Differential Privacy Applet Risk Identification

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing methods for identifying risky applet content fail to balance the need for effective risk identification with user privacy preservation, often leading to privacy compliance issues due to the backhaul of applet content for analysis.

Innovation Solution

A method and apparatus that utilize differential privacy preserving techniques, specifically the randomized response technique, to identify risky applet content by disturbing program identifiers on the client side and sending disturbed identifiers to the server for analysis, ensuring that user privacy is maintained while allowing for valid access frequency statistics to be collected.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Measurement precision

If applet content is backhauled to serving end for identification, then risk identification accuracy is improved, but user privacy protection deteriorates

Engineering Contradiction:
Improverisk identification accuracyVSAvoiduser privacy exposure
Core Design Contradiction:
Measurement precisionVSObject-affected harmful factors

Solution Approach 1:

Instead of backhauling original applet content to the serving end for identification, the patent inverts the approach by having the client device locally process and anonymize the content using differential privacy techniques. The serving end receives only anonymized access frequency statistics rather than raw content data, thus achieving risk identification while preserving user privacy.

Inventive Principle:
Principle #13The other way round (Inversion)

Solution Approach 2:

The patent introduces differential privacy as an intermediary mechanism between the client device and serving end. This intermediary process adds controlled noise to the data during local processing, enabling the serving end to obtain accurate aggregate statistics without accessing individual user content, thereby resolving the contradiction between identification accuracy and privacy protection.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Object-affected harmful factors

If user privacy is preserved through local processing, then privacy compliance is improved, but risk identification capability deteriorates

Engineering Contradiction:
Improveprivacy complianceVSAvoidrisk identification capability
Core Design Contradiction:
Object-affected harmful factorsVSMeasurement precision

Solution Approach 1:

The patent creates a local copy of the applet content processing on the client device rather than requiring original content transmission. By performing differential privacy processing locally on copied data, the system maintains privacy compliance while still enabling risk identification through anonymized statistics sent to the serving end.

Inventive Principle:
Principle #26Copying

Solution Approach 2:

The patent replaces the mechanical system of content backhauling with a computational approach using differential privacy algorithms. Instead of physically transmitting content data to the serving end, the system uses mathematical transformations to generate anonymized statistics, substituting data transmission with computational processing that preserves privacy while maintaining identification capability.

Inventive Principle:
Principle #28Mechanics substitution (Replace mechanical system)

3Object-affected harmful factors

If differential privacy technique is applied locally, then privacy protection is improved, but data utility for analysis deteriorates

Engineering Contradiction:
Improveprivacy protectionVSAvoiddata utility
Core Design Contradiction:
Object-affected harmful factorsVSLoss of information

Solution Approach 1:

The patent applies differential privacy parameter changes by adjusting the privacy budget (epsilon) and noise scale parameters to optimize the balance between privacy protection and data utility. By carefully tuning these parameters, the system maintains sufficient data utility for risk identification while achieving the required level of privacy protection.

Inventive Principle:
Principle #35Parameter changes

Solution Approach 2:

The patent implements partial differential privacy processing where only certain aspects of the data are anonymized to the extent necessary for privacy protection while retaining sufficient information for risk identification. This partial action approach avoids excessive anonymization that would completely destroy data utility, achieving an optimal balance between the two competing requirements.

Inventive Principle:
Principle #16Partial or excessive action

Data Source

PatentEP3971754B1Method and apparatus for identifying applets of risky content based on differential privacy preserving
Publication Date: 2024.08.21 ALIPAY (HANGZHOU) INFORMATION TECH CO LTD
  • EP3971754B1 patent drawingFigure 1
  • EP3971754B1 patent drawingFigure 2
  • EP3971754B1 patent drawingFigure 3

AI summary

Implementations of the present specification provide a method and an apparatus for identifying an applet of risky content based on differential privacy preserving. A specific implementation of the method includes: in response to monitoring a target operation performed by a user by using an applet carried by a service platform, obtaining a result of determining whether an operation source is a risky operation source, the operation source including a combination of the user and a device used by the user, and the determining result being determined by using a risk identification policy group; in response to determining that the operation source is a risky operation source, disturbing a program identifier of the applet by using a randomized response technique that satisfies local differential privacy preserving, to obtain a disturbed program identifier; and sending an operation source identifier of the operation source and the disturbed program identifier to a serving end of the service platform, so that the serving end identifies whether the applet is an applet of risky content based on multiple received disturbed program identifiers by using the randomized response technique.