Encrypting Unique Identification Headers for Privacy
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Content providers can identify and track subscribers using unique identification headers (UIDH) generated deterministically, even after user devices delete associated information, as these headers remain constant across requests, acting as 'super-cookies'.
Innovation Solution
A content distribution system encrypts UIDHs with randomized information and shared keys to create multiple transactional identifiers for each request, preventing content providers from identifying or tracking subscribers while still delivering targeted content.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Measurement precision
If deterministic UIDHs are used for targeted content delivery, then content targeting accuracy is improved, but subscriber privacy and tracking prevention deteriorate
Solution Approach 1:
The patent transforms static deterministic UIDHs into dynamic transactional identifiers that change with each request. The system generates multiple possible transactional identifiers by applying different cryptographic functions (SHA-1, SHA-256, MD5) with varying salts to the original UIDH, then selects one randomly for each transaction. This dynamic approach prevents tracking while maintaining targeting accuracy because the content delivery system can still derive the original UIDH when needed.
Solution Approach 2:
The patent changes the parameters of the identification system by introducing cryptographic transformations. Instead of using the original UIDH directly, the system applies cryptographic functions with different salts to generate multiple possible identifiers. The selected identifier is then encrypted using AES with a randomly generated key. These parameter changes (cryptographic functions, salts, encryption) ensure that the identifier cannot be reverse-engineered by content providers while still allowing the content delivery system to retrieve the original UIDH for targeted content delivery.
2Object-affected harmful factors
If encrypted transactional identifiers are generated for each request, then subscriber tracking prevention is improved, but system complexity increases
Solution Approach 1:
The patent performs preliminary actions by pre-generating multiple possible transactional identifiers (using different cryptographic functions and salts) before the actual transaction occurs. The system also pre-generates encryption keys using AES. This preliminary preparation allows the content delivery system to quickly select and use an appropriate identifier without performing complex cryptographic operations in real-time, thereby reducing the perceived complexity during transaction execution.
Solution Approach 2:
The patent employs disposable cryptographic elements such as randomly generated salts and encryption keys that are used once and then discarded. Each transactional identifier is generated with a unique salt and encryption key, ensuring that even if one identifier is compromised, others remain secure. This approach to using cheap, single-use cryptographic objects simplifies the overall security model while maintaining strong tracking prevention.
Data Source
AI summary
A system may receive a content request associated with a user device. The content request may include information that identifies a subscriber associated with the user device and information that identifies a content provider associated with the content request. The system may determine a unique identification header (UIDH), associated with the subscriber, based on the content request. The system may determine randomized information associated with encrypting the UIDH. The system may encrypt the UIDH to create a transactional identifier. The UIDH may be encrypted based on the randomized information and a shared key. The system may insert the transactional identifier and the randomized information in the content request to create a modified content request. The system may provide the modified content request including the transactional identifier and the randomized information.