Data Clean Room Anonymization for Secure Cross-Account Analysis

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Current digital advertising methods rely on third-party cookies, which pose privacy concerns and regulatory challenges, leading to loss of control over customer data, increased costs, and time delays in data analysis.

Innovation Solution

A data clean room system that allows secure data analysis across multiple accounts without third-party involvement, using anonymization and access controls to protect sensitive information and comply with privacy regulations.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Productivity

If companies use third parties to perform data analysis, then data analysis can be conducted across multiple accounts, but companies lose control of their customer data and face privacy risks

Engineering Contradiction:
Improvedata analysis capabilityVSAvoiddata control and privacy protection
Core Design Contradiction:
ProductivityVSReliability

Solution Approach 1:

The patent introduces a trusted third-party mediator (the clean room system) that enables data analysis across multiple accounts without companies directly sharing sensitive data. The mediator performs computations on encrypted data from multiple sources, returning results without exposing underlying customer information to any single party or the mediator itself, thus enabling productivity while maintaining reliability.

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The system creates encrypted copies of customer data that can be shared and analyzed without exposing the original sensitive information. These cryptographic copies allow computation and analysis while the original data remains protected in its source systems, enabling cross-account analysis without compromising data control or privacy.

Inventive Principle:
Principle #26Copying

2Productivity

If companies share customer data with third parties for analysis, then data overlap analysis can be performed, but companies incur increased costs and time delays

Engineering Contradiction:
Improvedata analysis efficiencyVSAvoidanalysis time delay
Core Design Contradiction:
ProductivityVSLoss of time

Solution Approach 1:

The system performs preliminary actions by establishing cryptographic protocols and trusted execution environments before data analysis begins. Data is encrypted and prepared in advance with access controls and computation rules defined beforehand, allowing the actual analysis to proceed efficiently without time-consuming manual approvals or iterative third-party coordination during the analysis process.

Inventive Principle:
Principle #10Preliminary action

3Adaptability or versatility

If companies provide customer information to third parties for analysis, then target group creation is enabled, but companies face regulatory compliance risks

Engineering Contradiction:
Improvetarget group creation capabilityVSAvoidregulatory compliance risk
Core Design Contradiction:
Adaptability or versatilityVSObject-affected harmful factors

Solution Approach 1:

The system uses disposable cryptographic tokens and temporary access credentials that are generated, used, and destroyed in controlled sequences. These short-lived cryptographic objects enable target group creation capabilities while automatically expiring after use, reducing the window for regulatory violations and making compliance verification simpler compared to persistent data sharing arrangements.

Inventive Principle:
Principle #27Cheap short-living objects (Disposable)

Data Source

PatentUS12411842B2Clean room
Publication Date: 2025.09.09 VIDEOAMP INC
  • US12411842B2 patent drawing
  • US12411842B2 patent drawing
  • US12411842B2 patent drawing

AI summary

Embodiments of the present disclosure may provide a data clean room allowing secure data analysis across multiple accounts, without the use of third parties. Each account may be associated with a different company or party. The data clean room may provide security functions to safeguard sensitive information. For example, the data clean room may restrict access to data in other accounts. The data clean room may also restrict which data may be used in the analysis and may restrict the output. The overlap data may be anonymized to prevent sensitive information from being revealed.