Encrypted User ID Matching for Privacy-Preserving Personalization
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing data security methods, particularly those using third-party cookies, fail to protect user privacy while enabling customized services, leading to potential data leakage and cross-domain tracking.
Innovation Solution
Implement cryptographically secure and privacy-preserving matching techniques using permutable encryption, where user IDs are encrypted with different keys to maintain confidentiality and enable secure user data sharing between entities.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If third-party cookies are used for user tracking and customized services, then service personalization is improved, but user privacy and data security deteriorate
Solution Approach 1:
The patent introduces encrypted user identifiers as an intermediary mechanism that enables service personalization without exposing actual user data. The encrypted identifiers act as a mediator between the need for user recognition and the requirement for data privacy, allowing customized services while preventing data leakage.
Solution Approach 2:
The patent creates encrypted copies of user identifiers that preserve the functionality of user tracking and service personalization without containing the actual sensitive user data. These cryptographic copies enable the same service personalization effect while eliminating the privacy risks associated with handling real user information.
2Adaptability or versatility
If user data is shared between entities for customized services, then service quality is improved, but data security and access control worsen
Solution Approach 1:
The patent segments user data into encrypted identifier components that can be safely shared between entities. By dividing the user data into cryptographic segments (encrypted identifiers), the system enables multi-entity collaboration for customized services while maintaining security through distributed cryptographic control.
Solution Approach 2:
The patent transforms user data from its original plaintext form into encrypted parameter representations. This parameter change from readable user data to cryptographic identifiers enables service sharing between entities while maintaining security, as the encrypted parameters cannot be interpreted without proper decryption keys.
3Reliability
If encryption is applied to user identifiers, then data security is improved, but the ability to perform matching and identification worsens
Solution Approach 1:
The patent replaces traditional mechanical string-matching identification methods with cryptographic verification mechanisms. Instead of directly comparing plaintext user identifiers, the system uses cryptographic operations on encrypted identifiers, substituting the identification mechanism while maintaining both security and matching functionality.
Solution Approach 2:
The patent changes the identification parameter from plaintext user identifiers to encrypted identifier comparisons. This parameter transformation enables security-preserving matching by operating on cryptographic representations rather than sensitive data, allowing identification without compromising security.
Data Source
AI summary
This disclosure relates to protecting the security and privacy of data, including user identifiers (IDs). In some aspects, a method includes receiving, by a cryptographically-secure private set intersection (CSPSI) server and from a first device corresponding to a first entity, a first identifier retrieval request corresponding to a digital component request being sent from the first device to a second device corresponding to a second entity. The first identifier retrieval request includes a first encrypted user identifier generated by encrypting a user identifier for a user using a first encryption key corresponding to the first entity. The CSPSI server determines, using the encrypted user identifier, a bilateral encrypted user identifier for the user generated by encrypting the first encrypted user identifier using a second encryption key corresponding to the second entity. The CSPSI server sends the bilateral encrypted user identifier for the user to the first device.


