Anonymous event attestation
AssigneeGoogle Inc.
InventorsGang Wang, Marcel M. Moti Yung
Life of this patent
Estimating the term…
Abstract
Methods, systems, and computer media provide attestation tokens that protect the integrity of communications transmitted from client devices, while at the same time avoiding the use of stable device identifiers that could be used to track client devices or their users. In one approach, client devices can receive batches of N device integrity elements from a device integrity computing system, each corresponding to a different public key. The N device elements can be signed by a device integrity computing system. The signing by the device integrity computing system can be signing with a blind signature scheme. Client devices can include throttlers imposing limits on the quantity of attestation tokens created by the client device.
Claims20
A method, comprising:
- receiving, by a computing system of a digital component provider and from a client device, a request comprising a payload, a digital signature, and a device integrity token, wherein the device integrity token comprises an unblinded blind signature of public key data corresponding to a public key of the client device;
- validating, by the computing system, the request by verifying the digital signature using the public key of the client device;
- validating, by the computing system, the device integrity token based on a verification of the unblinded blind signature;
- and
- in response to determining that the request and the device integrity token are valid, responding, by the computing system, to the request.
A system, comprising:
- one or more processors of a computing system of a digital component provider;
- and
- one or more memories having stored thereon computer readable instructions that, when executed by the one or more processors, cause the one or more processors to perform operations comprising:
- receiving, by the computing system of a digital component provider and from a client device, a request comprising a payload, a digital signature, and a device integrity token, wherein the device integrity token comprises an unblinded blind signature of public key data corresponding to a public key of the client device;
- validating, by the computing system, the request by verifying the digital signature using the public key of the client device;
- validating, by the computing system, the device integrity token based on a verification of the unblinded blind signature;
- and
- in response to determining that the request and the device integrity token are valid, responding, by the computing system, to the request.
A non-transitory computer-readable medium storing instructions that upon execution by a computing system cause the computing system to perform operations comprising:
- receiving, by the computing system of a digital component provider and from a client device, a request comprising a payload, a digital signature, and a device integrity token, wherein the device integrity token comprises an unblinded blind signature of public key data corresponding to a public key of the client device;
- validating, by the computing system, the request by verifying the digital signature using the public key of the client device;
- validating, by the computing system, the device integrity token based on a verification of the unblinded blind signature;
- and
- in response to determining that the request and the device integrity token are valid, responding, by the computing system, to the request.
Dependencies are inferred from the claim text.