Privacy Preserving Data Sharing Framework for Campaigns
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing data sharing methods for campaigns, such as those used by content providers and content delivery networks, often compromise user privacy due to the need for extensive collaboration and may provide incomplete or inaccurate data due to assumptions involved.
Innovation Solution
A framework that limits data sharing to a content delivery network until a sufficient number of interactions occur, employing anonymity metrics to ensure crowd anonymity and prevent user identification, using postback data structures and StoreKit framework APIs to transmit anonymized conversion data.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If data is shared with content delivery networks for campaign analysis, then conversion metrics can be tracked and campaign effectiveness improved, but user privacy is compromised due to extensive collaboration requirements
Solution Approach 1:
The patent extracts only the essential conversion data (conversion occurrence, timestamp, campaign ID) from the complete user interaction data, removing all unnecessary personal identifiers and device information. This extraction approach allows campaign tracking while minimizing privacy exposure by sharing only what is strictly necessary for metric calculation.
Solution Approach 2:
The patent introduces an intermediary processing layer that receives raw conversion data, anonymizes it by removing personal identifiers, and then forwards the sanitized data to content delivery networks. This intermediary acts as a privacy buffer, enabling data sharing for campaign analysis while preventing direct access to user-identifiable information.
2Loss of information
If digital watermarks and tracking code are embedded in content, then user interaction data can be collected, but the system complexity increases due to extensive coordination requirements
Solution Approach 1:
The patent enables the user device to autonomously generate and transmit conversion data without requiring complex coordination between multiple parties. The device itself performs the tracking function by detecting conversion events and automatically sending anonymized data to designated receivers, eliminating the need for intricate watermarking and tracking code deployment across multiple systems.
Solution Approach 2:
The patent segments the data collection process into independent, simple components: the user device detects conversions and transmits data, while receiving systems process and analyze the information. This segmentation eliminates the need for complex integrated tracking systems and reduces coordination overhead by allowing each component to operate independently with well-defined interfaces.
3Measurement precision
If user-specific data is transmitted to advertisement networks, then conversion metrics can be accurately updated, but user identification becomes possible compromising anonymity
Solution Approach 1:
The patent extracts only the minimal necessary data elements for conversion tracking (conversion event, timestamp, campaign identifier) while removing all user-specific identifiers such as device IDs, IP addresses, and personal information. This extraction maintains measurement precision for campaign metrics while ensuring user anonymity cannot be compromised.
Solution Approach 2:
The patent transforms user-identifiable data into anonymized form by changing the parameters of the data being transmitted. Instead of sending unique device identifiers, the system transmits aggregated or pseudonymized data where individual users cannot be distinguished, thereby maintaining metric accuracy while preserving anonymity through parameter transformation.
Data Source
AI summary
A framework associated with an online store is configured to enable privacy preserving data sharing for invitational campaigns by limiting the amount of data that is shared to a content delivery network for the campaign until a sufficient number of interactions have occurred to provide crowd anonymity to participants in the campaign.