# US 11,308,232 B2 · Assessing data leakage risks > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 11,308,232 B2 - Document ID: US11308232B2 - Status: Granted - Kind: B2 - Application number: 16/464,109 - Filed: 2018-06-05 - Published: 2021-04-22 - Granted: 2022-04-19 - Earliest claimed: 2018-06-05 - Assignees: Google Inc. - Applicants: Google LLC - Inventors: Yin Liu - Web page: https://patentgrep.com/patent/US11308232B2 ## CPC - G06F 21/552: {involving long-term monitoring or reporting} - G06F 21/6227: {where protection concerns the structure of data, e.g. records, types, queries} - G06F 16/245: Query processing - G06F 16/283: {Multi-dimensional databases or data warehouses, e.g. MOLAP or ROLAP} - G06F 21/554: {involving event detection and direct action} - G06F 21/6245: {Protecting personal data, e.g. for financial or medical purposes} - G06F 21/64: Protecting data integrity, e.g. using checksums, certificates or signatures - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) ## Abstract Systems, devices, methods and other techniques for assessing data leakage risks in a computing environment. A computing system receives interaction data and query data for a party. The system determines dimension combinations represented in the interaction data and identifies, for each query described in the query data, each dimension combination that appears in a result to the query. The system generates, for each dimension combination, a query membership tag that identifies each query for which the dimension combination appears in a result to the query. The system determines, for each unique query membership tag, a count of a number of entities that are associated in the interaction data with any interaction having a dimension combination that corresponds to the query membership tag. The system assesses a data leakage risk for the party based on the counts for one or more unique query membership tags. ## Claims ### Claim 1 A computer-implemented method, comprising: receiving, by a computing system, interaction data for a party, wherein the interaction data describes a set of interactions that have occurred between the party and a plurality of entities, and the interaction data further identifies, for each interaction, (i) values for one or more dimensions of the interaction and (ii) an entity identifier for one of the plurality of entities that participated in the interaction with the party; receiving, by the computing system, query data for the party, wherein the query data describes a plurality of queries issued by the party with respect to the set of interactions that have occurred between the party and the plurality of entities; determining, by the computing system, a plurality of dimension combinations, each dimension combination corresponding to a different combination of values for the one or more dimensions represented in the interaction data; identifying, by the computing system and for each query of the plurality of queries described in the query data, each dimension combination from the plurality of dimension combinations that appears in a result to the query; generating, by the computing system and for each dimension combination of the plurality of dimension combinations, a query membership tag that identifies each query from the plurality of queries for which the dimension combination appears in a result to the query; determining, by the computing system and for each unique query membership tag, a count of a number of entities that are associated in the interaction data with any interaction having a dimension combination that corresponds to the query membership tag; and assessing a data leakage risk for the party based on the counts for one or more unique query membership tags. ### Claim 2 (depends on 1) The computer-implemented method of claim 1, wherein receiving the interaction data for the party includes receiving conversion interaction data that is known to the party, the set of interactions including conversion interactions that have occurred between the plurality of entities and one or more web properties of the party. ### Claim 3 (depends on 2) The computer-implemented method of claim 2, wherein the conversion interaction data is received from the party. ### Claim 4 (depends on 1) The computer-implemented method of claim 1, wherein receiving the interaction data for the party includes receiving non-conversion interaction data that is unknown to the party, the set of interactions including non-conversion interactions that have occurred between the plurality of entities and one or more third party web properties. ### Claim 5 (depends on 4) The computer-implemented method of claim 4, wherein the non-conversion interaction data is received from a notification item provision system. ### Claim 6 (depends on 1) The computer-implemented method of claim 1, wherein the plurality of dimension combinations determined by the computing system includes only conversion interactions values that are known to the party. ### Claim 7 (depends on 1) The computer-implemented method of claim 1, wherein two or more different dimension combinations that appear in a same result to the query have a same query membership tag. ### Claim 8 (depends on 1) The computer-implemented method of claim 1, wherein assessing the data leakage risk for the party includes determining whether the count of the number of entities for any of the unique query membership tags is under an identifiable threshold value. ### Claim 9 (depends on 1) The computer-implemented method of claim 1, further comprising: after identifying a potential data leak corresponding to a given query membership tag based on assessing the data leakage risk for the party, performing a differential query analysis of combinations of queries identified in the given query membership tag to determine whether an actual data leak occurred. ### Claim 10 (depends on 9) The computer-implemented method of claim 9, further comprising performing one or more security actions, in response to determining that the actual data leak has occurred. ### Claim 11 (depends on 10) The computer-implemented method of claim 10, wherein the one or more security actions include restricting further queries issued by the party. ### Claim 12 (depends on 10) The computer-implemented method of claim 10, wherein the one or more security actions are automatically performed by the computing system. ### Claim 13 (depends on 10) The computer-implemented method of claim 10, wherein the one or more security actions are performed after receiving input from an administrator of the computing system. ### Claim 14 One or more non-transitory computer-readable media having instructions stored thereon that, when executed by data processing apparatus of a computing system, cause performance of operations comprising: receiving, by the computing system, interaction data for a party, wherein the interaction data describes a set of interactions that have occurred between the party and a plurality of entities, and the interaction data further identifies, for each interaction, (i) values for one or more dimensions of the interaction and (ii) an entity identifier for one of the plurality of entities that participated in the interaction with the party; receiving, by the computing system, query data for the party, wherein the query data describes a plurality of queries issued by the party with respect to the set of interactions that have occurred between the party and the plurality of entities; determining, by the computing system, a plurality of dimension combinations, each dimension combination corresponding to a different combination of values for the one or more dimensions represented in the interaction data; identifying, by the computing system and for each query of the plurality of queries described in the query data, each dimension combination from the plurality of dimension combinations that appears in a result to the query; generating, by the computing system and for each dimension combination of the plurality of dimension combinations, a query membership tag that identifies each query from the plurality of queries for which the dimension combination appears in a result to the query; determining, by the computing system and for each unique query membership tag, a count of a number of entities that are associated in the interaction data with any interaction having a dimension combination that corresponds to the query membership tag; and assessing a data leakage risk for the party based on the counts for one or more unique query membership tags. ### Claim 15 (depends on 14) The one or more non-transitory computer-readable media of claim 14, wherein receiving the interaction data for the party includes receiving conversion interaction data that is known to the party, the set of interactions including conversion interactions that have occurred between the plurality of entities and one or more web properties of the party. ### Claim 16 (depends on 15) The one or more non-transitory computer-readable media of claim 15, wherein the conversion interaction data is received from the party. ### Claim 17 (depends on 14) The one or more non-transitory computer-readable media of claim 14, wherein receiving the interaction data for the party includes receiving non-conversion interaction data that is unknown to the party, the set of interactions including non-conversion interactions that have occurred between the plurality of entities and one or more third party web properties. ### Claim 18 (depends on 17) The one or more non-transitory computer-readable media of claim 17, wherein the non-conversion interaction data is received from a notification item provision system. ### Claim 19 (depends on 14) The one or more non-transitory computer-readable media of claim 14, wherein the plurality of dimension combinations determined by the computing system includes only conversion interactions values that are known to the party. ### Claim 20 A system, comprising: data processing apparatus; and non-transitory computer-readable media having instructions encoded thereon that, when executed by the data processing apparatus, cause performance of operations comprising: receiving interaction data for a party, wherein the interaction data describes a set of interactions that have occurred between the party and a plurality of entities, and the interaction data further identifies, for each interaction, (i) values for one or more dimensions of the interaction and (ii) an entity identifier for one of the plurality of entities that participated in the interaction with the party; receiving query data for the party, wherein the query data describes a plurality of queries issued by the party with respect to the set of interactions that have occurred between the party and the plurality of entities; determining a plurality of dimension combinations, each dimension combination corresponding to a different combination of values for the one or more dimensions represented in the interaction data; identifying, for each query of the plurality of queries described in the query data, each dimension combination from the plurality of dimension combinations that appears in a result to the query; generating, for each dimension combination of the plurality of dimension combinations, a query membership tag that identifies each query from the plurality of queries for which the dimension combination appears in a result to the query; determining, for each unique query membership tag, a count of a number of entities that are associated in the interaction data with any interaction having a dimension combination that corresponds to the query membership tag; and assessing a data leakage risk for the party based on the counts for one or more unique query membership tags.