# US 10,771,247 B2 · Key pair platform and system to manage federated trust networks in distributed advertising > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 10,771,247 B2 - Document ID: US10771247B2 - Status: Granted - Kind: B2 - Application number: 15/477,473 - Filed: 2017-04-03 - Published: 2017-07-20 - Granted: 2020-09-08 - Earliest claimed: 2013-03-15 - Assignees: Commerce Signals, Inc. - Applicants: Commerce Signals, Inc. - Inventors: Marc Luce; Rodney C. Cook; Thomas Noyes - Web page: https://patentgrep.com/patent/US10771247B2 ## CPC - H04L 9/14: using a plurality of keys or algorithms - G06F 16/254: {Extract, transform and load [ETL] procedures, e.g. ETL data flows in data warehouses} - G06F 21/6254: {by anonymising data, e.g. decorrelating personal data from the owner's identification} - G06F 21/6263: {during internet communication, e.g. revealing personal data from cookies} - G06Q 30/0201: Market modelling; Market analysis; Collecting market data - G06Q 30/0202: Market predictions or forecasting for commercial activities - G06Q 30/0206: {Price or cost determination based on market factors} - G06Q 30/0244: {Optimization} - G06Q 30/0277: {Online advertisement} - G06Q 30/06: Buying, selling or leasing transactions - G06Q 30/0611: {Request for offers or quotes} - G06Q 30/08: Auctions - H04L 2209/42: Anonymization, e.g. involving pseudonyms - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) - G06Q: INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR ## Abstract Systems and methods are provided for object identifier translation using a key pairs platform in a virtualized or cloud-based computing system. A key pair refers to a pair of identifiers held by an entity. Each key pair includes at least one anonymized object identifier. Advantageously, the key pair system protects privacy and provides anonymity for objects by not disclosing the identity of the objects or the underlying data associated with the objects. ## Claims ### Claim 1 A key pair platform system for facilitating secure electronic exchange of anonymized data comprising: a source set of anonymized object identifiers mapped to a source set of virtual internally held object identifiers, the source set of virtual internally held object identifiers corresponding to a source set of object information for a set of objects; a destination set of anonymized object identifiers mapped to a destination set of virtual internally held object identifiers, the destination set of virtual internally held object identifiers corresponding to a destination set of object information for the set of objects; a virtual key pair platform server computer operable to perform an object identifier translation between the source set of anonymized object identifiers and the destination set of anonymized object identifiers upon receiving a permission file over a network authorizing the object identifier translation; wherein the source set of anonymized object identifiers and the destination set of anonymized object identifiers are anonymized such that individual identities of objects in the set of objects are not disclosed by the source set of anonymized object identifiers or the destination set of anonymized object identifiers; and wherein the virtual key pair platform server computer does not receive the source set of virtual internally held object identifiers nor the destination set of virtual internally held object identifiers; wherein the source set of virtual internally held object identifiers is electronically held by at least one source computer connected to the virtual key pair platform server computer over the network, wherein the destination set of virtual internally held object identifiers is electronically held by at least one destination computer connected to the virtual key pair platform server computer over the network, wherein the source set of anonymized object identifiers and the source set of virtual internally held object identifiers are never sent to the at least one destination computer and wherein the destination set of anonymized object identifiers and the destination set of virtual internally held object identifiers are never sent to the at least one source computer; and wherein the virtual key pair platform server computer performs the object identifier translation using a key pair table, where the virtual key pair platform server computer maintains a separate key pair table for each source set of anonymized object identifiers and each destination set of anonymized object identifiers. ### Claim 2 (depends on 1) The system of claim 1, wherein the source set of anonymized object identifiers and the destination set of anonymized object identifiers are not encrypted, wherein no private key or public key is associated with the source set of anonymized object identifiers or the destination set of anonymized object identifiers, and wherein underlying data associated with the source set of anonymized object identifiers and the destination set of anonymized object identifiers cannot be derived through the source set of anonymized object identifiers or the destination set of anonymized object identifiers. ### Claim 3 (depends on 1) The system of claim 1, wherein the source set of anonymized object identifiers is only disclosed to the at least one source computer, an identity broker computer, and the virtual key pair platform server computer, thereby providing anonymity, security, and privacy for the set of objects. ### Claim 4 (depends on 1) The system of claim 1, wherein the destination set of anonymized object identifiers is only disclosed to the at least one destination computer, an identity broker computer, and the virtual key pair platform server computer, thereby providing anonymity and security for the set of objects. ### Claim 5 (depends on 1) The system of claim 1, further comprising a report constructed based on the destination set of virtual internally held object identifiers, wherein the report does not disclose the destination set of virtual internally held object identifiers or any raw data associated with the destination set of virtual internally held object identifiers. ### Claim 6 (depends on 1) The system of claim 1, wherein the source set of anonymized object identifiers and the destination set of anonymized object identifiers are transferred between the virtual key platform server and other devices on the network as Extensible Markup Language (XML) files. ### Claim 7 (depends on 1) The system of claim 1, wherein the source set of anonymized object identifiers is constructed at a first identity broker computer and the destination set of anonymized object identifiers is constructed at a second identity broker computer. ### Claim 8 (depends on 1) The system of claim 1, wherein the at least one permission file includes a permission file from the at least one source computer, a permission file from the at least one destination computer, and at least one permission file from at least one identity broker computer. ### Claim 9 A method for facilitating secure electronic exchange of anonymized data via a key pair platform comprising: a virtual key pair platform server computer receiving a request over a network for a report for a set of objects, wherein the request includes a source set of anonymized object identifiers, at least one permission file, and at least one destination; the virtual key pair platform server computer performing object identifier translation on the source set of anonymized object identifiers to convert the source set of anonymized object identifiers to a destination set of anonymized object identifiers; and based upon the destination set of anonymized object identifiers, the key pair platform receiving the report for the set of objects; wherein the report includes a result and does not include any personally identifiable information; wherein each anonymized object identifier in the source set of anonymized object identifiers is mapped to source virtual internally held object identifiers; wherein each anonymized object identifier in the destination set of anonymized object identifiers is mapped to destination virtual internally held object identifiers; and wherein the platform does not receive any source virtual internally held object identifiers, any destination virtual internally held object identifiers, raw data, or underlying data for any object; wherein the source set of virtual internally held object identifiers is electronically held by at least one source computer connected to the virtual key pair platform server computer over the network, wherein the destination virtual internally held object identifiers are electronically held by at least one destination computer connected to the virtual key pair platform server computer over the network, wherein the source set of anonymized object identifiers and the source set of virtual internally held object identifiers are never sent to the at least one destination computer and wherein the destination anonymized object identifiers and the destination set of virtual internally held object identifiers are never sent to the at least one source computer; and wherein the virtual key pair platform server computer performs the object identifier translation using a key pair table, where the virtual key pair platform server computer maintains a separate key pair table for each source set of anonymized object identifiers and each destination set of anonymized object identifiers. ### Claim 10 (depends on 9) The method of claim 9, further comprising: the virtual key pair platform server computer sending the destination set of anonymized object identifiers to the at least one destination computer; upon receiving the report based on the destination set of anonymized object identifiers from the at least one destination computer, the virtual key pair platform server computer sending the report to the at least one source computer connected to the virtual key pair platform over the network, wherein the report does not disclose any virtual internally held object identifiers, raw data, or underlying data relating to the set of objects and protects anonymity of the set of objects. ### Claim 11 (depends on 9) The method of claim 9, wherein the source set of anonymized object identifiers and the destination set of anonymized object identifiers are not encrypted, wherein no private key or public key is associated with the source set of anonymized object identifiers or the destination set of anonymized object identifiers, and wherein underlying data associated with the source set of anonymized object identifiers and the destination set of anonymized object identifiers cannot be derived through the source set of anonymized object identifiers or the destination set of anonymized object identifiers. ### Claim 12 (depends on 9) The method of claim 9, wherein the source set of anonymized object identifiers is only disclosed to the at least one source computer, an identity broker computer, and the virtual key pair platform server computer, thereby providing anonymity and security for the set of objects. ### Claim 13 (depends on 9) The method of claim 9, wherein the destination set of anonymized object identifiers is only disclosed to the at least one destination computer, an identity broker computer, and the virtual key pair platform server computer, thereby providing anonymity and security for the set of objects. ### Claim 14 (depends on 9) The method of claim 9, wherein the report does not disclose the set of destination virtual internally held object identifiers or any raw data underlying the set of destination virtual internally held object identifiers. ### Claim 15 (depends on 9) The method of claim 9, wherein the virtual key pair platform server computer performs the object identifier translation using a key pair table, where the virtual key pair platform server computer maintains a separate key pair table for each source set of anonymized object identifiers and each destination set of anonymized object identifiers. ### Claim 16 (depends on 9) The method of claim 9, wherein the source set of anonymized object identifiers is constructed at a first identity broker computer and the destination set of anonymized object identifiers is constructed at a second identity broker computer. ### Claim 17 (depends on 9) The method of claim 9, wherein the at least one permission file includes a permission file from the at least one source computer, a permission file from the at least one destination computer, and at least one permission file from at least one identity broker computer.