Anonymous event attestation
AssigneeGoogle Inc.
InventorsGang Wang, Marcel M. Moti Yung
Life of this patent
Estimating the term…
Abstract
Methods, systems, and computer media provide attestation tokens that protect the integrity of communications transmitted from client devices, while at the same time avoiding the use of stable device identifiers that could be used to track client devices or their users. In one approach, client devices can receive batches of N device integrity elements from a device integrity computing system, each corresponding to a different public key. The N device elements can be signed by a device integrity computing system. The signing by the device integrity computing system can be signing with a blind signature scheme. Client devices can include throttlers imposing limits on the quantity of attestation tokens created by the client device.
Claims20
A method, comprising:
- sending, by a client device and to a device integrity computing system, a request for N device integrity elements, the request including fraud detection signals for the client device and, for each of the N device integrity elements, public key data comprising at least one of (i) a respective public key for the device integrity element or (ii) a derivative of the respective public key for the device integrity element;
- receiving, by the client device and from the device integrity computing system, the N device integrity elements, wherein each device integrity element comprises a digital signature generated based on a set of content comprising the public key data for the device integrity element, wherein each device integrity element comprises a blind signature of the public key data for the device integrity element generated using a blind signature scheme;
- and
- sending, by the client device and to a recipient, a request comprising a device integrity token generated using a given device integrity element.
A system, comprising:
- a client device comprising one or more processors;
- and
- one or more memories having stored thereon computer readable instructions that, when executed by the one or more processors, cause the one or more processors to perform operations comprising:
- sending, by the client device and to a device integrity computing system, a request for N device integrity elements, the request including fraud detection signals for the client device and, for each of the N device integrity elements, public key data comprising at least one of (i) a respective public key for the device integrity element or (ii) a derivative of the respective public key for the device integrity element;
- receiving, by the client device and from the device integrity computing system, the N device integrity elements, wherein each device integrity element comprises a digital signature generated based on a set of content comprising the public key data for the device integrity element, wherein each device integrity element comprises a blind signature of the public key data for the device integrity element generated using a blind signature scheme;
- and
- sending, by the client device and to a recipient, a request comprising a device integrity token generated using a given device integrity element.
A non-transitory computer readable medium storing instructions that upon execution by a client device cause the client device to perform operations comprising:
- sending, by the client device and to a device integrity computing system, a request for N device integrity elements, the request including fraud detection signals for the client device and, for each of the N device integrity elements, public key data comprising at least one of (i) a respective public key for the device integrity element or (ii) a derivative of the respective public key for the device integrity element;
- receiving, by the client device and from the device integrity computing system, the N device integrity elements, wherein each device integrity element comprises a digital signature generated based on a set of content comprising the public key data for the device integrity element, wherein each device integrity element comprises a blind signature of the public key data for the device integrity element generated using a blind signature scheme;
- and
- sending, by the client device and to a recipient, a request comprising a device integrity token generated using a given device integrity element.
Dependencies are inferred from the claim text.