Temporary Identifier Rotation for Privacy-Preserving Sensitive Data Processing
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing technologies face challenges in accumulating sensitive information from user devices while preserving user privacy, as they often rely on permanent identifiers that can be exploited for tracking or identifying users, making data vulnerable to adversarial attacks and privacy violations.
Innovation Solution
Utilizing temporary, ephemeral identifiers for user devices that are periodically changed to prevent linking sensitive information to specific users, ensuring privacy by decoupling user behavior analysis from permanent identifiers.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If permanent identifiers are used to accumulate sensitive information from user devices, then data can be linked to specific users for analysis, but user privacy is compromised and data becomes vulnerable to tracking and adversarial attacks
Solution Approach 1:
The patent applies dynamics by making identifiers temporary and periodically changing them. Instead of using static permanent identifiers, the system uses dynamic temporary identifiers that are valid only for limited time periods and can be renewed or changed. This dynamic approach allows data to be accumulated and analyzed during the identifier's validity period while preventing long-term tracking and privacy violations.
Solution Approach 2:
The patent employs disposable temporary identifiers that have limited lifespan and can be discarded after use. Each temporary identifier is designed to be short-lived, used for a specific purpose and time period, then replaced with a new identifier. This eliminates the need for permanent tracking while maintaining the ability to accumulate and analyze data within the identifier's valid period.
2Object-affected harmful factors
If temporary identifiers are used to preserve user privacy, then user tracking is prevented, but the ability to link sensitive information to specific users for analysis is reduced
Solution Approach 1:
The patent implements periodic action through time-bounded temporary identifiers that are valid for specific time periods. Data accumulation and analysis operations are performed periodically within these time bounds. The system allows meaningful analysis during the identifier's validity period while automatically expiring the identifier afterward, thus protecting privacy while maintaining analytical capability within defined temporal limits.
Solution Approach 2:
The patent applies preliminary action by pre-defining the validity period and scope of each temporary identifier before data collection begins. The system establishes in advance how long an identifier will be valid, what data can be collected during that period, and when it will expire. This preliminary structuring enables planned data accumulation and analysis while built-in safeguards prevent excessive tracking.
3Object-affected harmful factors
If temporary identifiers with limited validity periods are used, then privacy is preserved through identifier expiration, but data accumulation continuity may be interrupted
Solution Approach 1:
The patent uses periodic action to structure data accumulation around temporary identifier validity periods. Each identifier has a defined lifespan during which data can be accumulated, after which it expires and a new identifier begins. This creates a natural periodic rhythm for data collection that balances privacy protection (through expiration) with continuous accumulation (through sequential identifiers).
Solution Approach 2:
The patent implements discarding and recovering by systematically discarding expired temporary identifiers and their associated data contexts, then recovering and starting fresh with new identifiers. The data accumulated during each identifier's validity period is processed and stored in a manner that separates it from the identifier itself, allowing the system to discard the identifier while preserving the valuable data insights.
Data Source
AI summary
A method, system and product including communicating a first report associated with a first temporary identifier of a user device; upon receiving the first report from the user device, storing the first report with the first temporary identifier; communicating a message comprising a second temporary identifier of the user device; communicating a second report that is associated with the second temporary identifier of the user device, wherein the second report is not associated with the first temporary identifier; upon receiving from the user device a second report, storing the second report with the second temporary identifier, whereby the first report cannot be directly matched with the second report based on respective identifiers thereof.