公开(公告)号：US20230344792A1

公开(公告)日：2023-10-26

申请号：US18211973

申请日：2023-06-20

Applicant: Apple Inc.

Inventor： Eric D. Friedman ,  Ritwik K. Kumar ,  Lucas O. Winstrom

IPC: H04L51/23 ,  G06F16/35 ,  G06F21/62 ,  G06F40/289 ,  H04L51/212

CPC classification number: H04L51/23 ,  G06F16/35 ,  G06F21/6254 ,  G06F40/289 ,  H04L51/212 ,  G06Q10/107

Abstract: Systems and methods are disclosed for determining whether a message received by a client may be spam, in a computing environment that preserves privacy. The message may be encrypted. A client invokes the methods when a message is received from a sender that is not known to the client. A client can decrypt the message, break the message into chunks, and apply a differentially private algorithm to the set of chunks. The client transmits the differentially private message sketches to an aggregation server. The aggregation server receives a large collection of such message sketches for a large plurality of clients. The aggregation server returns aggregated message chunk (e.g. frequency) information to the client to assist the client in determining whether the message may be spam. The client can process the message based on the determination without disclosing the message content to the server.

公开(公告)号：US20210359835A1

公开(公告)日：2021-11-18

申请号：US17242985

申请日：2021-04-28

Applicant: Apple Inc.

Inventor： Lucas O. Winstrom

IPC: H04L9/00 ,  H04L9/08 ,  H04L29/06

Abstract: A method is provided for a device participating in a data aggregation service. The device receives, from at least one requesting server, a participant homomorphic encryption key, and a request for data to perform a computation. The device encrypts requested data, including a location identifier, with the participant homomorphic encryption key, and sends, to an aggregation service, the encrypted requested data.

公开(公告)号：US11086915B2

公开(公告)日：2021-08-10

申请号：US16708307

申请日：2019-12-09

Applicant: Apple Inc.

Inventor： Mona Chitnis ,  Abhishek Bhowmick ,  Lucas O. Winstrom ,  Koray Mancuhan ,  Stephen D. Fleischer

IPC: G06F16/00 ,  G06F16/335 ,  G06F16/33 ,  G06F21/62 ,  G06F16/16 ,  G06F16/338

Abstract: The subject technology for maintaining differential privacy for database query results receives a query for a database that contains user data. The subject technology determines that the query is permitted for the database based at least in part on a privacy policy associated with the database. The subject technology determines that performing the query will not exceed a query budget for the database. The subject technology, when the query is permitted and performing the query will not exceed the query budget, performs the query on the database and receiving results from the query. The subject technology selects a differential privacy algorithm for the results based at least in part on a query type of the query. The subject technology applies the selected differential privacy algorithm to the results to generate differentially private results. The subject technology provides the differentially private results.

公开(公告)号：US20180089465A1

公开(公告)日：2018-03-29

申请号：US15707847

申请日：2017-09-18

Applicant: Apple Inc.

Inventor： Lucas O. Winstrom ,  Eric D. Friedman ,  Ritwik K. Kumar ,  Jeremy M. Stober ,  Amol V. Pattekar ,  Benoit Chevallier-Mames ,  Julien Lerouge ,  Gianpaolo Fasoli ,  Augustin J. Farrugia ,  Mathieu Ciet

IPC: G06F21/64 ,  G06Q10/10 ,  H04L9/32 ,  H04L12/58 ,  H04L29/06

CPC classification number: G06F21/64 ,  G06F21/55 ,  G06Q10/107 ,  H04L9/3247 ,  H04L51/12 ,  H04L51/22 ,  H04L63/1441 ,  H04L2463/144

Abstract: Systems and methods are described for rate-limiting a message-sending client interacting with a message service based on dynamically calculated risk assessments of the probability that the client is, or is not, a sender of a spam messages. The message service sends a proof of work problem to a sending client device with a difficulty level that is related to a risk assessment that the client is a sender of spam messages. The message system limits the rate at which a known or suspected spammer can send messages by giving the known or suspected spammer client harder proof of work problems to solve, while minimizing the burden on normal users of the message system by given them easier proof of work problems to solve that can typically be solved by the client within the time that it takes to type a message.