Controlling access to program usage data

Patent metadata

Field	Value
Publication number	US-9826271-B2
Application number	US-201614991574-A
Country	US
Kind code	B2
Filing date	Jan 8, 2016
Priority date	Jan 24, 2005
Publication date	Nov 21, 2017
Grant date	Nov 21, 2017

Abstract

A television program ratings method and system includes transferring information associated with households from a cable provider to a ratings provider such that the ratings provider has access to information associated with sampled households and lacks access to information associated with non-sampled households. To this end, identity information and usage information associated with the households are respectively anonymized and encrypted. Knowledge of the identities of the sampled households enables the anonymized identity information and the encrypted usage information for the sampled households to be respectively de-anonymized and decrypted. The ratings provider knows which households are sampled households. As such, the ratings provider de-anonymizes and decrypts the information associated with the sampled households and then uses the de-anonymized and decrypted information to determine television program ratings. The cable provider anonymizes and encrypts the information for all households as the cable provider does not know which households are sampled households.

First claim

What is claimed is:

1. A method implemented by one or more computing devices, comprising:
deriving a plurality of encryption keys, wherein each encryption key, of the plurality of encryption keys, is based on a respective household identifier of a plurality of household identifiers;
encrypting, for each household identifier and using a respective encryption key, of the plurality of encryption keys, a program usage dataset, of a plurality of program usage datasets, associated with the respective household identifier to produce a plurality of encrypted program usage datasets;
anonymizing the plurality of household identifiers to produce a plurality of anonymized household identifiers; and
sending, to a ratings provider, the plurality of anonymized household identifiers and the plurality of encrypted program usage datasets.

2. The method of claim 1 , wherein the anonymizing is based at least in part on a shared secret with the ratings provider.

3. The method of claim 2 , wherein the anonymizing is performed using a one-way hash function.

4. The method of claim 2 , wherein the deriving, each encryption key, of the plurality of encryption keys, is further based on:
the shared secret with the rating provider, and
an account number associated with the respective household identifier.

5. The method of claim 1 , wherein each encryption key comprises a symmetric encryption/decryption key.

6. The method of claim 1 , further comprising:
sending, to the ratings provider, a plurality of timing information, wherein each timing information, of the plurality of timing information, is associated with a different program usage dataset of plurality of program usage datasets.

7. The method of claim 1 , wherein each program usage dataset, of the plurality of program usage datasets, comprises video on demand usage information.

8. The method of claim 1 , wherein a household identifier, of the plurality of household identifiers, comprises a media access control address of a device at a first household.

9. The method of claim 1 , wherein the plurality of household identifiers is associated with a viewing area and comprises a set of household identifiers to be sampled by the ratings provider and a set of household identifiers that are not to be sampled by the ratings provider.

10. A method implemented by one or more computing devices, comprising:
receiving a first set of anonymized household identifiers and a plurality of encrypted program usage datasets, wherein each anonymized household identifier, of the first set of anonymized household identifiers, is associated with a different encrypted program usage dataset of the plurality of encrypted program usage datasets;
anonymizing a set of household identifiers to produce a second set of anonymized household identifiers;
determining, based on a first anonymized household identifier of the second set of anonymized household identifiers, a first household identifier, of the set of household identifiers, associated with a first anonymized household identifier of the first set of anonymized household identifiers; and
decrypting, using a decryption key that is based at least in part on the determined first household identifier, a first encrypted program usage dataset of the plurality of encrypted program usage datasets.

11. The method of claim 10 , wherein the anonymizing is performed using an anonymization function used to produce the first set of anonymized household identifiers.

12. The method of claim 10 , wherein the determining the first household identifier associated with the first anonymized household identifier of the first set of anonymized household identifiers is based on a matching of the first anonymized household identifier of the second set of anonymized household identifiers with the first anonymized household identifier of the first set of anonymized household identifiers.

13. The method of claim 10 , wherein the set of household identifiers correspond to a sample set of households for a ratings provider.

14. The method of claim 10 , further comprising:
generating the decryption key based on:
the determined first household identifier,
an account number associated with the determined first household identifier, and
a shared secret with an entity that transmitted the first set of anonymized household identifiers.

15. The method of claim 10 , wherein the determined first household identifier is a media access control address of a device at a first household.

16. The method of claim 10 , further comprising:
receiving a plurality of timing information associated with the first set of anonymized household identifiers; and
filtering, based on a sample time window and the plurality of timing information, the first set of anonymized household identifiers.

17. A method implemented by one or more computing devices, comprising:
deriving, for each household identifier of a plurality of household identifiers, an encryption key to produce a plurality of encryption keys, wherein each encryption key is based on an account number associated with a respective household identifier, of the plurality of household identifiers, and a shared secret with a ratings provider;
encrypting, for each household identifier and using a respective encryption key, of the plurality of encryption keys, a program usage dataset, of a plurality of program usage datasets, associated with the respective household identifier to produce a plurality of encrypted program usage datasets;
anonymizing, based at least in part on the shared secret, the plurality of household identifiers to produce a plurality of anonymized household identifiers; and
sending, to the ratings provider, the plurality of anonymized household identifiers and the plurality of encrypted program data usage sets.

18. The method of claim 17 , wherein each encryption key is further based on the respective household identifier of the plurality of household identifiers.

19. The method of claim 17 , wherein a household identifier, of the plurality of household identifiers, comprises a media access control address of a device at a first household.

20. The method of claim 17 , wherein each program usage dataset, of the plurality of program usage datasets, comprises video on demand usage information.

Assignees

• Comcast Cable Comm Llc

Inventors

• Chen Michael A

Classifications

• H04H60/64

  for providing detail information · CPC title

• H04N7/17318

  Direct or substantially direct transmission and handling of requests · CPC title

• H04N21/44213

  Monitoring of end-user related data (arrangements for monitoring the users' behaviour or opinions in broadcast systems H04H60/33) · CPC title

• H04N21/44222 Primary

  Analytics of user selections, e.g. selection of programmes or purchase activity (monitoring of user selections in data processing systems G06F11/34; arrangements for monitoring the user's behaviour or opinions in broadcast systems H04H60/33) · CPC title

• H04N21/252

  Processing of multiple end-users' preferences to derive collaborative data · CPC title