公开(公告)号：US20230060782A1

公开(公告)日：2023-03-02

申请号：US17431486

申请日：2020-12-11

Applicant: Google LLC

Inventor： Gang Wang ,  Marcel M. Moti Yung ,  David Bruce Turner

IPC: G06F21/44 ,  G06F21/45 ,  G06F21/56 ,  H04L9/32

Abstract: This disclosure relates to using trust tokens to verify the integrity of devices and applications from which data is received. In one aspects, a method includes receiving, from a client device, a request for one or more trust tokens. The request includes at least one of one or more device-level fraud detection signals obtained from the client device or data representing code of an application that initiated the request. The request also includes a respective nonce for each of the one or more trust tokens. A determination is made, based on at least one of the one or more device-level fraud signals or the data representing the code of the application, to issue the one or more trust tokens to the client device. Each trust token is generated using the nonce for the trust token. The one or more trust tokens are provided to the client device.

公开(公告)号：US20230034384A1

公开(公告)日：2023-02-02

申请号：US17786006

申请日：2021-10-08

Applicant: Google LLC

Inventor： Yiran Mao ,  Gang Wang ,  Marcel M. Moti Yung

IPC: G06N20/00 ,  G06N5/04

Abstract: This describes a privacy preserving machine learning platform. In one aspect, a method includes receiving, by a first computing system of multiple multi-party computation (MPC) systems, an inference request including a first share of a given user profile. A predicted label for the given user profile is determined based at least in part on a first machine learning model. A predicted residue value for the given user profile indicating a predicted error in the predicted label is determined. The first computing system determines the first share of the predicted residue value for the given user profile based at least in part on the first share of the given user profile and a second machine learning model. The first computing system receives, from a second computing system of the MPC computing systems, data indicating the second share of the predicted residue value for the given user profile.

公开(公告)号：US20220417034A1

公开(公告)日：2022-12-29

申请号：US17633291

申请日：2021-03-16

Applicant: GOOGLE LLC

Inventor： Gang Wang ,  Marcel M. Moti Yung

IPC: H04L9/32 ,  H04L9/08

Abstract: Methods, systems, and computer media provide attestation tokens that protect the integrity of communications transmitted from client devices, while at the same time avoiding the use of stable device identifiers that could be used to track client devices or their users. In one approach, client devices can receive batches of N device integrity elements from a device integrity computing system, each corresponding to a different public key. The N device elements can be signed by a device integrity computing system. The signing by the device integrity computing system can be signing with a blind signature scheme. Client devices can include throttlers imposing limits on the quantity of attestation tokens created by the client device.

公开(公告)号：US20220407701A1

公开(公告)日：2022-12-22

申请号：US17772188

申请日：2020-09-22

Applicant: Google LLC

Inventor： Gang Wang ,  Rock Yuen-Wong ,  Arpana Hosabettu ,  Marcel M. Moti Yung

IPC: H04L9/32 ,  H04L9/40 ,  H04L9/08

Abstract: Methods, systems, and apparatus, including computer programs encoded on a computer storage medium, for transmitting/processing requests to control information stored at multiple content platforms/servers. In one aspect, a client device can send a request to verify the device's trustworthiness to a device trustworthiness server. The client device can receive, from the device trustworthiness server, data indicating that the client device is trustworthy, in response to which, the client device can send, to a relay server, a request to control user data stored at a plurality of servers. The client device can receive, via the relay server, a response from each of the plurality of servers. Based on the responses, the client device can determine that at least a subset of the plurality of servers that included the user data has performed the action specified in the request to control the user data.

公开(公告)号：US20220166780A1

公开(公告)日：2022-05-26

申请号：US17426743

申请日：2020-08-13

Applicant: Google LLC

Inventor： Gang Wang ,  Marcel M. Moti Yung

IPC: H04L9/40 ,  H04L9/32

Abstract: Methods, systems, and apparatus, including an apparatus for verifying the integrity of requests. In some aspects, a method includes receiving, from an application, a request including an attestation token of the application. The attestation token includes a set of data that includes at least a public key of the application and a token creation time that indicates a time at which the attestation token was created. The attestation also includes a signature of the set of data. The signature is generated using a private key that corresponds to the public key. The integrity of the request is verified using the attestation token. The verification includes determining that the integrity of the request is valid based on a determination that the token creation time is within a threshold duration of the time at which the request was received and a determination that the set of data has not been.

公开(公告)号：US20220123944A1

公开(公告)日：2022-04-21

申请号：US17269769

申请日：2020-02-06

Applicant: Google LLC

Inventor： Gang Wang ,  Sudhi P Herle ,  Giles Dominic Hogben ,  Alex Daniel Jacobson ,  Michael Wright ,  Nicholas N. Kralevich, IV ,  Bram Bonné

IPC: H04L9/32 ,  G06F21/31

Abstract: Methods, systems, and apparatus, including computer programs encoded on a computer storage medium, to verify whether an interaction with a particular content displayed on a content platform is an interaction by an actual human user. A request to generate a click verification token can be received from a first application executing on a client device. The request can include data for a first set of parameters for a first interaction and a first message authentication code (MAC) set. If the first MAC set matches a second MAC set, which is generated using some of the data included in the request, the click verification token can be generated. The click verification token can be provided to the first application, which in turn can provide this token to a content verification system. The content verification can use this token to verify whether the first interaction is an actual human user interaction.

公开(公告)号：US11277481B1

公开(公告)日：2022-03-15

申请号：US16895149

申请日：2020-06-08

Applicant: Google LLC

Inventor： Gang Wang ,  Yian Gao

IPC: G06F15/16 ,  H04L67/146 ,  H04L67/53 ,  H04L67/306 ,  H04L67/02 ,  H04L29/06

Abstract: The systems and methods described herein can enable the selection of customized content in networked systems that prevent the transfer of session data between different domains. The systems and methods described herein enable the exchange of data between third-party entities that would be blocked in networked systems that prevent cross-domain data exchange. The systems and methods can provide multi-sourced content without sacrificing security of the client device and browser environment.

公开(公告)号：US20210385085A1

公开(公告)日：2021-12-09

申请号：US16758782

申请日：2019-09-03

Applicant: Google LLC

Inventor： Gang Wang ,  Marcel Yung

IPC: H04L9/32 ,  H04L9/08

Abstract: The present disclosure provides systems and methods for authenticated control of content delivery. The method includes receiving a request for an item of content from a computing device, the request comprising a security token associated with the computing device and an identifier of a group of domains, identifying the group of domains from the identifier, and retrieving a security key associated with the group of domains. The method further includes decrypting a signature of the security token, identifying an authentication string, determining that the authentication string matches a server authentication string, and identifying characteristics of the security token. The characteristics of the security token include a confidence score. The method further includes comparing the confidence score of the security token to a threshold, determining that the confidence score does not exceed the threshold, and preventing transmission of content to the computing device.

公开(公告)号：US20210367784A1

公开(公告)日：2021-11-25

申请号：US16981979

申请日：2019-04-16

Applicant: Google LLC

Inventor： Yian Gao ,  Gang Wang ,  Marcel Yung

IPC: H04L9/32 ,  H04L29/08

Abstract: The present disclosure provides a secure, user-transparent, and highly efficient content provider-specific identifier read-only cookie (“ROC”). These ROCs can be generated by the client device and encrypted with a public key of the content provider, preventing third parties from indirectly identifying matches. The ROCs can include authentication token to enable the client device to determine whether the ROC was cached or otherwise misused by a content provider or other third-party.

公开(公告)号：US11132718B1

公开(公告)日：2021-09-28

申请号：US16256310

申请日：2019-01-24

Applicant: Google LLC

Inventor： Gang Wang

IPC: G06Q30/02 ,  G06F16/9535 ,  G06F16/2457

Abstract: Methods, systems, and apparatus, including computer programs encoded on a computer storage medium, for selecting content items for presentation along with publisher resources. In one aspect, a method includes receiving a request for a content item for presentation at a user device with a publisher resource; receiving, from a content item provider a first selection value for each of a plurality of content items provided by the content item provider; determining, for each of the content items and using accessed distribution parameters, a second selection value distinct from the first selection value; and determining, for each of the content items and independent of a bid corresponding to the content item, a combined selection value based on the first selection value for the content item and the second selection value for the content item.