Anonymous event attestation with group signatures

    公开(公告)号:US12003649B2

    公开(公告)日:2024-06-04

    申请号:US17633417

    申请日:2021-03-16

    Applicant: Google LLC

    CPC classification number: H04L9/3255 H04L9/3257 H04L9/3263 H04L2209/42

    Abstract: Methods, systems, and computer media provide attestation tokens that protect the integrity of communications transmitted from client devices, while at the same time avoiding the use of stable device identifiers that could be used to track client devices or their users. In one approach, client devices can receive anonymous certificates from a device integrity computing system signifying membership in a selected device trustworthiness group, and attestation tokens can be signed anonymously with the anonymous certificates using a group signature scheme. Client devices can include throttlers imposing limits on the quantity of attestation tokens created by the client device.

    PRIVACY PRESERVING CENTROID MODELS USING SECURE MULTI-PARTY COMPUTATION

    公开(公告)号:US20240163341A1

    公开(公告)日:2024-05-16

    申请号:US18497576

    申请日:2023-10-30

    Applicant: GOOGLE LLC

    CPC classification number: H04L67/306 H04L9/085 H04L9/0869 H04L2209/46

    Abstract: This disclosure relates to a privacy preserving machine learning platform. In one aspect, a method includes receiving, from a client device and by a computing system of multiple multi-party computation (MPC) systems, a first request for user group identifiers that identify user groups to which to add a user. The first request includes a model identifier for a centroid model, first user profile data for a user profile of the user, and a threshold distance. For each user group in a set of user groups corresponding to the model identifier, a centroid for the user group that is determined using a centroid model corresponding to the model identifier is identified. The computing system determines a user group result based at least on the first user profile data, the centroids, and the threshold distance. The user group result is indicative of user group(s) to which to add the user.

    Privacy preserving application and device error detection

    公开(公告)号:US11928237B2

    公开(公告)日:2024-03-12

    申请号:US17285547

    申请日:2020-05-12

    Applicant: Google LLC

    Abstract: Methods, systems, and apparatus, including computer programs encoded on a computer storage medium, for detecting errors in a client device and its associated applications while preserving the privacy of the user of the device. Methods can include obtaining and blinding contextual application data for an application on a device. Data regarding the application's digital certificate and device trustworthiness data are obtained and provided to a trust assessment server along with the blinded data. This server can provide indications that the device is trustworthy and the application is authentic, and can digitally sign the blinded data. The digital signature can be validated and the unblinded contextual application data can be obtained. If the unblinded data matches the contextual application data, the application can provide the digital signature, the indications, and the unblinded contextual application data to an error detection server, which in turn can indicate the application does not have errors.

    TAMPER-PROOF INTERACTION DATA
    106.
    发明公开

    公开(公告)号:US20240054173A1

    公开(公告)日:2024-02-15

    申请号:US18495345

    申请日:2023-10-26

    Applicant: Google LLC

    Abstract: Methods, systems, and apparatus, including computer programs encoded on a computer storage medium, for validating interactions with false rendered elements. In one aspect, a method includes receiving a rendering notification and a declaration of a rendered element defined in an active window on a client device, detecting interaction with the rendered element at the client device, determining whether the interaction occurred at a declared location of the rendered element within the active window, and processing the interaction including: in response to determining that the interaction occurred: capturing a screenshot of the active window on the client device; verifying a visual appearance of the rendered element in the screenshot with a declared appearance of the rendered element, and generating an interaction attestation, thereby validating the interaction. In response to determining that the interaction did not occur, refraining from generating the interaction attestation.

    Verifying device and application integrity

    公开(公告)号:US11886569B2

    公开(公告)日:2024-01-30

    申请号:US17431486

    申请日:2020-12-11

    Applicant: Google LLC

    Abstract: This disclosure relates to using trust tokens to verify the integrity of devices and applications from which data is received. In one aspects, a method includes receiving, from a client device, a request for one or more trust tokens. The request includes at least one of one or more device-level fraud detection signals obtained from the client device or data representing code of an application that initiated the request. The request also includes a respective nonce for each of the one or more trust tokens. A determination is made, based on at least one of the one or more device-level fraud signals or the data representing the code of the application, to issue the one or more trust tokens to the client device. Each trust token is generated using the nonce for the trust token. The one or more trust tokens are provided to the client device.

    Verifying display of third party content at a client device

    公开(公告)号:US11882327B2

    公开(公告)日:2024-01-23

    申请号:US17269730

    申请日:2020-02-06

    Applicant: Google LLC

    Abstract: Methods, systems, and apparatus, including computer programs encoded on a computer storage medium, for detecting errors that can occur in third party content presentation and verifying that third party content provided by a content provider to a content platform is actually displayed and is visible to the user when the content platform is accessed on the client device. Methods can include receiving, from an application executing on a client device, a request to generate a digitally signed token that is used to validate whether a particular content item displayed at the particular portion of the display is a third party content item. A digital watermark embedded at the particular portion of the display can be extracted and decoded to obtain data for attributes that are descriptive of the particular content item. A digitally signed token can be generated using this data, and the token can then be provided to application.

    User consent framework
    109.
    发明授权

    公开(公告)号:US11861040B2

    公开(公告)日:2024-01-02

    申请号:US17053482

    申请日:2020-01-22

    Applicant: Google LLC

    Inventor: Gang Wang Yian Gao

    CPC classification number: G06F21/6245 G06F21/602 G06F2221/2115

    Abstract: Methods, systems, and apparatus, including an apparatus for managing user data according to user consent settings are described. In some aspects, a method includes determining that a request for transmission by a client device to a recipient will include user data of a user of the client device. In response determining that the request will include the user data, the method includes requesting, from a consent management module of the client device, current user consent settings specified by the user which define at least one of (i) user data that can be transmitted from the client device, (ii) how user data transmitted from the client device can be used or (iii) which recipients can receive and retain user data from the client device. The method further includes receiving, from the consent management module, the current user consent settings and generating request data according the current user consent settings.

    Content selection associated with webview browsers

    公开(公告)号:US11748777B1

    公开(公告)日:2023-09-05

    申请号:US17396115

    申请日:2021-08-06

    Applicant: Google LLC

    Inventor: Gang Wang Yong Yao

    CPC classification number: G06Q30/0255 G06Q30/0275 G06Q30/0277

    Abstract: Methods, systems, and apparatus include computer programs encoded on a computer-readable storage medium for delivering content. A method includes: identifying a webview; providing a script for execution when the webview is initiated, the script causing a device associated with the webview to retrieve a unique identifier associated with the device, encode the unique identifier, construct a URL that includes an advertising system domain and the encoded unique identifier, and pass the encoded unique identifier to the advertising system; passing a cookie for the advertising domain back to the webview for inclusion in the cookie space of the webview; storing information related to interactions of a user of the device when accessing content through different browsers or applications so as to unify the cookie spaces of the different browsers; identifying a request for content as being associated with the device; and using the information to determine content for delivery.

Patent Agency Ranking