Abstract: A software development kit for providing targeted messages from a remote device to a client device through an app installed on the client device operates without any personal information leaving the client device. One or more Bloom filters are created and are mapped to specific app bundle identifiers. Matched identifiers are resolved against the set of Bloom filters to targeted messages based on user identifiers. Because the processing is performed locally on the client device, no personal information leaves the client device. Real-time measurement is performed by firing conversion events to an integrated mobile network, providing analysis of the effectiveness of the targeted messaging without providing any personal information to any remote device.

Abstract: A system for secure delivery of data, algorithms, or intellectual property into an untrusted environment utilizes an embedded transcoder within the client computing environment. The embedded transcoder takes advantage of cloud computing functionality to isolate the embedded transcoder from the client application, with a proxy junction between the client application and embedded transcoder. Communication to a provider cloud environment is maintained through a generic authentication appliance system (GAAS) with a client-facing application programming interface (API), with the GAAS also communicating to the customer cloud environment components through the proxy junction. To provide the client application permission to access specific components within the provider application, the API authorizes the client application through tokens activated with public/private keys.

Abstract: A federated query engine system and method for multiple datasets is enhanced with privacy preserving features. It may, for example, limit the movement of data from one or more of the datasets being accessed. It may use cryptographic long-term keys, enabling fuzzy table joins that do not require a comparison of the plaintext column values. The query plan may leverage the particular infrastructure of the storage system that houses each of the datasets. The query engine receives a standard SQL query, translates the query into a logical plan for performing the query across the multiple datasets, converts the logical plan into physical plans that are specific to the implementational architecture of the multiple datasets, and sends these physical plans to SQL workers located near the data warehouses housing each dataset.

Abstract: A method for computationally scoring the trustworthiness of source data begins with a subset of the raw source data. Fields and related fields are identified, profiled, and results aggregated. In addition, the subset of raw source data is input to an entity resolution system, with results summarized and aggregated. The output of these two streams of processes are used to compute a scorecard. In addition, a sandbox of the entity resolution system's data graph is constructed, the sandbox is modified with the source data, and the difference between the baseline sandbox and modified sandbox is computed. Changes to entities are computed for all entities as well as for most sought-after entities, and the results are summarized and aggregated into the overall scorecard.

Abstract: A system for processing privacy permissions for consumers utilizing vendor applications allows for recording, storing, and retrieving consent transactions performed by the users (data subjects) in data schemas. The system uses a number of hash-generated IDs, such that when a request is received to retrieve subject data, an organization ID (associated with the vendor or application) and identifying value (associated with the subject) are hashed to create a subject ID. The subject ID, organization ID, and a schema ID for the schema associated with the subject are hashed to create a subject data ID, which is then used to retrieve consent transactions and permissions associated with the subject.

Abstract: A system for matching personal identifiers (PIDs) to Mobile Ad Identifiers (MAIDs) allows multiple PIDs to be associated with each MAID by constructing a data graph structure, with weights assigned to representing the likelihood of each of the persons associated with each of the PIDs to be using the device associated with a MAID at a given time. The graph is constructed by a machine learning model that ranks PIDs by which is most likely to be seen in the near future using the device to which the MAID is associated. These results are then converted into probabilities. MAIDs are represented as nodes in the graph, while probabilities are stored as edges.

Abstract: A data analytics platform provides secure access to federated data for advanced analytics and machine learning. No raw data is exposed or moved outside its original location, thereby providing data privacy. A coordinator located in the provider cloud communicates with runners in each client data silo. The runners ensure that no raw private data is ever exposed to the coordinator. Silo managers are implemented in the client data silo in order to manage and maintain the client cloud components of the platform remotely. In some embodiments, the platform can anonymize verified models for privacy and compliance, and users can export and deploy secure models outside the original data location.

Abstract: A system for serving targeted advertisements while protecting privacy receives an item of personally identifiable information (PII) from a person using a browser. The item of PII may be, for example, a telephone number or email address. The item of PII is hashed, then used to look up a node in an identity graph corresponding to the person. The node contains a link uniquely associated with the person, which is returned in an encrypted form. An envelope is created that contains the link, and is set as a first-party cookie on the person's browser. When the person uses the browser to visit another website the envelope is decrypted, and the link is separately encrypted using a different method for each of a plurality of DSPs to which the link is sent. The DSPs are used to set a display advertisement on the user's browser, the process occurring in real time.

Abstract: A method for improving fault tolerance of MapReduce computing systems processing extremely large data sets employs a custom mapper script that outputs the results to the shuffle and reduce processes. The Reducer writes its results into multiple files that are then compressed. The resulting files are processed by a map-only Reducer job that aggregates and reduces the results of a single file into a single output. The non-block compression prevents the file from being split across multiple mappers. The job can recover if a single mapper fails without requiring that each Map node be rerun, thus improving fault tolerance.

Abstract: Targeted messages are sent from a server to a client device through an app installed on the client device, but which operates without sending any personal data from the client device to any remote device. Bloom filters are created from data about the target audience and loaded in the app. User logins are resolved against the Bloom filter to targeted messages based on user identifiers. In this way, the processing to deliver a targeted message is performed on the client device, rather than on any remote device, and thus no personal information leaves the client device. Real-time view-through and click-through measurement is performed by firing conversion events to an integrated mobile network.

Abstract: A system and method for efficiently matching into an extremely large data set uses two data stores. A search data store contains identifiers that correspond to localized portions of the main data store, along with matching values for that portion of the main data store. To perform a matching operation, the search data store is first searched for a matching value. Then the identifier for the localized portion of the main data store is retrieved from the search data store. Using this identifier, a search may be performed against only the corresponding localized portion of the main data store rather than the entire main data store.

Abstract: A system provides for a client to receive enhancement data without having personally identifiable information leave its systems. The system receives access to a client configuration and a data graph to perform configuration defined filtering and aggregation steps to produce a set of client files. These files contain a hashed version of PII from the data graph. They are then used by the client to match the identity of its population of objects to keys, the keys also being included in the set of client files. The client associates corresponding keys with objects in its own data graph, then requests enhancement data using only the keys. The data is returned using the matched keys without the use of personally identifiable information.

Abstract: A machine analyzes an entity resolution data graph using a curated peer review set of data structures. The machine uses independent peer data structures that model similar or related yet different universes and entities. These data structures may include other entity resolution data graphs or file-based data structures. The machine first performs candidate screening to determine which of these data structures meet the requirements for use in the analysis. The machine then selects from among the candidate peer data structures with which to perform the analysis. Finally, the entity resolution data graph is analyzed using queries against the selected peer data structures to provide an analysis of the quality of its data graph.

Abstract: A computerized method for implementing a matching platform for entities includes a real-time processing layer using real-time linking on an input data stream, and a high-throughput layer linking entities from a batch data source stream. The real-time linking results are stored in a state change store and the high-throughput linking results are stored in a state store. On-demand linking uses the state change store and the state store. A lambda switch ensures that the entity states remain consistent when the on-demand linking switches from an older generation of the state store and the stage change store to a newer generation of the state store and the state change store. These stores are implemented in an entity database that parses queries into instructions and creates an instruction stream to control entity matching.

Abstract: A system and method for processing a multiple data controller workflow fully honors data subject opt-outs but nevertheless takes advantage of the synergy of the combined data from multiple controllers to improve the effectiveness of messaging. A data services provider performs data resolution processing against the data from each data controller. Using the results of the resolution processing, opt-out lists that are in different formats and that may track different sorts of data may all be used for the joint campaign. Metadata is added to the data so that the source data controller is tracked through the processing. The data is then combined, resulting in a master opt-out list. If a data subject has opted out with respect to any controller, then the opt-out is applied to the joint campaign.

Abstract: A cyber security system creates a behavioral framework for evaluating the cyber security of an organization's computer systems based on its employees. The system leverages offline and online individual identity information and then translates this data to anonymous identifiers to protect privacy. The identifiers are used to pull data from an identity graph, which includes behavioral data. A business-to-business identity graph correlates the name of an organization that maintains the targeted computer system with the anonymous identifiers of employees. Online activity is gathered by pixels fired from websites accessed by user browsers and gathered by one or more remote servers.

Abstract: An identity graph is partitioned into records pertaining to entities with similar data. A single authentication string or asserted relationship (AR) that represents a person identifies the person in the graph whose composite information is closest to the input by using all of the available context provided by the input string. By providing more contextual data to the match service than simply a name and single touchpoint, the service is able to match to a more focused and unique set of persons. In certain embodiments, the invention allows for the ability to take a small set of input data and more accurately identify its location in an identity graph much faster in time and lower in computational cost.

Abstract: A method for edge profiling within a data graph measures the impact that a particular type of edge has on a data graph. A list of all edges contained within a single connected component within the graph is generated in order to search for bridges across connected subcomponents. The process is implemented as two MapReduce jobs on separate compute clusters. The first job is the edge profile job, which is implemented as a Map-only job. The second job reads the output of the first, and builds multiple in-memory data structures representing each connected component within the data graph. After the graph is created, it is traversed to find bridges.

Abstract: An entity resolution data structure system compares two data graphs by creating a confusion matrix in a distributed processing environment. A benchmark file is created from one data graph for comparison to a reference data graph. Identifiers and metadata are appended to the benchmark file to allow the comparison to take place and the construction of a confusion matrix. The confusion matrix provides a high-level indication of the results of the comparison. When the data graphs contain personally identifiable information (Pll), the process does not require any Pll to be transmitted in either direction between the parties who maintain the data graphs to be compared.

Abstract: The invention is a system based on decentralized ledgers to enable compliance with privacy regulations. A consumer identifier (consumer ID) allows consent provenance to be saved in a shared decentralized ledger. The consent ID also empowers consumers to query as to how their data has been moved through the data supply chain. The consumer data itself is not stored in the blockchain, only consents and data transfer events. A consent API allows companies to enter the original consumer consent in a consent ledger; a data transfer API allows companies to record transfers from one to another; and a subscription API allows companies to be notified of changes to a given consent.