Secure multi-party computation attribution

Abstract

Secure multi-party computations may be used to get attribution results without compromising user privacy. A content provider and an advertiser may each sign a calculation indicating that they wish to share data using a secure multi-party computation. A measurement company may sign the calculation indicating that the measurement company has evaluated the computation and that the computation will protect user privacy. A user device may confirm with the verification service that all parties have signed the calculation. The user device may transmit one-time identifiers to the measurement company, which allows impression data and conversion data stored by the content provider and the advertiser to be linked. The content provider, the advertiser, and the measurement company may perform the secure multi-party computation, which allows the advertiser to evaluate attribution results without accessing the user data stored by the content provider.

What is claimed is: 
     
         1 . A computer-implemented method comprising:
 transmitting, by an advertiser server, a digital signature to a verification service, wherein the digital signature indicates that the advertiser server has agreed to a secure multi-party computation protocol to be performed by the advertiser server, a content publisher, and a measurement company;   receiving, by the advertiser server, a request for content from a client device;   transmitting, by the advertiser server, a cross-origin resource sharing (CORS) exception request to the client device, wherein the CORS is verified by the verification service;   storing, by the advertiser server, a one-time identifier and conversion data for the client device regarding an advertisement, wherein the one-time identifier is generated by the advertiser server or the client device;   receiving, by the advertiser server, the one-time identifier from the measurement company;   inputting, by the advertiser server and based on receiving the one-time identifier from the measurement company, the conversion data to the secure multi-party computation protocol; and   performing, by the advertiser server, the secure multi-party computation protocol, wherein the measurement company inputs a linked pair of one-time identifiers including the one-time identifier to the secure multi-party computation protocol, and wherein the content publisher inputs impression data to the secure multi-party computation protocol.   
     
     
         2 . The computer-implemented method of  claim 1 , further comprising using an output of the secure multi-party computation as an input to an attribution model. 
     
     
         3 . The computer-implemented method of  claim 1 , further comprising receiving the one-time identifier from the client device. 
     
     
         4 . The computer-implemented method of  claim 1 , wherein the measurement company verifies that the secure multi-party computation is secure. 
     
     
         5 . The computer-implemented method of  claim 1 , wherein an output of the secure multi-party computation does not contain personally identifiable information. 
     
     
         6 . The computer-implemented method of  claim 1 , wherein the digital signature identifies the content publisher, the advertiser, and the measurement company. 
     
     
         7 . The computer-implemented method of  claim 1 , wherein the client device transmits the one-time identifier to the measurement company in response to the verification service authorizing a cross-origin resource sharing exception. 
     
     
         8 . A non-transitory computer-readable storage medium comprising instructions executable by a processor of an advertiser server, the instructions when executed causing the processor to perform actions comprising:
 transmitting, by the processor, a digital signature to a verification service, wherein the digital signature indicates that the advertiser server has agreed to a secure multi-party computation protocol to be performed by the advertiser server, a content publisher, and a measurement company;   receiving, by the processor, a request for content from a client device;   transmitting, by the processor, a cross-origin resource sharing (CORS) exception request to the client device, wherein the CORS is verified by the verification service;   storing, by the processor, a one-time identifier and conversion data for the client device regarding an advertisement, wherein the one-time identifier is generated by the advertiser server or the client device;   receiving, by the processor, the one-time identifier from the measurement company;   inputting, by the processor and based on receiving the one-time identifier from the measurement company, the conversion data to the secure multi-party computation protocol; and   performing, by the processor, the secure multi-party computation protocol, wherein the measurement company inputs a linked pair of one-time identifiers including the one-time identifier to the secure multi-party computation protocol, and wherein the content publisher inputs impression data to the secure multi-party computation protocol.   
     
     
         9 . The non-transitory computer-readable storage medium of  claim 8 , the actions further comprising using an output of the secure multi-party computation as an input to an attribution model. 
     
     
         10 . The non-transitory computer-readable storage medium of  claim 8 , the actions further comprising receiving, by the processor, the one-time identifier from the client device. 
     
     
         11 . The non-transitory computer-readable storage medium of  claim 8 , wherein the measurement company verifies that the secure multi-party computation is secure. 
     
     
         12 . The non-transitory computer-readable storage medium of  claim 8 , wherein an output of the secure multi-party computation does not contain personally identifiable information. 
     
     
         13 . The non-transitory computer-readable storage medium of  claim 8 , wherein the digital signature identifies the processor, the advertiser, and the measurement company. 
     
     
         14 . The non-transitory computer-readable storage medium of  claim 8 , wherein the client device transmits the one-time identifier to the measurement company in response to the verification service authorizing a cross-origin resource sharing exception. 
     
     
         15 . A computer-implemented method comprising:
 receiving, by a processor, a cross-origin resource sharing verification request from a client device;   determining, by the processor and in response to the receiving the cross-origin resource sharing verification request, that a content publisher, an advertiser, and a measurement company signed a secure multi-party computation protocol; and   transmitting, by the processor, a verification response to the client device.   
     
     
         16 . The computer-implemented method of  claim 15 , further comprising receiving, by the processor, a digital signature for the advertiser indicating that the advertiser is willing to share data as part of the secure multi-party computation protocol. 
     
     
         17 . The computer-implemented method of  claim 15 , wherein the verification response indicates that the content publisher, the advertiser, and the measurement company signed the secure multi-party computation protocol. 
     
     
         18 . The computer-implemented method of  claim 15 , wherein the measurement company verifies that the secure multi-party computation protocol is secure. 
     
     
         19 . The computer-implemented method of  claim 15 , wherein an output of the secure multi-party computation protocol does not contain personally identifiable information. 
     
     
         20 . The computer-implemented method of  claim 15 , further comprising receiving, by the processor, a digital signature identifying the content publisher, the advertiser, and the measurement company.