Ad delivery systems, methods, and programs

Abstract

We provide an advertising delivery system that allows users to select where their ads are delivered without directly using personally identifiable information. [Solution] According to one embodiment, the advertising distribution system comprises a user terminal, a distributor terminal, and an anonymization device, wherein the user terminal generates a first anonymous ID from the user's customer ID using a first salt and transmits the first anonymous ID to the distributor terminal, and the distributor terminal generates a second anonymous ID from the first anonymous ID using a second salt and transmits the second anonymous ID to the anonymization device.

Description

Technical Field

[0001] The present invention relates to an advertisement distribution system, method, and program.

Background Art

[0002] In recent years, many companies have been providing applications for their customers. There is also a common business in which a company (distributor) uses this application as an advertising medium to distribute advertisements of other companies (advertisers), and various methods for enhancing the advertising distribution effect have been studied.

[0003] For example, in Citation 1, based on log information including the category, display count, and click count of advertisements displayed on a plurality of user terminals, extraction means for extracting high click rate users across all categories from the click rate obtained by dividing the click count by the display count, and from the extracted high click rate users, list generation means for extracting users with records of page views and searches of the category of the log information for each category to generate a high click rate user list, and when there is a page display request from the user terminal, identifying the user of the user terminal that made the request, and when it is determined that the user is registered by searching the high click rate user list, delivery means for delivering an advertisement associated with the category of the high click rate user list is disclosed.

Prior Art Documents

Patent Documents

[0004]

Patent Document 1

Summary of the Invention

Problems to be Solved by the Invention

[0005] A common method for improving the effectiveness of advertising is to use third-party cookies to target audiences. However, in recent years, regulations on third-party cookies have increased, creating a need for the development of new targeting methods that do not rely on third-party cookies.

[0006] One method being considered is to utilize customer data held by businesses (first-party data). However, since first-party data contains personally identifiable information, using it as is poses privacy risks.

[0007] This invention was made in view of the above-mentioned problems, and aims to provide an advertising distribution system that allows users to select advertising destinations without directly using personally identifiable information. [Means for solving the problem]

[0008] According to one embodiment, the advertising distribution system comprises a user terminal, a distributor terminal, and an anonymization device, wherein the user terminal generates a first anonymous ID from the user's customer ID using a first salt and transmits the first anonymous ID to the distributor terminal, and the distributor terminal generates a second anonymous ID from the first anonymous ID using a second salt and transmits the second anonymous ID to the anonymization device. [Effects of the Invention]

[0009] According to one embodiment, it is possible to provide an advertising distribution system that allows users to select advertising destinations without directly using personally identifiable information. [Brief explanation of the drawing]

[0010] [Figure 1] This figure shows an example of the configuration of the advertising distribution system 1000. [Figure 2] This figure shows an example of the hardware configuration of the information processing device 100. [Figure 3]This figure shows an example of the functional configuration of the carrier terminal 1. [Figure 4] This figure shows an example of the functional configuration of the broadcaster terminal 2. [Figure 5] This figure shows an example of the functional configuration of user terminal 3. [Figure 6] This figure shows an example of the functional configuration of the anonymization device 4. [Figure 7] This is a diagram showing an example of intermediary terminal 5. [Figure 8] This figure shows an example of the functional configuration of advertising platform 6. [Figure 9] This figure shows an example of the functional configuration of the distribution destination selection device 7. [Figure 10] This flowchart shows an example of how to generate an anonymous ID. [Figure 11] This flowchart shows an example of how to select ad delivery destinations. [Figure 12] This diagram schematically illustrates one example of how to select advertising distribution destinations. [Figure 13] This is a flowchart showing an example of how advertisements are delivered. [Modes for carrying out the invention]

[0011] Hereinafter, embodiments of the present invention will be described with reference to the accompanying drawings. In the description and drawings of each embodiment, components having substantially the same functional configuration will be denoted by the same reference numerals, and redundant descriptions will be omitted.

[0012] <System Configuration> First, an overview of the advertising distribution system 1000 according to this embodiment will be described. The advertising distribution system 1000 is an information processing system that distributes advertisements to customers (distribution destinations) selected (targeted) from among the distributor's customers, specifically from the business's customers. The advertising distribution system 1000 can select distribution destinations and distribute advertisements based on customer data held by the business, without directly using personally identifiable information.

[0013] The distributor is a person (publisher) who provides an application to its own customers and uses this application as an advertising medium to distribute advertisements of other companies (advertisers) to the customers. The application may be a native application that operates on a PC (Personal Computer), a tablet terminal, or a smartphone, or an application that operates on a browser such as a web browser or a mail browser. The application has an advertisement frame for displaying advertisements to customers and may provide any service to the customers.

[0014] An operator is a person who provides its own customer data. Operators include distributors, advertisers, and intermediaries. An advertiser is an operator who publishes an advertisement in an advertisement frame on an application provided by the distributor to the customers. An intermediary is a person who mediates the publication of an advertisement in an advertisement frame on an application according to the request of the advertiser.

[0015] FIG. 1 is a diagram showing an example of the configuration of an advertisement distribution system 1000. As shown in FIG. 1, the advertisement distribution system 1000 includes an operator terminal 1, a distributor terminal 2, a user terminal 3, an anonymization device 4, an intermediary terminal 5, an advertisement platform 6 (hereinafter referred to as "advertisement PF6"), and a destination selection device 7, which are connected to communicate with each other via a network. The network is, for example, a wired LAN (Local Area Network), a wireless LAN, the Internet, a public switched telephone network, a mobile data communication network, or a combination thereof. In the example of FIG. 1, the advertisement distribution system 1000 includes one each of the distributor terminal 2, the user terminal 3, the anonymization device 4, the intermediary terminal 5, the advertisement PF6, and the destination selection device 7, but may include a plurality of each. Also, in the example of FIG. 1, the advertisement distribution system 1000 includes three operator terminals 1, but may include one, two, or four or more operator terminals 1.

[0016] The operator terminal 1 is an information processing device used by the operator. The operator terminal 1 is, for example, a PC, a smartphone, a tablet terminal, a server device, or a microcomputer, but is not limited thereto. In the example of FIG. 1, the operator terminal 1 is one information processing device, but may be realized as a system including a plurality of information processing devices connected via a network.

[0017] The distributor terminal 2 is an information processing device used by the distributor. The distributor terminal 2 is, for example, a PC, a smartphone, a tablet terminal, a server device, or a microcomputer, but is not limited thereto. In the example of FIG. 1, the distributor terminal 2 is one information processing device, but may be realized as a system including a plurality of information processing devices connected via a network.

[0018] The user terminal 3 is an information processing device used by the user. The user is a person who uses the application provided by the distributor and is a customer of the distributor. The user uses the application provided by the distributor on the user terminal 3. The user terminal 3 is, for example, a PC, a smartphone, or a tablet terminal, but is not limited thereto.

[0019] The anonymization device 4 is an information processing device that anonymizes the customer IDs of the operator and the distributor's customers. The customer ID is identification information that uniquely identifies a customer. The customer ID is, for example, a customer number, name, telephone number, or email address, but is not limited thereto. By anonymizing the customer ID, it is possible to prevent the exchange of information that can identify an individual on the advertising distribution system 1000. The anonymization device 4 is, for example, a PC, a smartphone, a tablet terminal, a server device, or a microcomputer, but is not limited thereto. In the example of FIG. 1, the anonymization device 4 is one information processing device, but may be realized as a system including a plurality of information processing devices connected via a network.

[0020] Intermediary terminal 5 is an information processing device used by the intermediary. The intermediary is a party that mediates the placement of advertisements in advertising slots on the application, according to the advertiser's request. The intermediary is, for example, an advertising agency, but is not limited to that.

[0021] Ad PF6 is an information processing system for optimizing ads, ad slots, bid amounts, and distribution channels. Ad PF6 consists of DSPs (Demand-Side Platforms), SSPs (Supply-Side Platforms), ad networks, etc. Any existing Ad PF6 can be used.

[0022] The destination selection device 7 is an information processing device that selects the destination of advertisements based on an anonymized customer ID. Preferably, the destination selection device 7 performs the destination selection in a Trusted Execution Environment (TEE). The destination selection device 7 is, for example, a PC, smartphone, tablet terminal, server device, or microcomputer, but is not limited to these. In the example in Figure 1, the destination selection device 7 is a single information processing device, but it may be implemented as a system consisting of multiple information processing devices connected via a network.

[0023] <Hardware configuration of the information processing device 100> Next, the hardware configuration of the information processing device 100 will be described. Figure 2 shows an example of the hardware configuration of the information processing device 100. As shown in Figure 2, the information processing device 100 comprises a processor 101, memory 102, storage 103, communication I / F 104, input device 105, output device 106, and drive device 107, all interconnected via bus B.

[0024] The processor 101 controls the various components of the information processing device 100 and realizes the functions of the information processing device 100 by loading various programs, including the OS (Operating System), stored in the storage 103, into the memory 102 and executing them. The processor 101 is, for example, a CPU (Central Processing Unit), an MPU (Micro Processing Unit), a GPU (Graphics Processing Unit), an ASIC (Application Specific Integrated Circuit), or a DSP (Digital Signal Processor), but is not limited to these.

[0025] Memory 102 is, for example, ROM (Read Only Memory), RAM (Random Access Memory), or a combination thereof. ROM is, for example, PROM (Programmable ROM), EPROM (Erasable Programmable ROM), EEPROM (Electrically Erasable Programmable ROM), or a combination thereof. RAM is, for example, DRAM (Dynamic RAM) or SRAM (Static RAM), but is not limited to these.

[0026] Storage 103 stores various programs and data, including the OS. Storage 103 is, for example, flash memory, HDD (Hard Disk Drive), SSD (Solid State Drive), or SCM (Storage Class Memories), but is not limited to these.

[0027] The communication interface 104 is an interface for connecting the information processing device 100 to an external device via the network N and controlling communication. The communication interface 104 is, for example, Bluetooth®, Wi-Fi®, ZigBee®, or Ethernet®.

[0028] The input device 105 is a device for inputting information into the information processing device 100. The input device 105 may be, but is not limited to, a mouse, keyboard, touch panel, microphone, scanner, camera, various sensors, or operation buttons.

[0029] The output device 106 is a device for outputting information from the information processing device 100. The output device 106 is, for example, a display device, a projector, a printer, a speaker, or a vibrator, but is not limited to these.

[0030] The drive device 107 is a device for reading and writing data to the recording medium 108. The drive device 107 is, for example, a magnetic disk drive, an optical disk drive, a magneto-optical disk drive, or an SD card reader, but is not limited thereto. The recording medium 108 is, for example, a CD (Compact Disc), a DVD (Digital Versatile Disc), an FD (Floppy Disk), an MO (Magneto-Optical disk), a BD (Blu-ray® Disc), a USB® memory, or an SD card, but is not limited thereto.

[0031] In this embodiment, the program may be written to the memory 102 or storage 103 during the manufacturing stage of the information processing device 100, or it may be provided to the information processing device 100 via the network N, or it may be provided to the information processing device 100 via a non-temporary, computer-readable recording medium such as the recording medium 108.

[0032] <Functional configuration of carrier terminal 1> Next, the functional configuration of the carrier terminal 1 will be described. Figure 3 is a diagram showing an example of the functional configuration of the carrier terminal 1. As shown in Figure 3, the carrier terminal 1 comprises a communication unit 11, a storage unit 12, and a control unit 13.

[0033] The communication unit 11 is implemented by the communication interface 104. The communication unit 11 transmits and receives information between the anonymization device 4 and the distribution destination selection device 7 via the network.

[0034] The storage unit 12 is implemented by memory 102 and storage 103. The storage unit 12 stores customer ID 121, attribute information 122, anonymous ID 123, and advertising information 124.

[0035] Customer ID 121 is identification information that uniquely identifies a customer of the business. Customer ID 121 may be, for example, a customer number, name, telephone number, or email address, but is not limited to these.

[0036] Attribute information 122 is information that indicates the attributes (customer attributes) of a business operator's customers. Customer attributes include, but are not limited to, age, gender, address, date of birth, occupation, annual income, job title, purchase history of products, service usage history, or website browsing history. Attribute information 122 contains information on multiple customer attributes. Attribute information 122 is stored in association with customer ID 121.

[0037] Anonymous ID 123 (the third anonymous ID) is anonymized information derived from customer ID 121. Anonymization is a process that makes it impossible to identify an individual. Anonymous ID 123 is stored in association with the original customer ID 121 and its corresponding attribute information 122.

[0038] Advertisement information 124 is information about advertisements placed by businesses (advertisers). Advertisement information 124 includes the advertisement ID, advertisement title, advertisement content (text, image, audio, video), information indicating the distributor, and information indicating the business. The advertisement ID is identification information that uniquely identifies the advertisement.

[0039] The control unit 13 is realized by the processor 101 reading and executing a program from the memory 102 and cooperating with other hardware components. The control unit 13 includes an anonymization unit 131.

[0040] The anonymization unit 131 anonymizes the customer ID 121. Specifically, the anonymization unit 131 generates a third anonymous ID 123 by salting the customer ID 121 using salts 1 to 3. The anonymization units 131 of multiple business terminals 1 all hash the customer ID 121 in the same way. The hashing method is, for example, sha256, but is not limited to this. Salts 1 to 3 will be described later.

[0041] Furthermore, the anonymization unit 131 may anonymize the attribute information 122 (customer attributes). For example, the anonymization unit 131 anonymizes the attribute information 122 by k. The value of k can be set arbitrarily. In addition, any method can be used as the anonymization method. This can further reduce privacy risks.

[0042] The functional configuration of the carrier terminal 1 is not limited to the example above. The carrier terminal 1 may have functional configurations other than those described above. Furthermore, each functional configuration of the carrier terminal 1 may be implemented by software as described above, or by hardware such as an IC chip, SoC (System on Chip), LSI (Large Scale Integration), or microcomputer.

[0043] <Functional Configuration of Broadcaster Terminal 2> Next, the functional configuration of the broadcaster terminal 2 will be described. Figure 4 is a diagram showing an example of the functional configuration of the broadcaster terminal 2. As shown in Figure 4, the broadcaster terminal 2 comprises a communication unit 21, a storage unit 22, and a control unit 23.

[0044] The communication unit 21 is implemented by the communication interface 104. The communication unit 21 transmits and receives information between the user terminal 3 and the anonymization device 4 via the network.

[0045] The memory unit 22 is implemented by memory 102 and storage 103. The memory unit 22 stores salt 2 and application 221. Salt 2 will be described later.

[0046] Application 221 is the backend of the application that the distributor provides to its customers.

[0047] The control unit 23 is realized by the processor 101 reading and executing a program from the memory 102 and cooperating with other hardware components. The control unit 23 comprises an anonymization unit 231 and an application control unit 232.

[0048] The anonymization unit 231 anonymizes the customer ID. Specifically, the anonymization unit 231 generates a second anonymous ID by salting the customer ID (first anonymous ID) anonymized by the user terminal 3 using salt 2 (second salt), which will be described later. The hashing method is the same as that of the business terminal 1, for example, sha256, but is not limited to this.

[0049] The application control unit 232 executes the application 221 and controls the operation of the application 221.

[0050] The functional configuration of the broadcaster terminal 2 is not limited to the example above. The broadcaster terminal 2 may have functional configurations other than those described above. Furthermore, each functional configuration of the broadcaster terminal 2 may be implemented by software as described above, or by hardware such as IC chips, SoCs, LSIs, or microcomputers.

[0051] <Functional configuration of user terminal 3> Next, the functional configuration of the user terminal 3 will be described. Figure 5 shows an example of the functional configuration of the user terminal 3. As shown in Figure 5, the user terminal 3 comprises a communication unit 31, a storage unit 32, a control unit 33, an application unit 34, and an isolation unit 35.

[0052] The communication unit 31 is implemented by the communication interface 104. The communication unit 31 transmits and receives information between the distributor terminal 2, the anonymization device 4, and the advertising PF 6 via the network.

[0053] The storage unit 32 is implemented by memory 102 and storage 103. The storage unit 32 stores customer ID 321, application 322, advertising information 323, and anonymous ID 324.

[0054] Customer ID 321 is identification information that uniquely identifies the user (the broadcaster's customer) using user terminal 3. Customer ID 321 may be, for example, a customer number, name, telephone number, or email address, but is not limited to these.

[0055] Application 322 is the front-end of the application that the distributor provides to the customer.

[0056] Advertisement information 323 is information about advertisements displayed on user terminal 3. Advertisement information 323 includes advertisement ID, advertisement title, advertisement content (text, image, audio, video), information indicating the distributor, information indicating the business operator, etc. The advertisement ID is identification information that uniquely identifies the advertisement.

[0057] Anonymous ID 324 (the third anonymous ID) is the anonymous ID of the user using user terminal 3. Anonymous ID 324 corresponds to customer ID 321.

[0058] The control unit 33 is realized by the processor 101 reading and executing a program from the memory 102 and cooperating with other hardware components. The control unit 33 includes an anonymization unit 331, an application control unit 332, an advertisement display unit 333, a delivery request unit 334, and a session ID generation unit 335.

[0059] The anonymization unit 331 anonymizes the customer ID 321. Specifically, the anonymization unit 331 generates a first anonymous ID by salting the user's customer ID 321 with salt using salt 1 (the first salt). The hashing method is the same as that of the business terminal 1, for example, sha256, but is not limited to this.

[0060] The application control unit 332 executes the application 322 and controls the operation of the application 322.

[0061] The advertising display unit 333 displays advertisements delivered from the advertising PF6 in the advertising space of the application 322.

[0062] The delivery request unit 334 sends the anonymous ID 324 to the advertising PF6 and requests the advertising PF6 to deliver an advertisement to the anonymous ID 324 (user terminal 3). The timing at which the delivery request unit 334 requests the delivery of an advertisement is, for example, when an advertisement slot is displayed on the application 322 to the user terminal 3, when the user performs a predetermined operation on the user terminal 3, or when a predetermined time has elapsed since the previous request, but is not limited to these.

[0063] The session ID generation unit 335 generates a session ID when communication between the user terminal 3 and the anonymization device 4 begins.

[0064] The application unit 34 is the execution environment for application 322 installed on the user terminal 3. The application unit 34 includes a part of the storage unit 32 (the part in which the customer ID 321 and application 322 are stored), an anonymization unit 331, an application control unit 332, and an advertisement display unit 333.

[0065] The isolation unit 35 is an execution environment for displaying advertisements provided on the user terminal 3. The isolation unit 35 includes a part of the storage unit 32 (the part in which the anonymous ID 324 is stored), a delivery request unit 334, and a session ID generation unit 335. The isolation unit 35 is isolated from other processes, including the application unit 34. Therefore, the application unit 34 cannot access the anonymous ID 324 stored in the isolation unit 35. Similarly, the isolation unit 35 cannot access the customer ID 321, application 322, and advertisement information 323 stored in the application unit 34.

[0066] The functional configuration of user terminal 3 is not limited to the example above. User terminal 3 may have functional configurations other than those described above. Furthermore, each functional configuration of user terminal 3 may be implemented by software as described above, or by hardware such as IC chips, SoCs, LSIs, or microcomputers.

[0067] <Functional Configuration of Anonymizer 4> Next, the functional configuration of the anonymization device 4 will be described. Figure 6 is a diagram showing an example of the functional configuration of the anonymization device 4. As shown in Figure 6, the anonymization device 4 comprises a communication unit 41, a storage unit 42, and a control unit 43.

[0068] The communication unit 41 is implemented by the communication interface 104. The communication unit 41 transmits and receives information between the carrier terminal 1, the distributor terminal 2, and the user terminal 3 via the network.

[0069] The memory unit 42 is implemented by memory 102 and storage 103. The memory unit 42 stores salts 1 and 3. Salts 1 and 3 will be described later.

[0070] The control unit 43 is realized by the processor 101 reading and executing a program from the memory 102 and cooperating with other hardware components. The control unit 43 includes an anonymization unit 431 and a salt generation unit 432.

[0071] The anonymization unit 431 anonymizes the customer ID. Specifically, the anonymization unit 431 generates a third anonymous ID by salting the customer ID (second anonymous ID) anonymized by the distributor terminal 2 using salt 3 (third salt). The hashing method is the same as that of the business terminal 1, for example, sha256, but is not limited to this.

[0072] The salt generation unit 432 generates salts 1 to 3. The salts can be any randomly generated values. If the hashing method is sha256, the salts are, for example, 256 random numbers.

[0073] The functional configuration of the anonymization device 4 is not limited to the example above. The anonymization device 4 may have functional configurations other than those described above. Furthermore, each functional configuration of the anonymization device 4 may be implemented by software as described above, or by hardware such as an IC chip, SoC, LSI, or microcomputer.

[0074] <Functional configuration of intermediary terminal 5> Next, the functional configuration of the intermediary terminal 5 will be described. Figure 7 shows an example of the functional configuration of the intermediary terminal 5. As shown in Figure 7, the intermediary terminal 5 comprises a communication unit 51, a storage unit 52, and a control unit 53.

[0075] The communication unit 51 is implemented by the communication interface 104. The communication unit 51 transmits and receives information between the advertising platform 6 and the distribution destination selection device 7 via the network.

[0076] The memory unit 52 is implemented by memory 102 and storage 103. The memory unit 52 stores advertising information 521, anonymous ID 522, and selection condition information 523.

[0077] Advertisement information 521 is information about advertisements that the intermediary is facilitating the placement of. Advertisement information 521 includes the advertisement ID, advertisement title, advertisement content (text, image, audio, video), information indicating the distributor, and information indicating the business operator. The advertisement ID is identification information that uniquely identifies the advertisement.

[0078] Anonymous ID 522 (the third anonymous ID) is an anonymous ID corresponding to the customer selected as the recipient of the advertisement. Anonymous ID 522 is stored in association with the advertisement information 521 of the advertisement to be delivered to that customer.

[0079] Selection criteria information 523 is information that indicates the selection criteria for where the advertisement will be delivered. The selection criteria are conditions related to customer attributes. More specifically, the selection criteria are defined as customer attributes and their percentages. The selection criteria are set by the business operator (advertiser) or intermediary depending on the content of the advertisement. For example, if the advertisement is for product X, a selection criterion such as "80% or more probability of purchasing product X" may be set.

[0080] The control unit 53 is realized by the processor 101 reading and executing a program from the memory 102 and cooperating with other hardware components. The control unit 53 includes a selection request unit 531 and a distribution request unit 532.

[0081] The selection request unit 531 transmits the selection condition information 523 to the distribution destination selection device 7 and requests the distribution destination selection device 7 to select the customers to whom the advertisement will be delivered.

[0082] The distribution request unit 532 sends advertising information 521 corresponding to an anonymous ID that corresponds to the customer to whom the advertisement will be delivered to the advertising PF6, and requests the advertising PF6 to deliver the advertisement to the anonymous ID.

[0083] The functional configuration of the intermediary terminal 5 is not limited to the example above. The intermediary terminal 5 may have functional configurations other than those described above. Furthermore, each functional configuration of the intermediary terminal 5 may be implemented by software as described above, or by hardware such as an IC chip, SoC, LSI, or microcomputer.

[0084] <Functional Configuration of Advertising Platform 6> Next, the functional configuration of the advertising PF6 will be described. Figure 8 is a diagram showing an example of the functional configuration of the advertising PF6. As shown in Figure 8, the advertising PF6 comprises a communication unit 61, a storage unit 62, and a control unit 63.

[0085] The communication unit 61 is implemented by the communication interface 104. The communication unit 61 transmits and receives information between the user terminal 3 and the intermediary terminal 5 via the network.

[0086] The memory unit 62 is implemented by memory 102 and storage 103. The memory unit 62 stores advertising information 621 and anonymous ID 622.

[0087] Advertisement information 621 is information about advertisements delivered by advertisement PF6. Advertisement information 621 includes advertisement ID, advertisement title, advertisement content (text, image, audio, video), information indicating the distributor, information indicating the business operator, etc. The advertisement ID is identification information that uniquely identifies the advertisement.

[0088] Anonymous ID 622 (the third anonymous ID) is an anonymous ID corresponding to the customer selected as the recipient of the advertisement. Anonymous ID 622 is stored in association with the advertisement information 621 of the advertisement to be delivered to that customer.

[0089] The control unit 63 is realized by the processor 101 reading and executing a program from the memory 102 and cooperating with other hardware components. The control unit 63 includes a distribution control unit 631.

[0090] The distribution control unit 631 controls the delivery of advertisements to the customer's user terminal 3 in response to requests for advertisement delivery from the intermediary terminal 5. Specifically, the distribution control unit 631 optimizes the bid amount and other parameters of the advertisements requested by the intermediary terminal 5 for the advertisement slots of the application running on the customer's user terminal 3, selects the advertisements to be delivered to these advertisement slots, and delivers the selected advertisements. If an advertisement requested by the intermediary terminal 5 is selected, the distribution control unit 631 delivers this advertisement to the user terminal 3.

[0091] The functional configuration of the advertising PF6 is not limited to the example above. The advertising PF6 may have functional configurations other than those described above. Furthermore, each functional configuration of the advertising PF6 may be implemented by software as described above, or by hardware such as an IC chip, SoC, LSI, or microcomputer.

[0092] <Functional Configuration of Distribution Destination Selection Device 7> Next, the functional configuration of the destination selection device 7 will be described. Figure 9 is a diagram showing an example of the functional configuration of the destination selection device 7. As shown in Figure 9, the destination selection device 7 comprises a communication unit 71, a storage unit 72, and a control unit 73.

[0093] The communication unit 71 is implemented by the communication interface 104. The communication unit 71 transmits and receives information between the carrier terminal 1 and the intermediary terminal 5 via the network.

[0094] The memory unit 72 is implemented by memory 102 and storage 103. The memory unit 72 stores anonymous ID 721, attribute information 722, matching information 723, and selection condition information 724.

[0095] Anonymous ID 721 (the third anonymous ID) is an anonymous ID of a customer of the business operator, received from the business operator terminal 1. The storage unit 72 stores the anonymous IDs 721 received from one or more business operator terminals 1.

[0096] Attribute information 722 is attribute information of the business operator's customers received from the business operator terminal 1. The storage unit 72 stores the attribute information 722 received from one or more business operator terminals 1. The attribute information 722 is stored in association with an anonymous ID 721.

[0097] Matching information 723 is information obtained by matching anonymous IDs 721 and attribute information 722 received from multiple carrier terminals 1. Matching information 723 includes anonymous IDs 721 and attribute information 722.

[0098] The selection criteria information 724 is information indicating the selection criteria for the destination of the advertisement received from the intermediary terminal 5.

[0099] The control unit 73 is realized by the processor 101 reading and executing a program from the memory 102 and cooperating with other hardware components. The control unit 73 includes a matching unit 731, a segment generation unit 732, and a distribution destination selection unit 733.

[0100] The matching unit 731 matches anonymous IDs 721 and attribute information 722 received from multiple carrier terminals 1 and generates matching information 723. Specifically, it combines multiple attribute information 722 corresponding to the same anonymous ID 721 into one while eliminating duplication.

[0101] The segment generation unit 732 generates customer segments that satisfy the selection criteria indicated by the selection criteria information 724, based on the customer attributes included in the matching information 723. A customer segment is a combination of customer attributes that satisfy the selection criteria. For example, if the selection criteria is "80% or more probability of purchasing product X," and 80% or more of "purchasers of product Y in their 20s" are "purchasers of product X," then the customer segment will be "purchasers of product Y in their 20s," that is, a combination of customer attributes such as being in their 20s and having a purchase history of product Y. Note that multiple customer segments may be generated for a single selection criterion.

[0102] The distribution destination selection unit 733 selects anonymous IDs 721 to be used as advertising destinations based on the matching information 723 and the selection criteria information 724. More specifically, the distribution destination selection unit 733 selects anonymous IDs 721 that correspond to the customer segment as the anonymous IDs 721 to be used as advertising destinations. For example, if the customer segment is "male company employees in their 20s living in Tokyo," then anonymous IDs 721 with the customer attribute "male company employees in their 20s living in Tokyo" will be selected as advertising destinations.

[0103] The functional configuration of the destination selection device 7 is not limited to the example above. The destination selection device 7 may have functional configurations other than those described above. Furthermore, each functional configuration of the destination selection device 7 may be implemented by software as described above, or by hardware such as an IC chip, SoC, LSI, or microcomputer.

[0104] <How to generate an anonymous ID> Next, we will explain the method for generating anonymous IDs performed by the advertising distribution system 1000. Figure 10 is a flowchart showing an example of a method for generating anonymous IDs. The flowchart in Figure 10 corresponds to the process indicated by the dashed line in Figure 1.

[0105] (Step S101) The salt generation unit 432 of the anonymization device 4 generates salts 1 to 3 (first, second, and third salts) and stores the generated salts 1 to 3 in the storage unit 42.

[0106] (Step S102) The anonymization device 4 transmits the salt 1 to the application unit 34 of the user terminal 3. The application unit 34 of the user terminal 3 stores the received salt 1 in the storage unit 32.

[0107] (Step S103) The anonymization device 4 transmits the salt 2 to the distributor terminal 2. The distributor terminal 2 stores the received salt 2 in the storage unit 22.

[0108] (Step S104) The anonymization device 4 transmits salts 1 to 3 to the carrier terminal 1. The carrier terminal 1 stores the received salts 1 to 3 in the storage unit 12. The same salts 1 to 3 are transmitted to multiple carrier terminals 1.

[0109] (Step S105) The anonymization device 4 discards salt 2 stored in the memory unit 42. As a result, salts 1 and 3 are stored in the memory unit 42.

[0110] (Step S106) When the application unit 34 of the user terminal 3 receives salt 1 from the anonymization device 4, the session ID generation unit 335 of the isolation unit 35 generates a session ID.

[0111] (Step S107) The isolation unit 35 transmits the session ID to the application unit 34.

[0112] (Step S108) The isolation unit 35 transmits the session ID to the anonymization device 4.

[0113] (Step S109) The anonymization unit 331 of the application unit 34 of the user terminal 3 generates a first anonymous ID corresponding to customer ID 321 by salting hashing customer ID 321 using salt 1 (first salt). Hereinafter, the anonymous ID salted hashed with salt X will be referred to as anonymous ID (X).

[0114] (Step S110) The application unit 34 sends the session ID received in step S107 and the anonymous ID (1) generated in step S109 to the distributor terminal 2. The distributor terminal 2 stores the session ID and anonymous ID (1) received from the application unit 34 in the storage unit 22.

[0115] (Step S111) The application unit 34 discards the session ID and salt 1 stored in the storage unit 32. As a result, none of salts 1 to 3 are stored in the storage unit 32.

[0116] (Step S112) The anonymization unit 231 of the broadcaster terminal 2 generates a second anonymous ID (anonymous ID(1,2)) corresponding to customer ID 321 by salting anonymous ID(1) with salted hash using salt 2 (second salt).

[0117] (Step S113) The broadcaster terminal 2 transmits the session ID received in step S110 and the anonymous IDs (1,2) generated in step S112 to the anonymization device 4. The anonymization device 4 stores the session ID and anonymous IDs (1,2) received from the broadcaster terminal 2 in the storage unit 42.

[0118] (Step S114) The anonymization unit 431 of the anonymization device 4 generates a third anonymous ID (anonymous ID (1~3)) corresponding to customer ID 321 by salting anonymous ID (1,2) with salted hash using salt 3 (third salt).

[0119] (Step S115) The anonymization device 4 transmits the anonymous IDs (1-3) generated in step S114 to the isolation unit 35 of the user terminal 3. The isolation unit 35 stores the anonymous IDs (1-3) received from the anonymization device 4 as anonymous ID 324 in the storage unit 32. As a result, the isolation unit 35 of the user terminal 3 stores anonymous ID 324 corresponding to customer ID 321.

[0120] At this point, since the broadcaster terminal 2, user terminal 3, and anonymization device 4 do not all remember all of salts 1 to 3, it is difficult to recover the customer ID 321 from the anonymous ID 324. Furthermore, since the anonymous ID 324 is stored in the isolation unit 35, neither external devices nor the application unit 34 can access the anonymous ID 324. In other words, it is difficult to recover or eavesdrop on the anonymous ID 324. Thus, according to this embodiment, the anonymous ID 324 can be generated securely.

[0121] (Step S116) Meanwhile, the anonymization unit 131 of the operator terminal 1 generates a third anonymous ID (anonymous ID(1~3)) corresponding to customer ID 121 by salting hashing customer ID 121 using salts 1~3 (first, second, and third salts). Specifically, the anonymization unit 131 generates anonymous ID(1) by salting hashing customer ID 121 using salt 1, generates anonymous ID(1,2) by salting hashing anonymous ID(1) using salt 2, and generates anonymous ID(1~3) by salting hashing anonymous ID(1,2) using salt 3.

[0122] The anonymization unit 131 stores the generated anonymous IDs (1-3) as anonymous IDs 123 in the storage unit 12. The anonymization unit 131 performs the same process on some or all of the customer IDs 121 stored in the storage unit 12, generating an anonymous ID 123 corresponding to each customer ID 121. This generates a list of anonymous IDs 123 corresponding to the list of customer IDs 121 stored in the storage unit 12.

[0123] <How to select ad delivery destinations> Next, we will explain the method by which the advertising distribution system 1000 selects advertising destinations. Figure 11 is a flowchart showing an example of the method for selecting advertising destinations. The flowchart in Figure 11 corresponds to the process indicated by the dashed line in Figure 1. Figure 12 is a schematic diagram showing an example of the method for selecting advertising destinations. Note that at the start of the flowchart in Figure 11, the process in Figure 10 has already been executed. Also, in the example in Figure 12, it is assumed that business operator a is the advertiser and is placing an advertisement for product X.

[0124] (Step S201) The business (advertiser) requests the intermediary to place an advertisement. At this time, the business transmits advertisement information 124 from the business terminal 1 to the intermediary terminal 5. The intermediary terminal 5 stores the advertisement information 124 received from the business terminal 1 as advertisement information 521 in its storage unit 52. Subsequently, the business and the intermediary consider the selection criteria for customers to whom the advertisement will be delivered. The intermediary stores selection criterion information 523, which indicates the decided selection criteria, in the storage unit 52 of the intermediary terminal 5.

[0125] (Step S202) Multiple carrier terminals 1 transmit anonymous IDs 123 and corresponding attribute information 122 to the destination selection device 7. The destination selection device 7 stores the anonymous IDs 123 and attribute information 122 received from the multiple carrier terminals 1 as anonymous IDs 721 and attribute information 722 in its storage unit 72. The anonymous IDs 721 and attribute information 722 are stored in association with each other.

[0126] The destination selection device 7 receives anonymous IDs 123 and attribute information 122 from multiple carrier terminals 1. In the example shown in Figure 12, anonymous IDs 123a, 123b and attribute information 122a, 122b are transmitted to the destination selection device 7 from two carrier terminals 1a and 1b.

[0127] (Step S203) The matching unit 731 of the distribution destination selection device 7 matches the anonymous ID 721 and attribute information 722 received from multiple carrier terminals 1.

[0128] As described above, multiple business terminals 1 use the same salts 1 to 3 to salt-hashed customer ID 121 in the same way, so the anonymous customer ID 721 common to all businesses matches as shown in Figure 12. The matching unit 731 generates matching information 723 by associating the customer attributes received from multiple business terminals 1 with the anonymous ID 721, and stores the generated matching information 723 in the storage unit 72.

[0129] In the matching information 723 in Figure 12, the anonymous ID 721 is associated with customer attributes "Product X" and "Age" received from business terminal 1a of business a (advertiser), and customer attributes "Product Y" and "Gender" received from business terminal 1b of business b. "Product X" represents the purchase history of product X, "Age" represents the customer's age, "Product Y" represents the purchase history of product Y, and "Gender" represents the customer's gender.

[0130] Note that the processing in steps S201 to S203 can be executed at any time before step S204. Step S201 may be performed after steps S202 and S203. Also, steps S202 and S203 may be performed immediately after step S116, or in response to a request from the distribution destination selection device 7.

[0131] (Step S204) The intermediary, via the intermediary terminal 5, requests the delivery destination selection device 7 to select customers (advertisement delivery destinations) that meet the selection criteria determined in step S201. The selection request unit 531 of the intermediary terminal 5 transmits the selection criteria information 523 to the delivery destination selection device 7 and requests the selection of advertisement delivery destinations. The delivery destination selection device 7 stores the selection criteria information 523 received from the intermediary terminal 5 as selection criteria information 724 in the storage unit 72.

[0132] (Step S205) When the segment generation unit 732 of the distribution destination selection device 7 receives a request from the intermediary terminal 5 to select a distribution destination, it refers to the matching information 723 and searches for a customer segment (combination of customer attributes) that satisfies the selection conditions indicated by the selection condition information 724. Any existing method, such as heuristic search, can be used as the search method.

[0133] In the example in Figure 12, a customer segment that satisfies the selection condition "80% or more probability of purchasing product X (product X = available ≥ 80%)" is searched for, and a customer segment of "purchasers of product Y in their 20s (age = 20s & product Y = available)" is discovered (generated). This means that among the customers corresponding to anonymous ID 721 included in matching information 723 (i.e., customers of businesses a and b), more than 80% of "purchasers of product Y in their 20s" have purchased product X.

[0134] (Step S206) The delivery destination selection unit 733 searches the matching information 723 and selects one or more anonymous IDs 721 that correspond to the customer segment generated in step S205 as the delivery destinations for the advertisement. In the example in Figure 12, from among the anonymous IDs 721 included in the matching information 723, four anonymous IDs 721 with the customer attribute "purchaser of product Y in their 20s (age=20s & product Y=available)" are selected as the delivery destinations for the advertisement for product X.

[0135] (Step S207) The distribution destination selection device 7 transmits one or more anonymous IDs 721 selected as the distribution destinations for the advertisement in step S207 to the intermediary terminal 5. The intermediary terminal 5 stores the one or more anonymous IDs 721 received from the distribution destination selection device 7 in its storage unit 52 as anonymous IDs 522 that will be used as distribution destinations for the advertisement. The anonymous IDs 522 are stored in association with the advertisement information 521 of the advertisement to be distributed.

[0136] The recipient selection device 7 may also transmit information indicating the customer segment along with the anonymous ID 721 to the intermediary terminal 5. This allows the intermediary to see which customer segment the selected recipient belongs to by displaying the customer segment on the intermediary terminal 5.

[0137] <How to deliver ads> Next, we will describe the advertising delivery method performed by the advertising delivery system 1000. Figure 13 is a flowchart of an example of an advertising delivery method. The flowchart in Figure 13 corresponds to the process shown by the solid line in Figure 1. Note that at the start of the flowchart in Figure 13, the processes in Figures 10 and 12 have already been executed.

[0138] (Step S301) When an advertisement slot for application 322 is displayed on user terminal 3, the delivery request unit 334 of user terminal 3 sends anonymous ID 324 to advertising PF6 and requests advertising PF6 to deliver the advertisement. At this time, the delivery request unit 334 may also send information about application 322 and the advertisement slot to advertising PF6 along with anonymous ID 324. Advertising PF6 stores the anonymous ID 324 received from user terminal 3 in its storage unit 62 as anonymous ID 622 for the advertisement delivery destination.

[0139] (Step S302) The advertising platform 6 transmits the anonymous ID 622, which is the destination of the advertisement, to the intermediary terminal 5.

[0140] (Step S303) When the distribution request unit 532 of the intermediary terminal 5 receives anonymous ID 622 from the advertising PF 6, it refers to anonymous ID 522 and advertising information 521 and selects an advertisement that matches anonymous ID 522 as the advertisement to be delivered to anonymous ID 622. For example, if anonymous ID 622 is "ad24eih9", an advertisement for product X is selected as the advertisement to be delivered (see Figure 12).

[0141] If there is no anonymous ID 522 that matches anonymous ID 622, no advertisement will be selected. Also, if there are multiple advertisements corresponding to anonymous ID 522 that match anonymous ID 622, all of the corresponding advertisements will be selected.

[0142] (Step S304) The distribution request unit 532 sends the advertising information 521 of the advertisement selected in step S303 to the advertising PF6 and requests the distribution of the advertisement selected in step S303. The advertising PF6 stores the advertising information 521 received from the intermediary terminal 5 as advertising information 621 in the storage unit 62.

[0143] (Step S305) The ad distribution control unit 631 of the ad PF6, in response to an ad distribution request from the intermediary terminal 5, optimizes the bid amount and other parameters of the ad requested by the intermediary terminal 5 for the ad slot of the application 322 running on the customer's user terminal 3, and selects the ad to be delivered to this ad slot. The distribution control unit 631 may select the ad requested in step S304, or it may select a different ad. Here, we assume that the ad requested in step S304 was selected.

[0144] (Step S306) The distribution control unit 631 transmits the advertising information 621 of the advertisement selected in step S305 to the user terminal 3. The application unit 34 of the user terminal 3 stores the advertising information 621 received from the advertising PF6 as advertising information 323 in the storage unit 32.

[0145] (Step S307) The advertising display unit 333 of the application unit 34 of the user terminal 3 refers to the advertising information 323 and displays the advertisement in the advertising space of application 322. In the example in Figure 12, an advertisement for product X is displayed on the user terminal 3.

[0146] <Summary> As described above, according to this embodiment, an advertising distribution system 1000 is realized, comprising a business terminal 1, a distribution destination selection device 7, and an intermediary terminal 5, wherein the business terminal 1 transmits an anonymous ID 123 corresponding to a customer ID 121 and attribute information 122 indicating customer attributes to the distribution destination selection device 7, the intermediary terminal 5 transmits selection condition information 523 indicating the selection conditions for the distribution destination of the advertisement to the distribution destination selection device 7, and the distribution destination selection device 7 selects an anonymous ID 721 to be the distribution destination of the advertisement based on the customer attributes and selection conditions, and transmits the selected anonymous ID 721 to the intermediary terminal 5.

[0147] With this configuration, the advertising distribution system 1000 can select advertising destinations and deliver advertisements using anonymous IDs that do not identify individuals, that is, without using customer IDs, which are personally identifiable information. As a result, customer data (first-party data) held by businesses can be used for advertising distribution while preventing the risk of customer ID leakage.

[0148] Furthermore, according to this embodiment, an advertising distribution system 1000 is realized, comprising a user terminal 3, a distributor terminal 2, and an anonymization device 4, wherein the user terminal 3 uses a first salt (salt 1) to generate a first anonymous ID (anonymous ID (1)) from the user's customer ID 321 and transmits the first anonymous ID (anonymous ID (1)) to the distributor terminal 2, the distributor terminal 2 uses a second salt (salt 2) to generate a second anonymous ID (anonymous ID (1,2)) from the first anonymous ID (anonymous ID (1)) and transmits the second anonymous ID (anonymous ID (1,2)) to the anonymization device 4, and the anonymization device 4 uses a third salt (salt 3) to generate a third anonymous ID (anonymous ID (1~3)) from the second anonymous ID (anonymous ID (1,2)) and transmits the third anonymous ID (anonymous ID (1~3)) to the user terminal 3.

[0149] With this configuration, the advertising distribution system 1000 can generate an anonymous ID 324 in a state that is difficult to recover or eavesdrop on, and store it on the user terminal 3. As a result, the advertising distribution system 1000 can select advertising destinations and deliver advertisements using an anonymous ID that does not identify individuals, that is, without using customer IDs, which are personally identifiable information. Consequently, customer data (first-party data) held by businesses can be used for advertising distribution while preventing the risk of customer ID leakage.

[0150] The above explanation uses anonymous IDs (1-3) as an example, but it is also possible to use anonymous IDs (1,2) as anonymous IDs. In this case, the anonymization device 4 generates salts 1 and 2, sends salt 1 to the user terminal 3, sends salt 2 to the distributor terminal 2, and sends the anonymous IDs (1,2) received from the distributor terminal 2 to the user terminal 3 along with the session ID. The user terminal 3 stores the anonymous IDs (1,2) received from the anonymization device 4 as anonymous ID 324 in the storage unit 32.

[0151] Furthermore, the anonymization device 4 transmits salts 1 and 2 to the business terminal 1. The business terminal 1 uses salts 1 and 2 received from the anonymization device 4 to hash the customer ID, generate anonymous IDs (1 and 2), and stores them in the storage unit 12 as anonymous IDs 1, 2, and 3. Other processes are the same as described above.

[0152] Thus, by using anonymous IDs (1,2), the same effect as above can be achieved with simpler processing. However, using anonymous IDs (1-3) hashed with salt 3 further reduces privacy risks.

[0153] <Note> This embodiment includes the following disclosures.

[0154] (Note 1-1) An advertising distribution system comprising a business terminal, a distribution destination selection device, and an intermediary terminal, The aforementioned business terminal transmits an anonymous ID corresponding to the customer ID and attribute information indicating customer attributes to the distribution destination selection device. The intermediary terminal transmits selection condition information indicating the selection criteria for the advertising destination to the destination selection device. The distribution destination selection device selects the anonymous ID to be the destination of the advertisement based on the customer attributes and the selection criteria, and transmits the selected anonymous ID to the intermediary terminal. Ad delivery system.

[0155] (Appendix 1-2) The distribution destination selection device generates customer segments that satisfy the selection criteria based on the customer attributes, and selects the anonymous IDs corresponding to the customer segments as the anonymous IDs to which the advertisements will be distributed. The advertising distribution system described in Appendix 1.

[0156] (Appendix 1-3) The customer segment is a combination of the customer attributes that satisfy the selection criteria. The advertising distribution system described in Appendix 2.

[0157] (Appendix 1-4) The aforementioned business terminal generates the anonymous ID by salting and hashing the customer ID. The advertising distribution system described in Appendix 1.

[0158] (Appendix 1-5) The aforementioned carrier terminal anonymizes the customer attributes. The advertising distribution system described in Appendix 1.

[0159] (Appendix 1-6) The aforementioned selection criteria are conditions relating to the customer attributes. The advertising distribution system described in Appendix 1.

[0160] (Appendix 1-7) The destination selection device matches the anonymous ID and customer attributes received from multiple carrier terminals. The advertising distribution system described in Appendix 1.

[0161] (Appendix 1-8) The intermediary terminal requests the delivery of the advertisement to the anonymous ID received from the distribution destination selection device. The advertising distribution system described in Appendix 1.

[0162] (Appendix 1-9) An advertising delivery method performed by an advertising delivery system comprising a business terminal, a delivery destination selection device, and an intermediary terminal, The aforementioned business terminal transmits an anonymous ID corresponding to the customer ID and attribute information indicating customer attributes to the distribution destination selection device. The intermediary terminal transmits selection condition information indicating the selection criteria for the advertising destination to the destination selection device. The distribution destination selection device selects the anonymous ID to be the destination of the advertisement based on the customer attributes and the selection criteria, and transmits the selected anonymous ID to the intermediary terminal. Ad delivery methods.

[0163] (Appendix 1-10) An advertising distribution system comprising a business terminal, a distribution destination selection device, and an intermediary terminal, The aforementioned business terminal transmits an anonymous ID corresponding to the customer ID and attribute information indicating customer attributes to the distribution destination selection device. The intermediary terminal transmits selection condition information indicating the selection criteria for the advertising destination to the destination selection device. The distribution destination selection device selects the anonymous ID to be the destination of the advertisement based on the customer attributes and the selection criteria, and transmits the selected anonymous ID to the intermediary terminal. A program that executes the advertising delivery method.

[0164] (Note 2-1) An advertising distribution system comprising a user terminal, a distributor terminal, and an anonymization device, The user terminal generates a first anonymous ID from the user's customer ID using a first salt, and transmits the first anonymous ID to the distributor terminal. The broadcaster terminal uses a second salt to generate a second anonymous ID from the first anonymous ID and transmits the second anonymous ID to the anonymization device. Ad delivery system.

[0165] (Note 2-2) The anonymization device generates a third anonymous ID from the second anonymous ID using a third salt, and transmits the third anonymous ID to the user terminal. The advertising distribution system described in Appendix 1.

[0166] (Appendix 2-3) The anonymization device transmits the second anonymous ID to the user terminal. The advertising distribution system described in Appendix 1.

[0167] (Appendix 2-4) The user terminal generates the first anonymous ID and then discards the first salt. The advertising distribution system described in Appendix 1.

[0168] (Appendix 2-5) The user terminal comprises an application unit and an isolation unit isolated from the application unit. The application unit stores the customer ID, The isolation unit stores the third anonymous ID. The advertising distribution system described in Appendix 2.

[0169] (Appendix 2-6) The user terminal comprises an application unit and an isolation unit isolated from the application unit. The application unit stores the customer ID, The isolation unit stores the second anonymous ID. The advertising distribution system described in Appendix 3.

[0170] (Appendix 2-7) The application unit generates a first anonymous ID from the customer ID using the first salt, and after generating the first anonymous ID, discards the first salt. The advertising distribution system described in Appendix 5 or Appendix 6.

[0171] (Appendix 2-8) The anonymization device generates the first, second, and third salts, transmits the first salt to the user terminal, and transmits the second salt to the distributor terminal. The advertising distribution system described in Appendix 1.

[0172] (Appendix 2-9) The anonymization device transmits the second salt to the distributor terminal and then discards the second salt. The advertising distribution system described in Appendix 8.

[0173] (Appendix 2-10) The isolation unit receives the third anonymous ID from the anonymization device and requests the delivery of advertisements to the third anonymous ID. The advertising distribution system described in Appendix 2.

[0174] (Appendix 2-11) The business terminal further comprises a terminal that stores the customer ID of the user, The anonymization device generates the first and second salts and transmits them to the operator terminal. The advertising distribution system described in Appendix 1.

[0175] (Appendix 2-12) The service provider terminal generates a second anonymous ID from the customer ID using the first and second salts, and then discards the first and second salts. The advertising distribution system described in Appendix 11.

[0176] (Appendix 2-13) The business terminal further comprises a terminal that stores the customer ID of the user, The anonymization device generates the first, second, and third salts and transmits them to the operator terminal. The advertising distribution system described in Appendix 2.

[0177] (Appendix 2-14) The aforementioned service provider terminal generates a third anonymous ID from the customer ID using the first, second, and third salts, and then discards the first, second, and third salts. The advertising distribution system described in Appendix 13.

[0178] (Appendix 2-15) An advertising delivery method performed by an advertising delivery system comprising a user terminal, a distributor terminal, and an anonymization device, The user terminal generates a first anonymous ID from the user's customer ID using a first salt, and transmits the first anonymous ID to the distributor terminal. The broadcaster terminal uses a second salt to generate a second anonymous ID from the first anonymous ID and transmits the second anonymous ID to the anonymization device. Ad delivery methods.

[0179] (Appendix 2-16) In an advertising distribution system comprising a user terminal, a distributor terminal, and an anonymization device, The user terminal generates a first anonymous ID from the user's customer ID using a first salt, and transmits the first anonymous ID to the distributor terminal. The broadcaster terminal uses a second salt to generate a second anonymous ID from the first anonymous ID and transmits the second anonymous ID to the anonymization device. A program that executes the advertising delivery method.

[0180] The embodiments disclosed herein should be considered in all respects to be illustrative and not restrictive. The scope of the present invention is indicated by the claims, not in the sense described above, and is intended to include all modifications in the sense and scope equivalent to the claims. Furthermore, the present invention is not limited to the embodiments described above, and various modifications are possible within the scope of the claims, and embodiments obtained by appropriately combining the technical means disclosed in different embodiments are also included in the technical scope of the present invention. [Explanation of Symbols]

[0181] 1: Carrier terminal 2: Streamer's device 3: User terminal 4: Anonymization device 5: Intermediary terminal 6: Advertising Platform 7: Delivery destination selection device

Claims

1. An advertising distribution system comprising a user terminal, a distributor terminal, and an anonymization device, The user terminal generates a first anonymous ID from the user's customer ID using a first salt, and transmits the first anonymous ID to the distributor terminal. The broadcaster terminal uses a second salt to generate a second anonymous ID from the first anonymous ID and transmits the second anonymous ID to the anonymization device. Ad delivery system.

2. The anonymization device generates a third anonymous ID from the second anonymous ID using a third salt, and transmits the third anonymous ID to the user terminal. The advertising distribution system according to claim 1.

3. The anonymization device transmits the second anonymous ID to the user terminal. The advertising distribution system according to claim 1.

4. The user terminal generates the first anonymous ID and then discards the first salt. The advertising distribution system according to claim 1.

5. The user terminal comprises an application unit and an isolation unit isolated from the application unit. The application unit stores the customer ID, The isolation unit stores the third anonymous ID. The advertising distribution system according to claim 2.

6. The user terminal comprises an application unit and an isolation unit isolated from the application unit. The application unit stores the customer ID, The isolation unit stores the second anonymous ID. The advertising distribution system according to claim 3.

7. The application unit generates a first anonymous ID from the customer ID using the first salt, and after generating the first anonymous ID, discards the first salt. The advertising distribution system according to claim 5 or claim 6.

8. The anonymization device generates the first and second salts, transmits the first salt to the user terminal, and transmits the second salt to the distributor terminal. The advertising distribution system according to claim 1.

9. The anonymization device transmits the second salt to the distributor terminal and then discards the second salt. The advertising distribution system according to claim 8.

10. The isolation unit receives the third anonymous ID from the anonymization device and requests the delivery of advertisements to the third anonymous ID. The advertising distribution system according to claim 2.

11. The business terminal further comprises a terminal that stores the customer ID of the user, The anonymization device generates the first and second salts and transmits them to the operator terminal. The advertising distribution system according to claim 1.

12. The service provider terminal generates a second anonymous ID from the customer ID using the first and second salts, and then discards the first and second salts. The advertising distribution system according to claim 11.

13. The business terminal further comprises a terminal that stores the customer ID of the user, The anonymization device generates the first, second, and third salts and transmits them to the operator terminal. The advertising distribution system according to claim 2.

14. The service provider terminal generates a third anonymous ID from the customer ID using the first, second, and third salts, and then discards the first, second, and third salts. The advertising distribution system according to claim 13.

15. An advertising delivery method performed by an advertising delivery system comprising a user terminal, a distributor terminal, and an anonymization device, The user terminal generates a first anonymous ID from the user's customer ID using a first salt, and transmits the first anonymous ID to the distributor terminal. The broadcaster terminal uses a second salt to generate a second anonymous ID from the first anonymous ID and transmits the second anonymous ID to the anonymization device. Ad delivery methods.

16. In an advertising distribution system comprising a user terminal, a distributor terminal, and an anonymization device, The user terminal generates a first anonymous ID from the user's customer ID using a first salt, and transmits the first anonymous ID to the distributor terminal. The broadcaster terminal uses a second salt to generate a second anonymous ID from the first anonymous ID and transmits the second anonymous ID to the anonymization device. A program that executes the advertising delivery method.

Images