# US 2014/0157422 A1 · Combining personalization and privacy locally on devices > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 2014/0157422 A1 - Document ID: US20140157422A1 - Status: Published application - Kind: A1 - Application number: 13/689,785 - Filed: 2012-11-30 - Published: 2014-06-05 - Earliest claimed: 2012-11-30 - Assignees: Microsoft Corporation - Applicants: Microsoft Corporation - Inventors: Benjamin Livshits; Andrew Joseph Davidson - Web page: https://patentgrep.com/patent/US20140157422A1 ## CPC - G06F 21/6245: {Protecting personal data, e.g. for financial or medical purposes} - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) ## Abstract A profiling service may determine, local to a device, user profile attributes associated with a device user based on interaction of the device user with the device, based on device-local monitoring of device user interactions with the device, and may store the user profile attributes in a memory. The profiling service may be configured as an augmentation to a device operating system of the device. A profile exposure component may manage exposure of information associated with the user profile attributes to applications operating locally on the device, without exposure to the applications or to third parties of information determined as sensitive to the device user. ## Claims ### Claim 1 A system comprising: a device that includes at least one processor, the device including a localized privacy engine comprising instructions tangibly embodied on a computer readable storage medium for execution by the at least one processor, the localized privacy engine including: a profiling service configured to determine, local to the device, user profile attributes associated with a device user based on interaction of the device user with the device, based on device-local monitoring of device user interactions with the device, and to store the user profile attributes in a memory, the profiling service configured as an augmentation to a device operating system of the device; and a profile exposure component configured to manage exposure of information associated with the user profile attributes to one or more applications operating locally on the device, without exposure to the applications or to third parties of information determined as sensitive to the device user. ### Claim 2 (depends on 1) The system of claim 1, wherein: the device includes a mobile device, and the device operating system includes a mobile device operating system. ### Claim 3 (depends on 1) The system of claim 1, further comprising: a personalization service configured to determine, local to the device, a personalized user profile associated with the device user based on the user profile attributes, wherein the personalization service is configured as one or more of: an augmentation to the device operating system, or a service implemented within one or more individual applications embedded on the device. ### Claim 4 (depends on 1) The system of claim 1, wherein: the profile exposure component includes one or more personalization application program interfaces (APIs) configured to expose information associated with the obtained user profile attributes to one or more applications configured to run on the device. ### Claim 5 (depends on 4) The system of claim 4, wherein: at least one of the one or more applications operating locally on the device is configured for modification to interact with at least one of the APIs to provide content personalized to the device user. ### Claim 6 (depends on 1) The system of claim 1, further comprising: one or more personalizer components configured to determine personalized content for the device user based on the obtained user profile attributes, wherein the one or more personalizer components include one or more of: a device operating system personalizer component that includes a privileged service to perform automatic personalization within the device operating system, or an application personalizer component that is configured to interact with an application that is operating locally on the device, and that is configured to obtain limited access to information associated with the obtained user profile via one or more application program interfaces (APIs) configured to expose the information, and to perform custom personalization. ### Claim 7 (depends on 1) The system of claim 1, further comprising: a profile backup component configured to obtain an encrypted user interest profile based on the obtained user profile attributes and to initiate transmission of the encrypted user interest profile for storage on one or more other devices that are external to the device. ### Claim 8 (depends on 1) The system of claim 1, wherein: at least one of the applications operating locally on the device is configured to interact with one or more privacy filters configured to prevent private information exposure. ### Claim 9 (depends on 1) The system of claim 1, wherein: the profiling service is configured to parse and classify a plurality of streams of data that include information related to the device user, within the device operating system of the device. ### Claim 10 (depends on 9) The system of claim 9, wherein: the profiling service includes a plurality of personal preference mining components configured to parse and classify the plurality of streams of data, the personal preference mining components including one or more of: a location mining component, a browser history mining component, an electronic mail (email) mining component, or a Short Message Service (SMS) mining component. ### Claim 11 (depends on 9) The system of claim 9, wherein: the plurality of streams of data include one or more of: a user electronic mail (email) stream of data, a Short Message Service (SMS) stream of data, a social network stream of data, or a network communication stream of data. ### Claim 12 (depends on 1) The system of claim 1, further comprising: an ad library manager configured to interact with one or more privacy filters included in the profile exposure component, local to the device, to expose personalized information of the device user to one or more ad library components embedded on the device, without exposure to the one or more ad library components of information determined as sensitive to the device user, and wherein: the profile exposure component includes a user selection interface configured to obtain one or more user preferences indicating one or more device user permissions associated with information associated with the device user. ### Claim 13 (depends on 1) The system of claim 1, wherein: the device operating system is augmented with a personalization platform configured to determine, local to the device, a personalized user profile associated with the device user based on interaction of the device user with the device, based on device-local monitoring of device/user interactions, and to store the personalized user profile in the memory. ### Claim 14 A method comprising: determining, local to a device, a personalized user profile associated with a device user based on interaction of the device user with the device, based on device-local monitoring of device operating system activities, and storing the personalized user profile in a memory, via a personalization platform configured as an augmentation to a device operating system; and managing exposure of the personalized user profile to one or more applications operating locally on the device, without exposure to the applications of information determined as sensitive to the device user. ### Claim 15 (depends on 14) The method of claim 14, wherein: managing the exposure includes managing the exposure based on one or more personalization application program interfaces (APIs) configured to expose information associated with the personalized user profile to the one or more applications. ### Claim 16 (depends on 14) The method of claim 14, wherein: determining the personalized user profile includes determining an approximation of one or more personal attributes associated with the device user, and the personalized user profile includes one or more weighted persona profiles associated with the device user, the weighted persona profiles having representations based on one or more Bayesian classifiers. ### Claim 17 (depends on 14) The method of claim 14, further comprising: determining at least one skin for association with at least one device application, based on the personalized user profile. ### Claim 18 (depends on 14) The method of claim 14, further comprising: determining a personalized display of items associated with interaction of the device user with the device, based on the personalized user profile, wherein the personalized display of items includes one or more of: an ordering of presentation of list items, wherein the ordering is based on preferences that are determined based on the personalized user profile associated with the device user, text displayed with boldly displayed features, for text that is determined as having a high relevance to the personalized profile, text displayed as highlighted text, for text that is determined as having a high relevance to the personalized user profile, text displayed with dimly displayed features, for text that is determined as having low relevance to the personalized user profile, or a graphical display of the items, with a first color applied to at least a first portion of the items, and a second color applied to at least a second portion of the items, wherein the first and second colors are selected based on the personalized user profile, wherein: the personalized display of items includes one or more of: visual graphical text display, audio display, tactile display, or sensory display. ### Claim 19 A computer program product tangibly embodied on a computer-readable storage medium and including executable code that causes at least one data processing apparatus to: determine, via a device processor, local to a device, user profile attributes associated with a device user based on interaction of the device user with the device, based on device-local monitoring of device operating system activities associated with actions of the device user; store the user profile attributes in a memory; and expose personalization information of the device user to one or more ad library components embedded on the device, without exposure to the one or more ad library components of information determined as sensitive to the device user, via interaction with one or more privacy filters, local to the device. ### Claim 20 (depends on 19) The computer program product of claim 19, wherein: the ad library components are isolated from other application code for minimization of leaks of information determined as sensitive to the device user.