Platform identity architecture with a temporary pseudonymous identity

Patent metadata

Field	Value
Publication number	US-9798895-B2
Application number	US-201414495959-A
Country	US
Kind code	B2
Filing date	Sep 25, 2014
Priority date	Sep 25, 2014
Publication date	Oct 24, 2017
Grant date	Oct 24, 2017

Abstract

In an example, a client-server platform identity architecture is disclosed. The platform identity architecture may be used to enable a venue operator to provide online services and to collect telemetry data and metrics while giving end users greater control over privacy. When entering a compatible venue, the user's device generates a signed temporary pseudonymous identity (TPI) in secure hardware or software. Any telemetry uploaded to the venue server includes the signature so that the server can verify that the data are valid. The TPI may have a built-in expiry. The venue server may thus receive useful tracking data during the term of the TPI, while the user is assured that the data are not kept permanently or correlated to personally-identifying information.

First claim

What is claimed is:

1. A platform identity client (PIC) device comprising:
a network interface; and
one or more hardware and/or software logic elements comprising a platform identity client engine operable for:
detecting via the network interface an available network service provided by an operator of a venue;
generating a temporary pseudonymous identity (TPI) comprising direct anonymous attestation to the network service provided by the operator of the venue;
sending the TPI to the available network service via the network interface;
accessing the available network service; and
receiving from the operator of the venue an advertisement or promotion for a good or service provided by the venue, wherein the advertising and promotion is directed to a user of the PIC device temporarily uniquely identified by the TPI, and wherein the TPI is dissociated from personally identifying information about the user.

2. The platform identity client device of claim 1 , wherein detecting the available service comprises identifying an online service.

3. The platform identity client device of claim 1 , wherein detecting the available service comprises identifying an available wireless network connection for a physical venue.

4. The platform identity client device of claim 1 , wherein detecting the available service comprises communicatively coupling to a public service provider.

5. The platform identity client device of claim 1 , wherein the PIC engine is further operable for providing non-personally-identifying demographic data in the TPI.

6. The platform identity client device of claim 1 , wherein the PIC engine is further operable for providing telemetry data to the available service.

7. The PIC device of claim 1 , wherein the PIC client is further to receive targeted content.

8. The platform identity client device of claim 1 , wherein the PIC engine is further operable for setting an expiry for the TPI.

9. The platform identity client device of claim 8 , wherein the PIC engine is further operable for destroying the TPI after the expiry.

10. The platform identity client device of claim 1 , wherein the PIC engine further comprises a trusted execution environment (TEE), and wherein the PIC engine is further operable for securely signing the TPI in the TEE.

11. The platform identity client device of claim 10 , wherein generating the TPI comprises mixing a random or pseudorandom seed with a basename and an expiry.

12. The platform identity client device of claim 10 , wherein the TEE comprises a secure memory area or secure hardware.

13. One or more tangible, non-transitory computer-readable mediums having stored thereon instructions for instructing a processor for providing a platform identity client (PIC) engine operable for:
detecting via the network interface an available network service provided by an operator of a venue;
generating a temporary pseudonymous identity (TPI), comprising direct anonymous attestation to the network service provided by the operator of the venue;
sending the TPI to the available network service via the network interface;
accessing the available network service; and
receiving from the operator of the venue an advertisement or promotion for a good or service provided by the venue, wherein the advertising and promotion is directed to a user of the PIC device temporarily uniquely identified by the TPI, and wherein the TPI is dissociated from personally identifying information about the user.

14. The one or more computer-readable mediums of claim 13 , wherein the PIC engine is further operable for setting an expiry for the TPI.

15. The one or more computer-readable mediums of claim 13 , wherein detecting the available service comprises identifying an online service.

16. The one or more computer-readable mediums of claim 13 , wherein detecting the available service comprises identifying an available wireless network connection for a physical venue.

17. The one or more computer-readable mediums of claim 13 , wherein the PIC engine is further operable for providing non-personally-identifying demographic data in the TPI.

18. The one or more computer-readable mediums of claim 13 , wherein the PIC engine is further operable for providing telemetry data to the available service.

19. The one or more computer-readable mediums of claim 13 , wherein the PIC engine is further to receive targeted content.

20. The one or more computer-readable mediums of claim 13 , wherein the PIC engine further comprises a trusted execution environment (TEE), and wherein the PIC engine is further operable for securely signing the TPI in the TEE.

21. The one or more computer-readable mediums of claim 20 , wherein generating the TPI comprises mixing a random or pseudorandom seed with a basename and an expiry.

22. A platform identity server comprising:
a network interface; and
one or more logic elements comprising a platform identity server engine operable for:
receiving a connection request from a platform identity client (PIC) over the network interface;
negotiating a service policy with the PIC;
receiving a temporary pseudonymous identity (TPI) from the PIC, the TPI temporarily uniquely identifying a user of the PIC while being dissociated from personally identifying information about the user;
requesting telemetry data from the PIC;
receiving telemetry data from the PIC, the telemetry data identifying attributes of the user; and
based on the telemetry data, providing to the PIC a targeted advertisement or promotion for a good or service provided by an operator of the platform identity server.

23. The platform identity server of claim 22 , wherein the PIC is further operable for:
providing the TPI to an attestation server; and
receiving an attestation verification from the attestation server.

Assignees

• Mcafee Inc

Inventors

• Nayshtur Alex
• Smith Ned
• Sharaga Avishay
• Pogorelik Oleg
• Bhargav-Spantzel Abhilasha
• Raziel Michael
• Priev Avi
• Shaliv Adi
• Muttik Igor

Classifications

• G06F21/6254 Primary

  by anonymising data, e.g. decorrelating personal data from the owner's identification · CPC title

• H04W4/206

  Electricity · mapped topic

• H04W4/021

  Services related to particular areas, e.g. point of interest [POI] services, venue services or geofences · CPC title

• H04W8/06

  Registration at serving network Location Register, VLR or user mobility server · CPC title

• G06Q30/0261 Primary

  based on user location · CPC title