Granted Patent B2

US 12,309,260 · App. 18/664,809 · Granted May 20, 2025

Inventors: Gang Wang (Frederick, MD); Marcel M. Moti Yung (New York, NY)

Assignee: Google LLC

H04L9/0825H04L9/008H04L9/14

Abstract

Claims (67)

1. A computer-implemented method, comprising:

receiving, by a first aggregation server and from each of multiple client devices, impression data that includes, for each impression of a digital component recorded by the client device, (i) a first join key that is based on a unique identifier associated with the impression, and (ii) encrypted impression data for the impression;

encrypting, by the first aggregation server, the first join key for each impression;

providing, by the first aggregation server and to a second aggregation server, a first tuple of data for each impression, wherein the first tuple of data for an impression comprises the encrypted first join key and the encrypted impression data for the impression;

receiving, by the first aggregation server and from the second aggregations server, a second tuple of data for each conversion for which the second aggregation server received encrypted conversion data, wherein the second tuple of data for a conversion comprises an encrypted second join key and the encrypted conversion data for the conversion, wherein each encrypted second join key is based on a unique identifier associated with the conversion;

determining, by the first aggregation server and for each of multiple digital components, an impression count based on a number of encrypted first tuples that include encrypted impression data corresponding to an impression of the digital component;

determining, by the first aggregation server and for each of the multiple digital components, a conversion count based on a number of encrypted second tuples that include encrypted conversion data corresponding to a conversion of the digital component; and

sending, by the first aggregation server and to a recipient, data indicating the impression count and the conversion count.

2. The method of claim 1 , wherein the unique identifier associated with each impression comprises one of (i) an identifier of a client device at which the impression occurred, (ii) an identifier of a user that viewed the digital component of the impression, (iii) a cryptographic hash of an e-mail address of the user, (iv) a cryptographic hash of a phone number of the user, or (v) a cryptographic hash of sign in credentials of the user.

3. The method of claim 1 , wherein the unique identifier associated with each conversion comprises one of (i) an identifier of a client device at which the conversion occurred, (ii) an identifier of a user that completed the conversion, (iii) a cryptographic hash of an e-mail address of the user, (iv) a cryptographic hash of a phone number of the user, or (v) a cryptographic hash of sign in credentials of the user.

4. The method of claim 1 , further comprising:

identifying, using the first join keys and the second join keys, pairs of first tuples of data and second tuples of data for which the first join key of the first tuple of data matches the second join key of the second tuple of data; and

identifying, for a given pair of a first tuple of data and a second tuple of data, each other pair for which the encrypted impression data and the encrypted conversion data of the first tuple of data and the second tuple of data matches the encrypted impression data and the encrypted conversion data of the given pair; and

identifying a number of unique first join keys across the given pair and each other pair; and

providing, as cross conversion data, the number of unique join keys.

5. The method of claim 4 , further comprising, prior to providing the cross conversion data:

comparing the number of unique first join keys to a k-anonymity threshold; and

providing, to a reporting system, the cross conversion data in response to determining that number of unique first join keys satisfies the k-anonymity threshold.

6. The method of claim 1 , further comprising:

comparing the impression count for each digital component of the multiple digital components to a k-anonymity threshold; and

providing each impression count that satisfies the k-anonymity threshold to a reporting system.

7. The method of claim 1 , further comprising:

comparing the conversion count for each digital component of the multiple digital components to a k-anonymity threshold; and

providing each conversion count that satisfies the k-anonymity threshold to a reporting system.

8. The method of claim 1 , wherein the encrypted conversion data for each conversion comprises a thrice-encrypted conversion value that is encrypted first using a probabilistic homomorphic additive public key encryption technique, encrypted second using a public key of the second aggregation server, and encrypted third using a public key of the first aggregation server.

9. A system comprising:

a first aggregation server comprising one or more processors; and

one or more storage devices storing instructions that, when executed by the one or more processors, cause the one or more processors to perform operations comprising:

receiving, by the first aggregation server and from each of multiple client devices, impression data that includes, for each impression of a digital component recorded by the client device, (i) a first join key that is based on a unique identifier associated with the impression, and (ii) encrypted impression data for the impression;

encrypting, by the first aggregation server, the first join key for each impression;

providing, by the first aggregation server and to a second aggregation server, a first tuple of data for each impression, wherein the first tuple of data for an impression comprises the encrypted first join key and the encrypted impression data for the impression;

receiving, by the first aggregation server and from the second aggregations server, a second tuple of data for each conversion for which the second aggregation server received encrypted conversion data, wherein the second tuple of data for a conversion comprises an encrypted second join key and the encrypted conversion data for the conversion, wherein each encrypted second join key is based on a unique identifier associated with the conversion;

determining, by the first aggregation server and for each of multiple digital components, an impression count based on a number of encrypted first tuples that include encrypted impression data corresponding to an impression of the digital component;

determining, by the first aggregation server and for each of the multiple digital components, a conversion count based on a number of encrypted second tuples that include encrypted conversion data corresponding to a conversion of the digital component; and

sending, by the first aggregation server and to a recipient, data indicating the impression count and the conversion count.

10. The system of claim 9 , wherein the unique identifier associated with each impression comprises one of (i) an identifier of a client device at which the impression occurred, (ii) an identifier of a user that viewed the digital component of the impression, (iii) a cryptographic hash of an e-mail address of the user, (iv) a cryptographic hash of a phone number of the user, or (v) a cryptographic hash of sign in credentials of the user.

11. The system of claim 9 , wherein the unique identifier associated with each conversion comprises one of (i) an identifier of a client device at which the conversion occurred, (ii) an identifier of a user that completed the conversion, (iii) a cryptographic hash of an e-mail address of the user, (iv) a cryptographic hash of a phone number of the user, or (v) a cryptographic hash of sign in credentials of the user.

12. The system of claim 9 , wherein the operations comprise:

identifying, using the first join keys and the second join keys, pairs of first tuples of data and second tuples of data for which the first join key of the first tuple of data matches the second join key of the second tuple of data; and

identifying, for a given pair of a first tuple of data and a second tuple of data, each other pair for which the encrypted impression data and the encrypted conversion data of the first tuple of data and the second tuple of data matches the encrypted impression data and the encrypted conversion data of the given pair; and

identifying a number of unique first join keys across the given pair and each other pair; and

providing, as cross conversion data, the number of unique join keys.

13. The system of claim 12 , wherein the operations comprise, prior to providing the cross conversion data:

comparing the number of unique first join keys to a k-anonymity threshold; and

providing, to a reporting system, the cross conversion data in response to determining that number of unique first join keys satisfies the k-anonymity threshold.

14. The system of claim 9 , wherein the operations comprise:

comparing the impression count for each digital component of the multiple digital components to a k-anonymity threshold; and

providing each impression count that satisfies the k-anonymity threshold to a reporting system.

15. The system of claim 9 , wherein the operations comprise:

comparing the conversion count for each digital component of the multiple digital components to a k-anonymity threshold; and

providing each conversion count that satisfies the k-anonymity threshold to a reporting system.

16. The system of claim 9 , wherein the encrypted conversion data for each conversion comprises a thrice-encrypted conversion value that is encrypted first using a probabilistic homomorphic additive public key encryption technique, encrypted second using a public key of the second aggregation server, and encrypted third using a public key of the first aggregation server.

17. A non-transitory computer readable storage medium carrying instructions that, when executed by one or more processors, cause the one or more processors to perform operations comprising:

receiving, by a first aggregation server and from each of multiple client devices, impression data that includes, for each impression of a digital component recorded by the client device, (i) a first join key that is based on a unique identifier associated with the impression, and (ii) encrypted impression data for the impression;

encrypting, by the first aggregation server, the first join key for each impression;

providing, by the first aggregation server and to a second aggregation server, a first tuple of data for each impression, wherein the first tuple of data for an impression comprises the encrypted first join key and the encrypted impression data for the impression;

receiving, by the first aggregation server and from the second aggregations server, a second tuple of data for each conversion for which the second aggregation server received encrypted conversion data, wherein the second tuple of data for a conversion comprises an encrypted second join key and the encrypted conversion data for the conversion, wherein each encrypted second join key is based on a unique identifier associated with the conversion;

determining, by the first aggregation server and for each of multiple digital components, an impression count based on a number of encrypted first tuples that include encrypted impression data corresponding to an impression of the digital component;

determining, by the first aggregation server and for each of the multiple digital components, a conversion count based on a number of encrypted second tuples that include encrypted conversion data corresponding to a conversion of the digital component; and

sending, by the first aggregation server and to a recipient, data indicating the impress ion count and the conversion count.

18. The non-transitory computer readable storage medium of claim 17 , wherein the unique identifier associated with each impression comprises one of (i) an identifier of a client device at which the impression occurred, (ii) an identifier of a user that viewed the digital component of the impression, (iii) a cryptographic hash of an e-mail address of the user, (iv) a cryptographic hash of a phone number of the user, or (v) a cryptographic hash of sign in credentials of the user.

19. The non-transitory computer readable storage medium of claim 17 , wherein the unique identifier associated with each conversion comprises one of (i) an identifier of a client device at which the conversion occurred, (ii) an identifier of a user that completed the conversion, (iii) a cryptographic hash of an e-mail address of the user, (iv) a cryptographic hash of a phone number of the user, or (v) a cryptographic hash of sign in credentials of the user.

20. The non-transitory computer readable storage medium of claim 17 , wherein the operations comprise:

identifying, using the first join keys and the second join keys, pairs of first tuples of data and second tuples of data for which the first join key of the first tuple of data matches the second join key of the second tuple of data; and

identifying, for a given pair of a first tuple of data and a second tuple of data, each other pair for which the encrypted impression data and the encrypted conversion data of the first tuple of data and the second tuple of data matches the encrypted impression data and the encrypted conversion data of the given pair; and

identifying a number of unique first join keys across the given pair and each other pair; and

providing, as cross conversion data, the number of unique join keys.

Assignments (1)

Priority Claims (1)

Continuity (2)

References Cited (63)