HTTP Header Session Matching for Secure Census and Panel Measurement
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing audience measurement systems face challenges in accurately identifying and retrieving session identifiers from secure network messages, such as HTTPS requests, which are encrypted, making it difficult to match panelist and census data effectively.
Innovation Solution
Incorporating session identifiers into the non-encrypted header properties of network messages, specifically using the HTTPS header, allows a proxy server to extract and match these identifiers without decrypting the payload, thereby facilitating census and panel matching.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Object-affected harmful factors
If session identifiers are placed in the encrypted payload of HTTPS requests, then data security is improved, but the ability to retrieve and match identifiers is worsened
Solution Approach 1:
The patent divides the data transmission into two separate components: identification data (session identifiers) are placed in the unencrypted HTTP header, while other data remain in the encrypted payload. This segmentation allows the proxy server to access identifiers for matching purposes without compromising the security of the encrypted data transmission.
Solution Approach 2:
The patent introduces an intermediary mechanism where the proxy server acts as a mediator between the client and server. The proxy extracts session identifiers from the HTTP header before encryption occurs, enabling it to perform census and panel matching without needing to decrypt the payload or compromise data security.
2Measurement precision
If multiple network messages are used to extract identifiers, then identifier retrieval accuracy is improved, but processing complexity and costs are worsened
Solution Approach 1:
The patent performs the identifier extraction action preliminarily by placing session identifiers in the HTTP header before the encryption step. This preliminary placement allows the proxy server to retrieve and match identifiers in a single network message without needing to perform additional extraction operations or process multiple messages.
3Ease of operation
If session identifiers are included in HTTP headers, then proxy server access to identifiers is improved, but data encryption integrity is worsened
Solution Approach 1:
The patent segments the data transmission by separating identification data (session identifiers) from other data. Identifiers are placed in the unencrypted HTTP header for easy proxy access, while all other sensitive data remain within the encrypted payload, thus maintaining encryption integrity for the majority of the data.
Solution Approach 2:
The patent applies local quality by making only the specific portion of data that needs to be accessed by the proxy server (session identifiers) available in the unencrypted header, while the rest of the data maintains encrypted quality. This localized approach minimizes the impact on overall encryption integrity.
Data Source
AI summary
Methods, apparatus, and systems are disclosed for census and panel matching using Hypertext Transfer Protocol (HTTP) headers. An example apparatus includes memory, instructions in the apparatus, and processor circuitry to execute the instructions transmit a first session identifier in an HTTPS header property of a network message to a proxy server, the proxy server to parse the first session identifier from the HTTPS header property, and transmit a second session identifier in the HTTPS header property when the second session identifier is different from the first session identifier, wherein the first session identifier or the second session identifier is transmitted to a monitoring entity, the monitoring entity associating the first session identifier or the second session identifier with at least a panel identifier.