Uniform User Identifier Generation via Access Set Analysis

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing methods for determining unique user identifiers across multiple websites are insecure due to reliance on third-party central servers, making user data vulnerable to security intrusions and complicating data exchange between websites.

Innovation Solution

A system and process that generates a uniform user identifier by analyzing access requests from visiting users, using combinations of header field elements and network address identifiers to determine the lowest information loss rate, allowing websites to identify and exchange user data without relying on third-party servers.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If a third-party central server is used to generate unique user identifiers, then user identification across websites is achieved, but user data security deteriorates due to vulnerability to security intrusions

Engineering Contradiction:
Improveuser identification reliabilityVSAvoidsecurity vulnerability
Core Design Contradiction:
ReliabilityVSObject-affected harmful factors

Solution Approach 1:

The patent extracts the user identification function from the third-party central server and implements it locally at each website. Each website independently generates and manages its own user identifiers using cryptographic algorithms, eliminating the need to send user data to external servers and thereby removing the security vulnerability associated with third-party involvement.

Inventive Principle:
Principle #2Taking out (Extraction)

Solution Approach 2:

The patent introduces a cryptographic hash algorithm as an intermediary mechanism that enables secure user identification without requiring direct communication with a central server. The hash algorithm processes user data locally to generate identifiers that can be exchanged between websites without exposing sensitive information, acting as a secure mediator that eliminates the need for trusted third parties.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Adaptability or versatility

If user data is exchanged among websites to provide personalized products, then user experience is improved, but data security risk increases due to potential security intrusions

Engineering Contradiction:
Improvepersonalization capabilityVSAvoidsecurity risk
Core Design Contradiction:
Adaptability or versatilityVSObject-affected harmful factors

Solution Approach 1:

The patent creates a cryptographic copy of user identification data that can be exchanged between websites without transferring the actual sensitive user information. Each website generates a hashed version of the user identifier that preserves the ability to recognize and personalize for the user while eliminating the security risk of exposing raw user data during exchanges.

Inventive Principle:
Principle #26Copying

Solution Approach 2:

The patent transforms user identification data from its original sensitive form into a cryptographic hash representation. This parameter change converts the data into a form that maintains its identification functionality while removing the security vulnerability, allowing websites to exchange and use the data for personalization without risking exposure of sensitive information.

Inventive Principle:
Principle #35Parameter changes

Data Source

PatentUS9525744B2Determining a uniform user identifier for a visiting user
Publication Date: 2016.12.20 ALIBABA GROUP HOLDING LTD
  • US9525744B2 patent drawing
  • US9525744B2 patent drawing
  • US9525744B2 patent drawing

AI summary

Determining a uniform user identifier for a visiting user is disclosed, including: generating a plurality of access sets based at least in part on the network address identifier associated with a plurality of access requests submitted by one or more visiting users, and a plurality of header field elements associated with the plurality of access requests, wherein each of the plurality of access requests includes a preliminary user identifier, the network address identifier, and the plurality of header field elements, and wherein an access set includes the network address identifier and at least some of the plurality of header field elements; determining information loss rates corresponding to respective ones of at least a subset of the plurality of access sets; and selecting an access set from the plurality of access sets based at least in part on the respective information loss rate to use to determine a uniform user identifier corresponding to a visiting user of the plurality of visiting users.