demand side platforms is authorized to access the subset of the personally identifiable information, and wherein at least one other demand side platform of the plurality of demand side platforms is authorized to access a different subset of the personally identifiable information;
encrypting the subset of the personally identifiable information for the user, using an encryption scheme that prevents unauthorized parties from accessing the data; and
adding the encrypted subset of the personally identifiable information to the encrypted token;
transmitting the encrypted token to the publisher for submission alongside a bid request to a demand-side platform for real-time bidding;
transmitting, to the at least one at least one of the plurality of demand side platforms which possesses or is authorized to possess the subset of the personally identifiable information, a method for decrypting the subset of the personally identifiable information to the encrypted token,
wherein the encrypted subset of the personally identifiable information of the encrypted token is configured to be inaccessible to any of the plurality of demand side platforms which has not be been determined to possess or be authorized to possess the subset of the personally identifiable information; and
delivering to the computing system of the user the content and an ad impression, wherein the ad impression won the real-time bidding without access to personally identifiable information for the user and without cookie-mapping.
2. The computing system of claim 1 , wherein the real-time bidding is processed outside of a header of the browser of the user device.
3. The computing system of claim 1 , wherein the real-time bidding is processed within a header of the browser of the user device.
4. The computing system of claim 1 , wherein the computing system is a proxy server of the content delivery network.
5. The computing system of claim 1 , wherein the user-specific preference information comprises market segment membership information associated with the user.
6. The computing system of claim 1 , wherein the user-specific preference information comprises purchasing preferences associated with the user.
7. The computing system of claim 1 , wherein the first deterministic identifier is an email address for the user.
8. The computing system of claim 1 , wherein the second deterministic identifier received from the publisher is associated with an impression opportunity offered by the publisher.
9. The computing system of claim 1 , wherein the program instructions when executed further cause the system to perform the step of transmitting the encrypted token to a supply-side platform.
10. The computing system of claim 1 , wherein the program instructions when executed further cause the system to perform the steps of:
receiving, from the demand-side platform, a request for the user-specific preference information associated with the user that is included in the encrypted token; and
providing the demand-side platform the user-specific preference information associated with the user by decrypting the encrypted token.
11. The computing system of claim 1 , wherein the program instructions when executed further cause the system to perform the steps of:
receiving, from the demand-side platform, a request for the user-specific preference information associated with the user that is included in the encrypted token; and
providing the demand-side platform the stored user-specific preference information associated with the user.
12. A computer-implemented method for enabling identity escrow and preventing user-based data leakage and cookie-mapping, the method comprising:
initiating delivery of content to a computing system of a user in response to a request for the content by the computing system of the user;
storing a first deterministic identifier associated with het user, wherein the first deterministic identifier comprises a first lexical token associated with at least one type of identifying data for the user;
storing user-specific preference information associated with the user based on the first deterministic identifier associated with the user;
receiving, from a publisher, a second deterministic identifier, wherein the second deterministic identifier comprises a second lexical token, wherein the publisher does not have access to the first deterministic identifier or the at least one type of identifying data for the user or the user-specific preference information;
determining if the second deterministic identifier is associated with the user associated with the first deterministic identifier;
retrieving the stored user-specific preference information associated with the user based on a determination that the second deterministic identifier and the first deterministic identifier are both associated with the user;
generating an encrypted token based on the retrieved user-specific preference information associated with the user, wherein the generated encrypted token does not comprise any personally identifiable information for the user, wherein personally identifiable information comprises data that could potentially identify the user, distinguish the user from another user, or be used for de-anonymizing previously anonymous user data;
determining a level of permission associated with one or more of a plurality of demand side platforms to possess a subset of the personally identifiable information for the user, wherein the subset of the personally identifiable information comprises data owned by the one or more of the plurality of demand side platforms or data enabled to be shared to one or more demand side platforms via a subscription;
if at least one of the plurality of demand side platforms is determined to be associated with a level of permission to possess the subset of the personally identifiable information:
retrieving the subset of the personally identifiable information for the user that at least one of the plurality of demand side platforms is authorized to possess based at least in part on the determined level of permission associated with the at least one of the plurality of demand side platforms, wherein the at least one of the plurality of demand side platforms is authorized to access the subset of the personally identifiable information, and wherein at least one other demand side platform of the plurality of demand side platforms is authorized to access a different subset of the personally identifiable information;
encrypting the subset of the personally identifiable information for the user, using an encryption scheme that prevents unauthorized parties from accessing the data; and
adding the encrypted subset of the personally identifiable information to the encrypted token;
transmitting the encrypted token to the publisher for submission alongside a bid request to a demand-side platform for real-time bidding;
transmitting, to the at least one at least one of the plurality of demand side platforms which possesses or is authorized to possess the subset of the personally identifiable information, a method for decrypting the subset of the personally identifiable information to the encrypted token,
wherein the encrypted subset of the personally identifiable information of the encrypted token is configured to be inaccessible to any of the plurality of demand side platforms which has not be been determined to possess or be authorized to possess the subset of the personally identifiable information; and
delivering to the computing system of the user the content and an ad impression, wherein the ad impression won the real-time bidding without access to personally identifiable information for the user and without cookie-mapping.
13. The method of claim 12 , wherein the real-time bidding is processed outside of a header of the browser of the user device.
14. The method of claim 12 , wherein the user-specific preference information comprises market segment membership information associated with the user.
15. The method of claim 12 , wherein the user-specific preference information comprises purchasing preferences associated with the user.
16. The method of claim 12 , wherein the first deterministic identifier is an email address for the user.
17. Non-transitory computer readable storage media storing instructions that, when executed by one or more processors, cause the one or more processors to enable identity escrow and prevent user-based data leakage and cookie-mapping by performing the steps of:
initiating delivery of content to a computing system of a user in response to a request for the content by the computing system of the user;
storing a first deterministic identifier associated with the user, wherein the first deterministic identifier comprises a first lexical token associated with at least one type of identifying data for the user;
storing user-specific preference information associated with the user based on the first deterministic identifier associated with the user;
receiving, from a publisher, a second deterministic identifier, wherein the second deterministic identifier comprises a second lexical token, wherein the publisher does not have access to the first deterministic identifier or the at least one type of identifying data for the user or the user-specific preference information;
determining if the second deterministic identifier is associated with the user associated with the first deterministic identifier;
retrieving the stored user-specific preference information associated with the user based on a determination that the second deterministic identifier and the first deterministic identifier are both associated with the user;
generating an encrypted token based on the retrieved user-specific preference information associated with the user, wherein the generated encrypted token does not comprise any personally identifiable information for the user, wherein personally identifiable information comprises data that could potentially identify the user, distinguish the user from another user, or be used for de-anonymizing previously anonymous user data;
determining a level of permission associated with one or more of a plurality of demand side platforms to possess a subset of the personally identifiable information for the user, wherein the subset of the personally identifiable information comprises data owned by the one or more of the plurality of demand side platforms or data enabled to be shared to one or more demand side platforms via a subscription;
if at least one of the plurality of demand side platforms is determined to be associated with a level of permission to possess the subset of the personally identifiable information:
retrieving the subset of the personally identifiable information for the user that at least one of the plurality of demand side platforms is authorized to possess based at least in part on the determined level of permission associated with the at least one of the plurality of demand side platforms, wherein the at least one of the plurality of demand side platforms is authorized to access the subset of the personally identifiable information, and wherein at least one other demand side platform of the plurality of demand side platforms is authorized to access a different subset of the personally identifiable information ;
encrypting the subset of the personally identifiable information for the user, using an encryption scheme that prevents unauthorized parties from accessing the data; and
adding the encrypted subset of the personally identifiable information to the encrypted token;
transmitting the encrypted token to the publisher for submission alongside a bid request to a demand-side platform for real-time bidding;
transmitting, to the at least one at least one of the plurality of demand side platforms which possesses or is authorized to possess the subset of the personally identifiable information, a method for decrypting the subset of the personally identifiable information to the encrypted token,
wherein the encrypted subset of the personally identifiable information of the encrypted token is configured to be inaccessible to any of the plurality of demand side platforms which has not be been determined to possess or be authorized to possess the subset of the personally identifiable information; and
delivering to the computing system of the user the content and an ad impression, wherein the ad impression won the real-time bidding without access to personally identifiable information for the user and without cookie-mapping.
18. The non-transitory computer readable storage media of claim 17 , wherein the real-time bidding is processed outside of a header of the browser of the user device.
19. The non-transitory computer readable storage media of claim 17 , wherein the user-specific preference information comprises market segment membership information associated with the user.