Ephemeral User Identifier Linkage for Privacy-Preserving Personalization

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing systems fail to effectively manage user identifiers across multiple domains while preserving user privacy and security, leading to unauthorized data collection and tracking by malicious entities.

Innovation Solution

Implementing ephemeral user identifiers linked through attestation records that periodically update and encrypt the user identifiers through attestation records that periodically update and encrypt the ephemeral identifiers through attestation records that periodically encrypt the ephemeral user identifiers through attestation records that periodically encrypt the secure communication channel between the client devices and the recipients.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Adaptability or versatility

If stable user identifiers are used across multiple domains, then personalized content delivery is enabled, but user privacy and security are compromised due to long-term tracking

Engineering Contradiction:
Improvepersonalized content deliveryVSAvoiduser privacy and security
Core Design Contradiction:
Adaptability or versatilityVSObject-affected harmful factors

Solution Approach 1:

The patent implements dynamic user identifiers that automatically change over time periods. Instead of stable identifiers, the system uses ephemeral identifiers that are valid only for specific time windows, preventing long-term tracking while enabling personalized content delivery within each time period. The identifier transitions from static to dynamic, changing as time progresses.

Inventive Principle:
Principle #15Dynamics

Solution Approach 2:

The patent segments the user identification function into multiple time-bounded ephemeral identifiers rather than using a single stable identifier. Each identifier is segmented by time period and domain, allowing personalized content delivery for each segment while preventing cross-time-period tracking. This segmentation breaks the continuous tracking chain.

Inventive Principle:
Principle #1Segmentation

2Object-affected harmful factors

If ephemeral user identifiers are frequently updated, then user privacy is enhanced, but network bandwidth consumption increases

Engineering Contradiction:
Improveuser privacyVSAvoidnetwork bandwidth
Core Design Contradiction:
Object-affected harmful factorsVSLoss of energy

Solution Approach 1:

The patent implements periodic updates of ephemeral user identifiers based on time periods rather than continuous updates. Identifiers are refreshed at predetermined intervals, creating a rhythmic pattern of update and usage. This periodic action balances privacy enhancement with bandwidth conservation by limiting updates to necessary intervals.

Inventive Principle:
Principle #19Periodic action

Solution Approach 2:

The system performs preliminary actions by pre-establishing the ephemeral identifier structure and time period parameters before actual user interactions occur. The identifier lifecycle is pre-planned with specific validity periods, allowing the system to prepare identifiers in advance rather than generating them reactively, thus optimizing bandwidth usage.

Inventive Principle:
Principle #10Preliminary action

3Object-affected harmful factors

If domain-specific ephemeral identifiers are implemented, then tracking by malicious entities is prevented, but system complexity increases

Engineering Contradiction:
Improvetracking preventionVSAvoididentifier management system
Core Design Contradiction:
Object-affected harmful factorsVSDevice complexity

Solution Approach 1:

The patent implements local quality by creating domain-specific ephemeral identifiers tailored to each domain's requirements. Each domain receives customized identifiers with specific time periods and scopes relevant to that domain, rather than using a generic identifier system. This localization enhances tracking prevention while managing complexity through domain-specific optimization.

Inventive Principle:
Principle #3Local quality

Solution Approach 2:

The system changes parameters of user identifiers based on domain characteristics and time periods. Each domain-specific identifier has unique parameters such as validity duration, scope, and renewal timing that are adjusted according to the specific domain's needs. This parameter customization enables effective tracking prevention while allowing the system to adapt to different domains without uniform complexity.

Inventive Principle:
Principle #35Parameter changes

Data Source

PatentEP4118859B1Secure network communications that limit information access
Publication Date: 2025.12.10 GOOGLE LLC
  • EP4118859B1 patent drawingFigure 1
  • EP4118859B1 patent drawingFigure 2
  • EP4118859B1 patent drawingFigure 3

AI summary

This disclosure describes systems and techniques for using controlling access to user information using ephemeral user identifiers. In one aspect, a method includes determining, for a given domain, engagement by a user with content provided by the given domain for display by an application at a client device of the user. A determination is made, based on the engagement by the user, to extend, for the given domain, a linkage between user identifiers for a user of the application. In response to determining to extend, for the given domain, the linkage between the user identifiers for the user of the application, one or more future domain-specific ephemeral user identifiers for the user and the given domain are obtained. An attestation record that includes a current domain-specific ephemeral user identifier and the one or more is generated and sent to the given domain.