# US 12,192,377 B2 · Secure network communications that limit information access > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 12,192,377 B2 - Document ID: US12192377B2 - Status: Granted - Kind: B2 - Application number: 17/916,194 - Filed: 2021-12-15 - Published: 2023-05-11 - Granted: 2025-01-07 - Earliest claimed: 2021-01-12 - Assignees: Google Inc. - Applicants: Google LLC - Inventors: Alex Daniel Jacobson; Gang Wang; Marcel M. Moti Yung - Web page: https://patentgrep.com/patent/US12192377B2 ## CPC - H04L 9/3247: {involving digital signatures} - H04L 63/0407: {wherein the identity of one or more communicating identities is hidden (cryptographic mechanisms or cryptographic arrangements for anonymous credentials or for identity based cryptographic systems H04L9/00)} - H04L 9/0825: {using asymmetric-key encryption or public key infrastructure [PKI], e.g. key signature or public key certificates} - H04L 9/0861: {Generation of secret information including derivation or calculation of cryptographic keys or passwords} - H04L 9/3297: {involving time stamps, e.g. generation of time stamps} - H04W 12/02: Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII] - H04L 63/10: {for controlling access to devices or network resources} - H04L 2209/42: Anonymization, e.g. involving pseudonyms - H04W 12/041: Key generation or derivation - H04W 12/75: Temporary identity - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72) ## Abstract This disclosure describes systems and techniques for using controlling access to user information using ephemeral user identifiers. In one aspect, a method includes determining, for a given domain, engagement by a user with content provided by the given domain for display by an application at a client device of the user. A determination is made, based on the engagement by the user, to extend, for the given domain, a linkage between user identifiers for a user of the application. In response to determining to extend, for the given domain, the linkage between the user identifiers for the user of the application, one or more future domain-specific ephemeral user identifiers for the user and the given domain are obtained. An attestation record that includes a current domain-specific ephemeral user identifier and the one or more is generated and sent to the given domain. ## Claims ### Claim 1 A computer-implemented method comprising: determining, for a given domain, engagement by a user with content provided by the given domain for display by an application at a client device of the user; determining, based on the engagement by the user, to extend, for the given domain, a linkage between different user identifiers for a user of the application for a duration of time such that the given domain is capable of identifying the user using any of the different user identifiers during the duration of time; in response to determining to extend, for the given domain, the linkage between the user identifiers for the user of the application for the duration of time: obtaining one or more future domain-specific ephemeral user identifiers for the user and the given domain, wherein each future domain-specific ephemeral user identifier is a user identifier that the application will use to identify the user to the given domain during a future time period after a current time period lapses; generating an attestation record comprising: a set of data comprising payload data; a digital signature of the set of data; a current domain-specific ephemeral user identifier for the user and the given domain; and the one or more future domain-specific ephemeral user identifiers for the user and the given domain; and sending the attestation record to the given domain. ### Claim 2 (depends on 1) The computer-implemented method of claim 1, wherein the set of data comprises a timestamp indicating a time at which the attestation record is generated and a signed redemption record. ### Claim 3 (depends on 1) The computer-implemented method of claim 1, wherein the payload data comprises the one or more future domain-specific user identifiers for the user and the given domain. ### Claim 4 (depends on 1) The computer-implemented method of claim 1, wherein the engagement by the user comprises a level of user engagement by the user with the content provided by the given domain for display by the application at the client device of the user, the method further comprising selecting a quantity of the one or more future domain-specific user identifiers for the user and the given domain based on the level of user engagement for the given domain. ### Claim 5 (depends on 1) The computer-implemented method of claim 1, wherein the current domain-specific user identifier and the one of more future domain-specific user identifiers are encrypted using an encryption key of the given domain. ### Claim 6 (depends on 1) The computer-implemented method of claim 1, wherein the attestation record comprises, for each of multiple domains including the given domain, a respective current user identifier for the domain. ### Claim 7 (depends on 1) The computer-implemented method of claim 1, wherein: the current domain-specific ephemeral user identifier for the user and the given domain comprises a current public key for the user and the given domain; and each of the one or more future domain-specific user identifiers comprises a future public key for the user and the given domain. ### Claim 8 (depends on 1) The computer-implemented method of claim 1, wherein: the given domain is a domain of a publisher of electronic resources; and determining, for the given domain, the user engagement by the user with content provided by the given domain for display by the application at the client device of the user comprises determining a level of user engagement based on the user navigating to an electronic resource of the publisher. ### Claim 9 (depends on 1) The computer-implemented method of claim 1, wherein: the given domain is a domain of a content platform that distributes digital components or of a content platform that facilitates distribution of digital components by another content platform; and determining, for the given domain, the engagement by the user with content provided by the given domain for display by the application at the client device of the user comprises determining a level of user engagement based on the content platform providing one or more digital components for presentation at the client device. ### Claim 10 (depends on 1) The computer-implemented method of claim 1, wherein: the given domain is a domain of a digital component provider that creates digital components that include content of the digital component provider; and determining, for the given domain, the engagement by the user with content provided by the given domain for display by the application at the client device of the user comprises determining a level of user engagement based on the user interacting with a digital component created by the digital component provider. ### Claim 11 A system comprising: one or more processors; and one or more storage devices storing instructions that, when executed by the one or more processors, cause the one or more processor to perform operations comprising: determining, for a given domain, engagement by a user with content provided by the given domain for display by an application at a client device of the user; determining, based on the engagement by the user, to extend, for the given domain, a linkage between different user identifiers for a user of the application for a duration of time such that the given domain is capable of identifying the user using any of the different user identifiers during the duration of time; in response to determining to extend, for the given domain, the linkage between the user identifiers for the user of the application for the duration of time: obtaining one or more future domain-specific ephemeral user identifiers for the user and the given domain, wherein each future domain-specific ephemeral user identifier is a user identifier that the application will use to identify the user to the given domain during a future time period after a current time period lapses; generating an attestation record comprising: a set of data comprising payload data; a digital signature of the set of data; a current domain-specific ephemeral user identifier for the user and the given domain; and the one or more future domain-specific ephemeral user identifiers for the user and the given domain; and sending the attestation record to the given domain. ### Claim 12 (depends on 11) The system of claim 11, wherein the set of data comprises a timestamp indicating a time at which the attestation record is generated and a signed redemption record. ### Claim 13 (depends on 11) The system of claim 11, wherein the payload data comprises the one or more future domain-specific user identifiers for the user and the given domain. ### Claim 14 (depends on 11) The system of claim 11, wherein the engagement by the user comprises a level of user engagement by the user with the content provided by the given domain for display by the application at the client device of the user, the operations further comprising selecting a quantity of the one or more future domain-specific user identifiers for the user and the given domain based on the level of user engagement for the given domain. ### Claim 15 (depends on 11) The system of claim 11, wherein the current domain-specific user identifier and the one of more future domain-specific user identifiers are encrypted using an encryption key of the given domain. ### Claim 16 (depends on 11) The system of claim 11, wherein the attestation record comprises, for each of multiple domains including the given domain, a respective current user identifier for the domain. ### Claim 17 (depends on 11) The system of claim 11, wherein: the current domain-specific ephemeral user identifier for the user and the given domain comprises a current public key for the user and the given domain; and each of the one or more future domain-specific user identifiers comprises a future public key for the user and the given domain. ### Claim 18 (depends on 11) The system of claim 11, wherein: the given domain is a domain of a publisher of electronic resources; and determining, for the given domain, the user engagement by the user with content provided by the given domain for display by the application at the client device of the user comprises determining a level of user engagement based on the user navigating to an electronic resource of the publisher. ### Claim 19 (depends on 11) The system of claim 11, wherein: the given domain is a domain of a content platform that distributes digital components or of a content platform that facilitates distribution of digital components by another content platform; and determining, for the given domain, the engagement by the user with content provided by the given domain for display by the application at the client device of the user comprises determining a level of user engagement based on the content platform providing one or more digital components for presentation at the client device. ### Claim 20 A non-transitory computer readable storage medium carrying instructions that, when executed by one or more processors, cause the one or more processors to perform operations comprising: determining, for a given domain, engagement by a user with content provided by the given domain for display by an application at a client device of the user; determining, based on the engagement by the user, to extend, for the given domain, a linkage between different user identifiers for a user of the application for a duration of time such that the given domain is capable of identifying the user using any of the different user identifiers during the duration of time; in response to determining to extend, for the given domain, the linkage between the user identifiers for the user of the application for the duration of time: obtaining one or more future domain-specific ephemeral user identifiers for the user and the given domain, wherein each future domain-specific ephemeral user identifier is a user identifier that the application will use to identify the user to the given domain during a future time period after a current time period lapses; generating an attestation record comprising: a set of data comprising payload data; a digital signature of the set of data; a current domain-specific ephemeral user identifier for the user and the given domain; and the one or more future domain-specific ephemeral user identifiers for the user and the given domain; and sending the attestation record to the given domain.