Granted Patent B2

US 12,530,446 · App. 18/560,759 · Granted Jan 20, 2026

Inventor: Nikolaus Rath (Harpenden, GB)

Assignee: Google LLC

G06F21/53G06F21/57

Abstract

Claims (81)

1 . A computer-implemented method comprising:

receiving, by a server and from a client device, a digital component request comprising a set of data;

in response to receiving the digital component request:

identifying one or more multi-stage workflows, each multi-stage workflow of the one or more multi-stage workflows (i) being configured to select digital components from candidate digital components of one or more content platforms and (ii) comprising one or more customizable stages;

for each particular multi-stage workflow of the one or more multi-stage workflows:

initiating, by a trusted execution environment (TEE) of the server, one or more sandbox environments for executing one or more stages of the particular multi-stage workflow;

executing, by the TEE, the one or more stages of the particular multi-stage workflow, wherein each sandbox environment prevents code of the multi-stage workflow from transmitting user data from the server, and wherein the code of each customizable stage is executed in a separate sandbox environment; and

receiving, by the server and from the TEE, output data from the particular multi-stage workflow;

selecting, by the server, a digital component based on at least a portion of the output data from each particular multi-stage workflow; and

providing, by the server, the digital component to the client device for presentation to a user of the client device.

2 . The computer-implemented method of claim 1 , wherein executing the one or more stages of the particular multi-stage workflow further comprises:

for each customizable stage of the particular multi-stage workflow:

initiating, by the trusted execution environment, a corresponding sandbox environment in which code of the stage is executed to generate output data for use in one or more other stages of the multi-stage workflow;

executing, within the sandbox environment, the code of the stage; and

receiving, by the server and from the trusted execution environment, the output data from each customizable stage.

3 . The computer-implemented method of claim 1 , further comprising, for at least one stage of a particular multi-stage workflow of the one or more multi-stage workflow, wherein the particular multi-stage workflow is of a particular content platform:

determining, for a stage of the at least one stage of the particular multi-stage workflow, a reference to a location that contains code implementing the stage; and

requesting, by the server and from the content platform, at least in part using the reference, code comprising the at least one stage, wherein executing, within the sandbox environment, the particular multi-stage workflow comprises executing the code.

4 . The computer-implemented method of claim 1 , wherein the sandbox environment comprises a virtual machine.

5 . The computer-implemented method of claim 1 , further comprising: providing, by the TEE, a signature of the code for the TEE.

6 . The computer-implemented method of claim 5 , further comprising:

obtaining, by a particular content platform, the signature;

obtaining, by the particular content platform, a known signature of the TEE;

determining that signature matches the known signature; and

in response to determining that the signature matches the known signature:

determining that the trusted execution environment is verified; and

providing at least one customization to the trusted execution environment.

7 . The computer-implemented method of claim 1 , wherein the output data comprises one or more selection parameters that describe a relevance of the digital component to the digital component request.

8 . The computer-implemented method of claim 1 , further comprising:

identifying in the multi-stage workflow at least one stage that is not customizable, and in response, executing the at least one stage outside the trusted execution environment.

9 . The computer-implemented method of claim 1 , wherein identifying the multi-stage workflows comprises receiving a revised version of a default workflow from a particular content platform, the method further comprising:

executing the revised version of the default workflow using an envelope that provides a limited set of communication Application Programming Interfaces (APIs) that limit communications of the revised version of the workflow with external components.

10 . A system comprising:

one or more processors of a server; and

one or more storage devices storing instructions that, when executed by the one or more processors, cause the one or more processors to perform operations comprising:

receiving, by the server and from a client device, a digital component request comprising a set of data;

in response to receiving the digital component request:

identifying one or more multi-stage workflows, each multi-stage workflow of the one or more multi-stage workflows (i) being configured to select digital components from candidate digital components of one or more content platforms and (ii) comprising one or more customizable stages;

for each particular multi-stage workflow of the one or more multi-stage workflows:

initiating, by a trusted execution environment (TEE) of the server, one or more sandbox environments for executing one or more stages of the particular multi-stage workflow;

executing, by the TEE, the one or more stages of the particular multi-stage workflow, wherein each sandbox environment prevents code of the multi-stage workflow from transmitting user data from the server, and wherein the code of each customizable stage is executed in a separate sandbox environment; and

receiving, by the server and from the TEE, output data from the particular multi-stage workflow;

selecting, by the server, a digital component based on at least a portion of the output data from each particular multi-stage workflow; and

providing, by the server, the digital component to the client device for presentation to a user of the client device.

11 . The system of claim 10 , wherein executing the one or more stages of the particular multi-stage workflow further comprises:

for each customizable stage of the particular multi-stage workflow:

initiating, by the trusted execution environment, a corresponding sandbox environment in which code of the stage is executed to generate output data for use in one or more other stages of the multi-stage workflow;

executing, within the sandbox environment, the code of the stage; and

receiving, by the server and from the trusted execution environment, the output data from each customizable stage.

12 . The system of claim 10 , wherein the operations comprise, for at least one stage of a particular multi-stage workflow of the one or more multi-stage workflow, wherein the particular multi-stage workflow is of a particular content platform:

determining, for a stage of the at least one stage of the particular multi-stage workflow, a reference to a location that contains code implementing the stage; and

requesting, by the server and from the content platform, at least in part using the reference, code comprising the at least one stage, wherein executing, within the sandbox environment, the particular multi-stage workflow comprises executing the code.

13 . The system of claim 10 , wherein the sandbox environment comprises a virtual machine.

14 . The system of claim 10 , wherein the operations comprise providing, by the TEE, a signature of the code for the TEE.

15 . The system of claim 14 , wherein the operations comprise:

obtaining, by a particular content platform, the signature;

obtaining, by the particular content platform, a known signature of the TEE;

determining that signature matches the known signature; and

in response to determining that the signature matches the known signature:

determining that the trusted execution environment is verified; and

providing at least one customization to the trusted execution environment.

16 . The system of claim 10 , wherein the output data comprises one or more selection parameters that describe a relevance of the digital component to the digital component request.

17 . The system of claim 10 , wherein the operations comprise:

identifying in the multi-stage workflow at least one stage that is not customizable, and in response, executing the at least one stage outside the trusted execution environment.

18 . The system of claim 10 , wherein identifying the multi-stage workflows comprises receiving a revised version of a default workflow from a particular content platform, the operations further comprising:

executing the revised version of the default workflow using an envelope that provides a limited set of communication Application Programming Interfaces (APIs) that limit communications of the revised version of the workflow with external components.

19 . A non-transitory computer readable medium carrying instructions that, when executed by one or more processors of a server, cause the one or more processors to perform operations comprising:

receiving, by the server and from a client device, a digital component request comprising a set of data;

in response to receiving the digital component request:

identifying one or more multi-stage workflows, each multi-stage workflow of the one or more multi-stage workflows (i) being configured to select digital components from candidate digital components of one or more content platforms and (ii) comprising one or more customizable stages;

for each particular multi-stage workflow of the one or more multi-stage workflows:

initiating, by a trusted execution environment (TEE) of the server, one or more sandbox environments for executing one or more stages of the particular multi-stage workflow;

executing, by the TEE, the one or more stages of the particular multi-stage workflow, wherein each sandbox environment prevents code of the multi-stage workflow from transmitting user data from the server, and wherein the code of each customizable stage is executed in a separate sandbox environment; and

receiving, by the server and from the TEE, output data from the particular multi-stage workflow;

selecting, by the server, a digital component based on at least a portion of the output data from each particular multi-stage workflow; and

providing, by the server, the digital component to the client device for presentation to a user of the client device.

20 . The non-transitory computer readable medium of claim 19 , wherein executing the one or more stages of the particular multi-stage workflow further comprises:

for each customizable stage of the particular multi-stage workflow:

initiating, by the trusted execution environment, a corresponding sandbox environment in which code of the stage is executed to generate output data for use in one or more other stages of the multi-stage workflow;

executing, within the sandbox environment, the code of the stage; and

receiving, by the server and from the trusted execution environment, the output data from each customizable stage.

Assignments (1)

Continuity (1)

References Cited (36)