Temporary Identifier Rotation for Unlinkable Data Collection

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing technologies face challenges in accumulating sensitive information from user devices while preserving user privacy, as they often rely on permanent identifiers that can be exploited for tracking or identifying users, making data vulnerable to adversarial attacks and privacy violations.

Innovation Solution

Utilizing temporary, ephemeral identifiers for user devices to collect and transmit sensitive information, ensuring that each device is identified by different identifiers over time, preventing the linking of data to specific users and minimizing the impact of adversarial attacks.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If permanent identifiers are used to collect sensitive information from user devices, then data can be associated with specific users for analysis, but user privacy is compromised and data becomes vulnerable to tracking and adversarial attacks

Engineering Contradiction:
Improvedata accuracy for user behavior analysisVSAvoidprivacy violations and adversarial attacks
Core Design Contradiction:
ReliabilityVSObject-affected harmful factors

Solution Approach 1:

The patent segments the identification process by dividing user identification into multiple temporary identifier assignments over time. Instead of using a single permanent identifier, the system assigns different temporary identifiers (first temporary identifier, second temporary identifier, etc.) at different time points, preventing adversaries from tracking users across multiple data collection instances while maintaining the ability to analyze aggregated behavior patterns.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The patent introduces temporary identifiers as intermediary elements between the user device and the data analysis system. These temporary identifiers act as mediators that enable data collection and analysis without directly exposing or linking to permanent user identities. The temporary identifiers can be reassigned or rotated, providing a buffer that protects user privacy while maintaining data utility.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Object-affected harmful factors

If temporary identifiers are used to protect user privacy, then user tracking is prevented, but the ability to analyze user behavior patterns across multiple data collection instances is reduced

Engineering Contradiction:
Improveuser privacy protectionVSAvoiduser behavior pattern analysis capability
Core Design Contradiction:
Object-affected harmful factorsVSLoss of information

Solution Approach 1:

The patent implements periodic reassignment of temporary identifiers at defined time intervals or after a certain number of data collection cycles. This periodic action maintains privacy protection by preventing long-term tracking, while still allowing the system to collect sufficient data points within each identifier's valid period to perform meaningful behavior pattern analysis on aggregated data.

Inventive Principle:
Principle #19Periodic action

Solution Approach 2:

The patent makes the identifier system dynamic by allowing temporary identifiers to be reassigned, rotated, or updated over time based on predefined criteria such as time elapsed, number of reports collected, or specific triggering events. This dynamic approach balances privacy protection with data analysis needs by adapting the identifier lifecycle to optimize both goals.

Inventive Principle:
Principle #15Dynamics

Data Source

PatentUS12406091B2Privacy-preserving data collecting
Publication Date: 2025.09.02 ANAGOG
  • US12406091B2 patent drawing
  • US12406091B2 patent drawing
  • US12406091B2 patent drawing

AI summary

A method, system and product including communicating a first report associated with a first temporary identifier of a user device; upon receiving the first report from the user device, storing the first report with the first temporary identifier; communicating a message comprising a second temporary identifier of the user device; communicating a second report that is associated with the second temporary identifier of the user device, wherein the second report is not associated with the first temporary identifier; upon receiving from the user device a second report, storing the second report with the second temporary identifier, whereby the first report cannot be directly matched with the second report based on respective identifiers thereof.