WO2018215690A1 - Method and apparatus for privacy protection in a presentation device - Google Patents

Method and apparatus for privacy protection in a presentation device Download PDF

Info

Publication number
WO2018215690A1
WO2018215690A1 PCT/FI2017/050395 FI2017050395W WO2018215690A1 WO 2018215690 A1 WO2018215690 A1 WO 2018215690A1 FI 2017050395 W FI2017050395 W FI 2017050395W WO 2018215690 A1 WO2018215690 A1 WO 2018215690A1
Authority
WO
WIPO (PCT)
Prior art keywords
presentation
content
personalized content
personalized
presentation device
Prior art date
Application number
PCT/FI2017/050395
Other languages
French (fr)
Inventor
Yan Fu
Original Assignee
Nokia Technologies Oy
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Nokia Technologies Oy filed Critical Nokia Technologies Oy
Priority to PCT/FI2017/050395 priority Critical patent/WO2018215690A1/en
Publication of WO2018215690A1 publication Critical patent/WO2018215690A1/en

Links

Classifications

    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/60Protecting data
    • G06F21/62Protecting access to data via a platform, e.g. using keys or access control rules
    • G06F21/6218Protecting access to data via a platform, e.g. using keys or access control rules to a system of files or objects, e.g. local or distributed file system or database
    • G06F21/6245Protecting personal data, e.g. for financial or medical purposes
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04NPICTORIAL COMMUNICATION, e.g. TELEVISION
    • H04N21/00Selective content distribution, e.g. interactive television or video on demand [VOD]
    • H04N21/20Servers specifically adapted for the distribution of content, e.g. VOD servers; Operations thereof
    • H04N21/25Management operations performed by the server for facilitating the content distribution or administrating data related to end-users or client devices, e.g. end-user or client device authentication, learning user preferences for recommending movies
    • H04N21/258Client or end-user data management, e.g. managing client capabilities, user preferences or demographics, processing of multiple end-users preferences to derive collaborative data
    • H04N21/25866Management of end-user data
    • H04N21/25891Management of end-user data being end-user preferences
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04NPICTORIAL COMMUNICATION, e.g. TELEVISION
    • H04N21/00Selective content distribution, e.g. interactive television or video on demand [VOD]
    • H04N21/40Client devices specifically adapted for the reception of or interaction with content, e.g. set-top-box [STB]; Operations thereof
    • H04N21/43Processing of content or additional data, e.g. demultiplexing additional data from a digital video stream; Elementary client operations, e.g. monitoring of home network or synchronising decoder's clock; Client middleware
    • H04N21/431Generation of visual interfaces for content selection or interaction; Content or additional data rendering
    • H04N21/4318Generation of visual interfaces for content selection or interaction; Content or additional data rendering by altering the content in the rendering process, e.g. blanking, blurring or masking an image region
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04NPICTORIAL COMMUNICATION, e.g. TELEVISION
    • H04N21/00Selective content distribution, e.g. interactive television or video on demand [VOD]
    • H04N21/40Client devices specifically adapted for the reception of or interaction with content, e.g. set-top-box [STB]; Operations thereof
    • H04N21/43Processing of content or additional data, e.g. demultiplexing additional data from a digital video stream; Elementary client operations, e.g. monitoring of home network or synchronising decoder's clock; Client middleware
    • H04N21/442Monitoring of processes or resources, e.g. detecting the failure of a recording device, monitoring the downstream bandwidth, the number of times a movie has been viewed, the storage space available from the internal hard disk
    • H04N21/44213Monitoring of end-user related data
    • H04N21/44218Detecting physical presence or behaviour of the user, e.g. using sensors to detect if the user is leaving the room or changes his face expression during a TV program
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04NPICTORIAL COMMUNICATION, e.g. TELEVISION
    • H04N21/00Selective content distribution, e.g. interactive television or video on demand [VOD]
    • H04N21/40Client devices specifically adapted for the reception of or interaction with content, e.g. set-top-box [STB]; Operations thereof
    • H04N21/43Processing of content or additional data, e.g. demultiplexing additional data from a digital video stream; Elementary client operations, e.g. monitoring of home network or synchronising decoder's clock; Client middleware
    • H04N21/442Monitoring of processes or resources, e.g. detecting the failure of a recording device, monitoring the downstream bandwidth, the number of times a movie has been viewed, the storage space available from the internal hard disk
    • H04N21/4424Monitoring of the internal components or processes of the client device, e.g. CPU or memory load, processing speed, timer, counter or percentage of the hard disk space used
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04NPICTORIAL COMMUNICATION, e.g. TELEVISION
    • H04N21/00Selective content distribution, e.g. interactive television or video on demand [VOD]
    • H04N21/40Client devices specifically adapted for the reception of or interaction with content, e.g. set-top-box [STB]; Operations thereof
    • H04N21/45Management operations performed by the client for facilitating the reception of or the interaction with the content or administrating data related to the end-user or to the client device itself, e.g. learning user preferences for recommending movies, resolving scheduling conflicts
    • H04N21/454Content or additional data filtering, e.g. blocking advertisements
    • H04N21/4542Blocking scenes or portions of the received content, e.g. censoring scenes
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04NPICTORIAL COMMUNICATION, e.g. TELEVISION
    • H04N21/00Selective content distribution, e.g. interactive television or video on demand [VOD]
    • H04N21/80Generation or processing of content or additional data by content creator independently of the distribution process; Content per se
    • H04N21/81Monomedia components thereof
    • H04N21/812Monomedia components thereof involving advertisement data

Definitions

  • Service providers and device manufacturers are continually challenged to deliver value and convenience to consumers by, for example, providing compelling network services and content. For example, one traditional approach to making services and/or related content more compelling is to personalize such services and content for a particular user (e.g., targeted advertisements, content recommendations, etc.).
  • personalized content can also potentially cause privacy concerns for a user, particularly when the personalized content is presented on a computer or other device that is being viewed or can be viewed by multiple people (e.g., when the computer or device, e.g., a presentation device, is publicly presenting information).
  • service providers and device manufacturers face significant technical challenges to protection of a user's personalized content when using a presentation device where the personalized content can be inadvertently exposed to others.
  • a method comprises determining that a presentation device is operating in a presentation mode.
  • the method also comprises receiving personalized content from a content server for presentation at the presentation device.
  • the personalized content is generated based on user data previously collected about a user.
  • the method further comprises modifying the personalized content while the presentation device is operating in the presentation mode.
  • the modifying comprises blocking, omitting, or substituting the personalized content for display at the presentation device while in the presentation mode.
  • an apparatus comprising at least one processor, and at least one memory including computer program code, the at least one memory and the computer program code configured to, with the at least one processor, cause, at least in part, the apparatus to determine that a presentation device is operating in a presentation mode.
  • the apparatus is also caused to receive personalized content from a content server for presentation at the presentation device.
  • the personalized content is generated based on user data previously collected about a user.
  • the apparatus is further caused to modify the personalized content while the presentation device is operating in the presentation mode.
  • the modifying comprises blocking, omitting, or substituting the personalized content for display at the presentation device while in the presentation mode.
  • a computer-readable storage medium carrying one or more sequences of one or more instructions which, when executed by one or more processors, cause, at least in part, an apparatus to determine that a presentation device is operating in a presentation mode.
  • the apparatus is also caused to receive personalized content from a content server for presentation at the presentation device.
  • the personalized content is generated based on user data previously collected about a user.
  • the apparatus is further caused to modify the personalized content while the presentation device is operating in the presentation mode.
  • the modifying comprises blocking, omitting, or substituting the personalized content for display at the presentation device while in the presentation mode.
  • an apparatus comprises means for determining that a presentation device is operating in a presentation mode.
  • the apparatus also comprises means for receiving personalized content from a content server for presentation at the presentation device.
  • the personalized content is generated based on user data previously collected about a user.
  • the apparatus further comprises means for modifying the personalized content while the presentation device is operating in the presentation mode.
  • the modifying comprises blocking, omitting, or substituting the personalized content for display at the presentation device while in the presentation mode.
  • a method comprising facilitating a processing of and/or processing (1) data and/or (2) information and/or (3) at least one signal, the (1) data and/or (2) information and/or (3) at least one signal based, at least in part, on (including derived at least in part from) any one or any combination of methods (or processes) disclosed in this application as relevant to any embodiment of the invention.
  • a method comprising facilitating access to at least one interface configured to allow access to at least one service, the at least one service configured to perform any one or any combination of network or service provider methods (or processes) disclosed in this application.
  • a method comprising facilitating creating and/or facilitating modifying (1) at least one device user interface element and/or (2) at least one device user interface functionality, the (1) at least one device user interface element and/or (2) at least one device user interface functionality based, at least in part, on data and/or information resulting from one or any combination of methods or processes disclosed in this application as relevant to any embodiment of the invention, and/or at least one signal resulting from one or any combination of methods (or processes) disclosed in this application as relevant to any embodiment of the invention.
  • a method comprising creating and/or modifying (1) at least one device user interface element and/or (2) at least one device user interface functionality, the (1) at least one device user interface element and/or (2) at least one device user interface functionality based at least in part on data and/or information resulting from one or any combination of methods (or processes) disclosed in this application as relevant to any embodiment of the invention, and/or at least one signal resulting from one or any combination of methods (or processes) disclosed in this application as relevant to any embodiment of the invention.
  • the methods can be accomplished on the service provider side or on the mobile device side or in any shared way between service provider and mobile device with actions being performed on both sides.
  • FIG. 1 is a diagram of a system capable of provider privacy protection in a presentation device, according to one embodiment
  • FIG. 2 is a diagram of an example of a presentation device operating in a presentation mode, according to one embodiment
  • FIGs. 3A and 3B are diagrams of additional examples of detecting that a presentation device is operating in a presentation mode, according to one embodiment
  • FIG. 4 is a diagram of illustrating an example of modifying personalized content presented by a presentation device that is operating in a presentation mode, according to one embodiment
  • FIG. 5 is a diagram of the components of a content privacy platform, according to one embodiment
  • FIG. 6 is a flowchart of a process for providing privacy protection in a presentation device, according to one embodiment
  • FIG. 7 is a ladder diagram that illustrates a sequence of messages and processes used in providing privacy protection in a presentation device when the personalized content is targeted advertising content, according to one embodiment;
  • FIGs. 8A and 8B are diagrams of example user interfaces in which personalized content presented displayed on a presentation device is replaced with non-personalized content, according to one embodiment;
  • FIG. 9 is a diagram of hardware that can be used to implement an embodiment of the invention.
  • FIG. 10 is a diagram of a chip set that can be used to implement an embodiment of the invention.
  • FIG. 11 is a diagram of a mobile terminal (e.g., handset) that can be used to implement an embodiment of the invention.
  • a mobile terminal e.g., handset
  • FIG. 1 is a diagram of a system 100 capable of provider privacy protection in a presentation device, according to one embodiment.
  • service providers and device manufacturers are increasingly using personalized content to provide better service and/or increase user engagement with their respective services, content, and/or devices.
  • personalized content can be any content generated that considers or uses previously collected user data (e.g., profile information, interaction history, context, etc.).
  • user data e.g., profile information, interaction history, context, etc.
  • personalized content is derived from or shaped by user data
  • other people or users who also see the personalized content may guess or infer the underlying user data, thereby creating potential privacy concerns when such data is exposed to other users.
  • the chance of exposure of this information can be greater when a device is used for a presentation to a public audience.
  • a presentation device is used to make a presentation to a public audience, there is a potential for the device to also display or otherwise present a user's personalized content during the presentation that might expose a user's private data.
  • An example of personalized content includes, but is not limited to, targeted advertisements. For example, many of today's advertisements are targeted for individual users.
  • a user may visit some car related website. This information (e.g., the user's accessing of the website via a browser or clicking one or more link on the website) was captured by an advertising network. Later, the user goes to a meeting to make a presentation using the user's computer, or e.g. with a presentation device such as a borrowed computer and identifies himself or herself for example by logging into a user account using the presentation device. The computer is thereby placed into a presentation mode (e.g., a mode in which the computer's display is viewable by multiple other users).
  • a presentation mode e.g., a mode in which the computer's display is viewable by multiple other users.
  • FIG. 2 is a diagram of an example of a presentation device operating in a presentation mode, according to one embodiment.
  • a presentation device 201 e.g., the user's computer in the above scenario
  • a projector device 203 that projects a presentation display 205 that mirrors the display of the presentation device 201.
  • the user's presentation the user uses an application (e.g., a browser application) executing on the presentation device 201 to show a webpage 207 to his audience on the presentation display 205.
  • an advertising network displays car related advertisements 209.
  • These advertisements 209 carries user privacy information (e.g., the user's interest in cars as indicated by his previously recorded browsing history). By displaying this personalized content or targeted advertising during the presentation, this information is shared to all the people in the meeting, thereby creating a potential privacy leak or concern for the user.
  • a system 100 introduces a content privacy platform 101 with the capability to detect when a presentation device 103 is in a presentation mode, and then automatically modify any personalized content that is to be presented by the presentation device 103 while the presentation device 103 is in presentation mode so that exposure of the personalized content is avoided or otherwise minimized.
  • a user would not have to take any manual steps (e.g., using a clean computer, pre-clearing browser history, etc.) to ensure that personalized content is not exposure during a public presentation.
  • These manuals steps often can be burdensome and easily forgotten.
  • clearing browsing histories or other previously collected user data may then result in loss of valuable content personalizations that the user wants to maintain, except during a public presentation.
  • the presentation device 103 has connectivity to content privacy platform 101 over a communication network 105.
  • the system 100 is an instance of dynamic content delivery service that generates personalized content and/or related information (e.g., advertisements or other information inserts) for both online and offline content consumption by the presentation device 103.
  • the content privacy platform 101 then performs one or more of the functions associated with providing privacy protection in the presentation device 103 according to the various embodiments described herein (e.g., by protecting any delivered personalized content from exposure while the presentation device 103 is being used to make a presentation, i.e., operating in a presentation mode).
  • the system 100 provides connectivity from the presentation device 103 and the content privacy platform 101 to a content service provider 107 comprising multiple content servers 109a-109n (also collectively referred to as content servers 109) to seamlessly provide access to the content (e.g., including both personalized and non-personalized content) available from the content service provider 107.
  • the content service provider 107 can provide any type of content to the presentation device 103 including, but not limited to, web pages, web application, media content (e.g., video, audio, e-books, etc.), and/or any other content that can be presented (e.g., displayed in the case of images or videos, played back in the case of audio, etc.) at the presentation device 103.
  • the content service provider 107 has access to a user data database 11 1 that can be used to personalize content for a particular user of the presentation device 103.
  • the user data 1 11 can be any previously collected data about a user (e.g., web browsing history, interaction history, historical contextual information, etc.) that the content service provider 107 can use to generate personalized content for the specific user.
  • the user data 11 1 can be collected from the presentation device 103 and/or any other devices or services associated with the user.
  • user data 1 1 1 collected from one user device e.g., a user's laptop computer
  • can be used to personalize content for delivery to another user device e.g., the user's mobile phone.
  • the content privacy platform 101 enables the content service provider 107 to manage what personalized or non-personalized content is delivered to the presentation device 103 for presentation at the presentation device 103 while the presentation device 103 is being used to make a presentation.
  • the content service provider 107 manages the delivery (e.g., via streaming, downloading, etc.) of content directly to a client application 1 13 or Internet browser application 1 15 executing on the presentation device 103.
  • the content service provider 107 may manage the delivery of content on its own (e.g., via the content servers 109), or it can manage the content delivery via third party content delivery networks (CDNs) (e.g., Akamai or Limelight).
  • CDNs third party content delivery networks
  • the client application 1 13 and/or browser 1 15 include computer code for generating a user interface to access content (e.g., personalized and non-personalized content) from the service provider 107 via the content servers 109, as well as code for protecting privacy when the presentation device 103 is in a presentation mode according to the various embodiments described herein (e.g., code for detecting a presentation mode, modifying personalized content, etc.).
  • content e.g., personalized and non-personalized content
  • code for protecting privacy when the presentation device 103 is in a presentation mode e.g., code for detecting a presentation mode, modifying personalized content, etc.
  • the system 100 can insert or include personalized content into other non-personalized content received from the content service provider 107 for presentation on either the client application 1 13 or the browser 1 15.
  • the personalized content can be targeted advertising, personalized content recommendations, etc.
  • the client application 1 13 and/or the browser 1 15 can support the ability to present this other content and then insert any associated personalized content for presentation.
  • the service provider 107 may specify that information (e.g., targeted or non-targeted advertisements or other content inserts) from an advertising network 1 17 comprising one or more advertising servers 1 19a-l 19m (also collectively referred to as advertising servers 1 19) be presented in and/or with the content.
  • the advertising network 1 17 and/or advertising servers 1 19 can also have access to the user data 1 1 1 to generate and deliver personalized content (e.g., targeted advertising) or non-personalized content (e.g., generic or non-targeted advertising) that can be inserted into the content provided by the content service provider 107 and/or content servers 109 indicated in the content.
  • personalized content e.g., targeted advertising
  • non-personalized content e.g., generic or non-targeted advertising
  • the content into which the personalized content is inserted can be native content generated by the client application 1 13 and/or browser 1 15 itself, so that the content need not be provided by a network component (e.g., the content service provider 107 and/or content servers 109).
  • the advertising network 1 17 and/or the advertising servers 1 19 can expose relevant interfaces (e.g., application programming interfaces (APIs)) to client applications 1 13, browser 1 15, the content service provider 107, and/or the content servers 109 to target users for presentation of one or more content inserts (e.g., personalized or non-personalized advertisements).
  • client applications 1 13 that support personalized content include, but are not limited, advertisement-financed applications such as file managers, clocks, text editors, games, and/or any other application with dedicated space on their user interfaces to show personalized content inserts (e.g., targeted advertisements).
  • the presentation device 103 and/or any other device or service (e.g., content service provider 107) associated with the user can include a user data and context collection engine for collecting user data for storage in the user data database 1 1 1.
  • the user data and collection engine can determine any user data that can be used to generate personalized content.
  • the collection engine can determine and store historical user or context data including, but not limited to, local time, geographic position from a positioning system, ambient temperature, pressures, sound and light, applications currently executing on the presentation device 103, connected devices, history of application usage, content currently being rendered on the presentation device 103, user input through a user interface (UI), and/or other user interactions determined at the presentation device 103 and/or other device associated with a specific user.
  • the collected user or context data can then be used to determine the personalized content and/or personalized information inserts (e.g., advertisements) to present at the presentation device 103.
  • the system 100 enables both an online and an offline mode of operation for preventing exposure of potentially private information.
  • the system 100 supports both online and offline determining, retrieving, and/or generating of personalized and/or non-personalized content for use by the presentation device 103.
  • the content privacy platform 101 can operate in both an online or offline mode to protect the privacy of user data.
  • the content privacy platform 101 can be a local component of the presentation device 103, the client application 1 13, and/or the browser 1 15.
  • the content servers 109 and/or advertising servers 119 can also be local components of the presentation device 103, the client application 113, and/or the browser 115 to support full functionality when operating in an offline or standalone mode.
  • the client application 113 and/or browser 115 can cache or pre- download content (e.g., personalized or non-personalized) from the content servers 109 and/or advertising servers 1 19.
  • the content privacy platform 101 can then process, retrieve, and selectively presented the cached content in response detecting a presentation mode of the presentation device 103.
  • the system 100 can determine whether the presentation device is in a presentation mode (e.g., a mode in which the presentation device 103 has made its display viewable to a public audience) using any number of means.
  • a presentation mode e.g., a mode in which the presentation device 103 has made its display viewable to a public audience
  • the presentation device 201 can use hardware to detect that a physical connection (e.g., a cable 21 1) has been made between the presentation device 103 and external display hardware (e.g., the projector 203, monitor, television, or other similar display).
  • FIGs. 3A and 3B are diagrams of additional examples of detecting that a presentation device 103 is operating in a presentation mode, according to one embodiment.
  • the presentation device 103 can detect that the device 103 has joined an online conference, for instance, by receiving a notification from conferencing software executing on the presentation device 103 that an online conference is active and/or that the conferencing software is currently sharing the user's screen on the presentation device 103 with other conference participants. If an online conference or screen sharing during the online conference is detected, the system 100 can determine that the presentation device 103 is in presentation mode. An optional message 301 can be displayed that to indicate that the presentation device 103 has been detected to join a conference (e.g., with screen sharing) and that a presentation mode has been activated or detected.
  • the presentation device 103 can use imaging and/or other proximity sensing technologies (e.g., an imaging/proximity sensor 321) to detect that multiple people 323 are within proximity of the presentation device 103 (e.g., within a threshold distance).
  • imaging/proximity sensor 321 include, but are not limited to, camera sensors, microphone sensors, near-field radio sensors, infrared sensors, smell sensors, and/or the like.
  • the system 100 can determine that the presentation device 103 is in presentation mode.
  • An optional message 325 can be displayed to indicate that a presentation audience has been detected in proximity of the presentation device 103 and that a presentation mode has been activated or detected. Any such message 325 or notification may provide for user input (not shown) to verify whether or not the presentation mode determination is correct.
  • the examples of detecting a presentation mode described with respect to FIGs. 2 and FIGs. 3A and 3B are provided by way of illustration and not as limitations. Accordingly, it is contemplated that the system 100 can use any equivalent means known in the art to detect that the presentation device 103 has made its display or any connected displays viewable by a public audience (e.g., other users). In one embodiment, it is contemplated that the presentation mode need not relate to visual data presented via a display. Instead, content (e.g., personalized or non-personalized) can also be audio content (e.g., audio files or audio portions of multimedia files) that can be broadcast by the presentation device 103 via an internal or external audio system.
  • content e.g., personalized or non-personalized
  • audio content e.g., audio files or audio portions of multimedia files
  • content can be any other type of signal that can be transmitted by the presentation device 103.
  • content can be potentially transmitted in the form of short-range or long-range wireless signal (e.g., Bluetooth, WiFi, near field communications, etc.).
  • the content carried by these signals can then also be protected according to various embodiments described herein when the presentation device 103 is in presentation mode.
  • presentation of content by the presentation device 103 can occur through any media during a presentation as long as that content is potentially exposed to a public audience.
  • the system 100 can nonetheless apply the approach to protecting the privacy of personalized content according to the various embodiments described herein.
  • FIG. 4 is a diagram of illustrating an example of modifying personalized content presented by a presentation device that is operating in a presentation mode, according to one embodiment.
  • a presentation device 103 is engaged in an online conference and has activated screen sharing so that its display 401 is viewable by other participants of the conference.
  • a browser application 115 is used to access a web page that is presented in a browser user interface (UI) 403 on the display 401.
  • UI browser user interface
  • the web page includes code for retrieving and placing personalized advertisement targeted to the user (i.e., personalized content) in the browser UI 403 from, for instance, the advertising network 1 17.
  • personalized advertisement targeted to the user
  • the content privacy platform 101 and/or the browser application 1 15 can detect that presentation device 103 is in a presentation mode. Based on this detection, the content privacy platform 101 can then modify the personalized content so that it is not exposed. In this case, the personalized content 405 is blocked from being displayed as shown in the browser UI 407.
  • the browser UI 407 then represents the output of the browser application 115 that is visible to the conference participants (e.g., the public audience) while the presentation device is in presentation mode).
  • the browser application 115 and/or the content privacy platform 101 can use any means to block the personalized advertisement (e.g., activating ad-blocking software, using native ad-blocking code, etc.).
  • the example of FIG. 4 is provided to illustrate just one example of how personalized content can be modified to protect user privacy during a presentation.
  • the system 100 can use other modifying approaches including, but not limited to, masking content, retrieving other non-personalized content to present in place of the personalized content, etc.
  • the system 100 can request another more generic or non-personalized advertisement from the advertising network 117 to present in place of the personalized or targeted ad.
  • the non- personalized content is generated without using user data 11 1 that is specific to a particular user.
  • the non-personalized content or advertisement can be generated based on data about the public audience of the presentation as a whole, so that any personalization of the content is not readily traceable to any one individual within the audience, thereby still protecting privacy on an individual user level.
  • the browser application 115 is discussed. However, in the various embodiments described herein, the privacy protection functions of the browser application 115 are also applicable to any client application 113 executing on the presentation device 103. It is further contemplated that the client application 113 need not be a standalone application, but can also be any component of another application or of an operating system of the presentation device 103. By way of example, the client application 113 includes one or more components for receiving and/or presenting personalized and non-personalized content (e.g., advertisements, content recommendations, or other application content) to a user.
  • personalized and non-personalized content e.g., advertisements, content recommendations, or other application content
  • the client application 113 and/or browser 115 include a content placement framework and related information data structures.
  • the content placement framework receives content and/or content inserts (e.g., personalized content, targeted advertisements, etc.) from, for instance, the content servers 109 and/or advertising servers 1 19.
  • content inserts e.g., advertisements
  • content inserts are content data that can be inserted into other content (e.g., web page content) to present to a user.
  • content inserts are usually discrete and/or interchangeable content items that have a defined placement within a content layout (e.g., a web page).
  • the content inserts can be stored in or cached in the information data structures of the client application 113 and/or browser 115 for use in either online or offline mode, and for processing by the content privacy platform 101.
  • the content placement framework serves as the entry and exit points for receiving content (e.g., personalized or non-personalized) and then placing that content in relevant portions of a user interface for presentation to a user.
  • the content placement framework also includes logic for performing one or more functions of the content privacy platform 101 (e.g., detecting a presentation mode, receiving personalized content, modifying the personalized content for display during the presentation mode, etc.).
  • the content placement framework can also relay user data 11 1 (e.g., context, profile information, etc.) to the content service provider 107 and/or the advertising network 117 to generate personalized content.
  • user data 11 1 e.g., context, profile information, etc.
  • the content provided by the content service provider 107 and/or the advertising network 117 can be enriched with personalized or other custom information.
  • this personalized content is more specifically targeted and/or tailored to individual characteristics and/or preferences of a user, exposing such personalized content during a presentation may also compromise the user's privacy.
  • the content placement framework has connectivity to components external to the client application 1 13 and/or browser 115 via one or more application interfaces.
  • the application interface facilitates communications between the client application 113 and/or browser 115 and other components of the system 100 within the presentation device 103 and/or external to the presentation device 103.
  • the application interface exposes its interface via standard application programming interfaces (APIs) to detect a presentation mode, receive personalized content, modify personalized content, or a combination thereof.
  • APIs application programming interfaces
  • the client application 1 13 and/or browser 115 includes a user interaction tracker for collecting user data 11 1 including, but not limited to: (1) historical user interactions and/or responses with the content servers 109, advertising servers 1 19, etc.; (2) historical context information (e.g., location, time, activity, etc.) when accessing content; (3) user profile information (e.g., preferences, demographics, etc.); etc.
  • the user interaction may include determining click through rates, conversion rates, etc. to facilitate determination of user response to specific content items (e.g., advertisements, media items, and/or other application content).
  • the user interaction tracker may perform more sophisticated monitoring of user interactions such as tracking application use, state changes (e.g., activation/deactivation of a presentation mode) associated with the presentation device 103, the applications or processes executing at the presentation device 103, or a combination thereof.
  • the user interaction tracker can also monitor context changes, profile information, etc. associated with the presentation device 103 or a user associated with the presentation device 103 to, for instance, facilitate detection of a presentation and/or the customization and/or personalization of content that is to be presented at the presentation device 103.
  • the information collected by the user interaction tracker is stored in the interaction/profile/context data structure of the user data database 1 1 1.
  • the user interaction tracker can operate via an interaction interface to retrieve interaction information from one or more applications or processes executing on the presentation device 103.
  • the interaction interface can also provide and track connectivity information with respect to presentation displays (e.g., both internal and external presentation displays), online conferences, device sensor data (e.g., imaging/proximity sensor data), and/or other data of the presentation device 103 that can be used to determine when the presentation device is in presentation mode.
  • the communication network 105 of system 100 includes one or more networks such as a data network, a wireless network, a telephony network, or any combination thereof.
  • the data network may be any local area network (LAN), metropolitan area network (MAN), wide area network (WAN), a public data network (e.g., the Internet), short range wireless network, or any other suitable packet- switched network, such as a commercially owned, proprietary packet-switched network, e.g., a proprietary cable or fiber-optic network, and the like, or any combination thereof.
  • the wireless network may be, for example, a cellular network and may employ various technologies including enhanced data rates for global evolution (EDGE), general packet radio service (GPRS), global system for mobile communications (GSM), Internet protocol multimedia subsystem (IMS), universal mobile telecommunications system (UMTS), etc., as well as any other suitable wireless medium, e.g., worldwide interoperability for microwave access (WiMAX), Long Term Evolution (LTE) networks, code division multiple access (CDMA), wideband code division multiple access (WCDMA), wireless fidelity (WiFi), wireless LAN (WLAN), Bluetooth®, Internet Protocol (IP) data casting, satellite, mobile ad-hoc network (MANET), and the like, or any combination thereof.
  • EDGE enhanced data rates for global evolution
  • GPRS general packet radio service
  • GSM global system for mobile communications
  • IMS Internet protocol multimedia subsystem
  • UMTS universal mobile telecommunications system
  • WiMAX worldwide interoperability for microwave access
  • LTE Long Term Evolution
  • CDMA code division multiple
  • the presentation device 103 is any type of mobile terminal, fixed terminal, or portable terminal including a mobile handset, station, unit, device, multimedia computer, multimedia tablet, internet node, communicator, desktop computer, laptop computer, notebook computer, netbook computer, tablet computer, personal communication system (PCS) device, personal navigation device, personal digital assistants (PDAs), audio/video player, digital camera/camcorder, positioning device, television receiver, radio broadcast receiver, electronic book device, game device, or any combination thereof, including the accessories and peripherals of these devices, or any combination thereof. It is also contemplated that the presentation device 103 can support any type of interface to the user (such as "wearable" circuitry, etc.).
  • the content privacy platform 101 , the presentation device 103, the content service provider 107, the content servers 109, the advertising network 1 17, and the advertising servers communicate with each other and other components of the system 100 using well known, new or still developing protocols.
  • a protocol includes a set of rules defining how the network nodes within the communication network 105 interact with each other based on information sent over the communication links.
  • the protocols are effective at different layers of operation within each node, from generating and receiving physical signals of various types, to selecting a link for transferring those signals, to the format of information indicated by those signals, to identifying which software application executing on a computer system sends or receives the information.
  • Each packet typically comprises (1) header information associated with a particular protocol, and (2) payload information that follows the header information and contains information that may be processed independently of that particular protocol.
  • the packet includes (3) trailer information following the payload and indicating the end of the payload information.
  • the header includes information such as the source of the packet, its destination, the length of the payload, and other properties used by the protocol.
  • the data in the payload for the particular protocol includes a header and payload for a different protocol associated with a different, higher layer of the OSI Reference Model.
  • the header for a particular protocol typically indicates a type for the next protocol contained in its payload.
  • the higher layer protocol is said to be encapsulated in the lower layer protocol.
  • the headers included in a packet traversing multiple heterogeneous networks, such as the Internet typically include a physical (layer 1) header, a data- link (layer 2) header, an internetwork (layer 3) header and a transport (layer 4) header, and various application headers (layer 5, layer 6 and layer 7) as defined by the OSI Reference Model.
  • the client application 1 13/browser application and the content privacy platform 101 interact according to a client-server model.
  • a client process sends a message including a request to a server process, and the server process responds by providing a service (e.g., messaging, advertisements, etc.).
  • the server process may also return a message with a response to the client process.
  • client process and server process execute on different computer devices, called hosts, and communicate via a network using one or more protocols for network communications.
  • the term "server” is conventionally used to refer to the process that provides the service, or the host computer on which the process operates.
  • FIG. 5 is a diagram of the components of a content privacy platform, according to one embodiment.
  • the content privacy platform 101 includes one or more components for providing privacy protection for a presentation device according to the various embodiments described herein.
  • the content privacy platform 101 includes a presentation mode detector module 501 , a content downloader module 503, a content modifier module 505, and a user interface module 507.
  • the above presented modules and components of the content privacy platform 101 can be implemented in hardware, firmware, software, or a combination thereof. Though depicted as a separate entity in FIG. 1 , it is contemplated that the content privacy platform 101 may be implemented as a module of any of the components of the system 100 (e.g., a component of the presentation device 103, the content service provider 107, content servers 109, advertising network 1 17, advertising server 119, etc.).
  • one or more of the modules 501-507 may be implemented as a cloud based service, local service, native application, or combination thereof. The functions of these modules are discussed with respect to FIG. 6.
  • FIG. 6 is a flowchart of a process for providing privacy protection in a presentation device, according to one embodiment.
  • the content privacy platform 101 and/or any of the modules 501-507 of the content privacy platform 101 as shown in FIG. 5 may perform one or more portions of the process 600 and may be implemented in, for instance, a chip set including a processor and a memory as shown in FIG. 10.
  • the privacy routing platform 101 and/or the modules 501-507 can provide means for accomplishing various parts of the process 600, as well as means for accomplishing embodiments of other processes described herein in conjunction with other components of the system 100.
  • the process 600 is illustrated and described as a sequence of steps, its contemplated that various embodiments of the process 600 may be performed in any order or combination and need not include all of the illustrated steps.
  • a presentation mode is a mode in which the presentation device 103 has made one or more of an external or internal output device (e.g., displays, audio system, wireless transmitters, etc.) that is capable of presenting content (e.g., personalized or non-personalized content) accessible (e.g., viewable) by a public audience comprising one or more other users.
  • an external or internal output device e.g., displays, audio system, wireless transmitters, etc.
  • content e.g., personalized or non-personalized content
  • the presentation mode is determined by detecting an activation of a presentation display hardware of the presentation device, a connection of an external presentation display hardware, or a combination thereof.
  • a presentation display hardware e.g., a built-in projector
  • activation of this internal display hardware can be detected and used to determine that the device is in presentation mode.
  • a presentation device 103 that is a hybrid portable computer can be configured with a screen that can swivel or otherwise be positioned to an outward facing configuration for presentation. In such a case, the positioning of the screen of the presentation device 103 in this outward facing configuration can be used to detect and determine that the presentation device 103 has entered a presentation mode.
  • the presentation mode detector module 501 can detect when an external presentation display (e.g., a projector 203) has been connected to the presentation device 103.
  • This connection can be either a physical connection (e.g., via a cable) or a wireless connection (e.g., wireless display technology). It is noted that the examples above are provided only by way of illustration, and that it is contemplated that any detected configuration, activation, etc. of internal or external displays indicative of using to the presentation device 103 to make a presentation can be used according to the various embodiments described herein.
  • the presentation mode is determined by detecting that the presentation device has activated a conferencing application, has connected to an online conference, or a combination thereof.
  • the presentation mode detector module 501 may check or receive notifications from a conference application (e.g., a video conference application) executing on the presentation device 103 (e.g., via APIs or other code or scripts) about the status of the conference application.
  • a conference application e.g., a video conference application
  • One status information can include whether or not the user has executed or activated the application.
  • the simple execution of the conference application can be used to determine that presentation device 103 has entered a presentation (e.g., based on the assumption that a user will activate or execute a conference application only when needed to make a presentation over the conference).
  • the presentation mode detector module 501 can use more specific status information to determine a presentation mode, such as when the conference application is used to actually join an online conference, when the user has shared a screen of the presentation device 103 over the online conference, and/or the like.
  • the presentation mode is determined by detecting one or more other users within proximity of the presentation device using one or more sensors of the presentation device.
  • the presentation mode detector module 501 can collect sensor data (e.g., imaging/proximity sensor data), and then process the sensor data to determine whether there is an indication that multiple people are detected. For example, if multiple people are detected within a predetermined distance of the presentation device 103, the presentation mode detector module 501 can determine that the presentation device 103 is in a presentation mode.
  • the presentation mode detector module 501 can process the sensor data (e.g., images) to recognize objects or their characteristics (e.g., chairs arranged in a certain configuration, people arranged in a certain configuration, a certain number of people/objects, etc.) that are indicative of a presentation.
  • the sensor data e.g., images
  • objects or their characteristics e.g., chairs arranged in a certain configuration, people arranged in a certain configuration, a certain number of people/objects, etc.
  • the presentation detector module 501 can use contextual data (e.g., time, location, etc.) to determine whether a presentation mode is active. For example, presence of the presentation device 103 in a conference of an office building during work hours can be indicative of an ongoing presentation.
  • the presentation device 103's location can be mapped to an indoor floor plan of the building to determine whether the presentation device is located in position that indicates a presentation (e.g., positioned at a lectern, at the front of a meeting room, on a stage, etc.).
  • the contextual information can be compared to calendar or other similar data to determine whether a meeting or presentation has been previously scheduled to determine whether the presentation device 103 is in presentation mode.
  • the content downloader module 503 receives personalized content from a content server 109 for presentation at the presentation device 103.
  • the personalized content is generated based on user data 1 11 previously collected about a user.
  • such personalized content can be privacy sensitive because an observer other than the user who views the personalized content can potentially infer the underlying user data 11 1 that was used to generate the personalized content.
  • the personalized content can be received after the presentation mode is detected in step 601. In other embodiments, the receipt of such personalized content can act as a trigger to initiate the detection of whether the receiving presentation device 103 is in presentation mode, and whether privacy preserving actions are needed to protect the personalized content.
  • the content server 109 or content service provider 107 can provide any type of content to the presentation.
  • the content server 109 can provide advertising content.
  • the content server 109 can be an advertisement server 119 or an advertising network 117, and the personalized content is a personalized advertisement for the user.
  • the personalized content is for display by a client application 113 or browser application 115 executing on the presentation device 103.
  • client application 113 and/or the browser application 115 can include computer code for performing the modifying of the personalized content, the determining of the presentation mode, or a combination thereof.
  • the content modifier module 505 modifies the personalized content while the presentation device 103 is operating in the presentation mode.
  • the modifying of the personalized content comprises blocking the personalized from being displayed at the presentation device.
  • the content modifier module 505 can ignore or otherwise override an application request to display the personalized content. In this way, the personalized content is not displayed as long as the presentation device 103 is detected to be in the presentation mode.
  • the personalized content is a part of other content received from the content server.
  • the personalized content can be a content insert (e.g., an advertisement) for display within other content (e.g., a web page).
  • the modifying of the personalized content comprises omitting the personalized content from the other content. This omitting of the personalized content is performed before any of the personalized content is rendered on a presentation display of the presentation device 103 while in presentation mode.
  • the content modifier module 505 can optionally interact with the content downloader module 503 to request non-personalized content from the content server 109. Then, the modifying of the personalized content comprises substituting the personalized content with the non-personalized content.
  • the non-personalized content is any content that is generated without using the user data 11 1 for a specific individual user. This content can be any generic or non-specific content that would be provided by the content server 109 when no user data 111 is available.
  • the non-personalized content can be generated for a determined audience of a presentation being presented at the presentation device during the presentation mode.
  • the content modifier module 505 can identify the characteristics (e.g., location, time, profile, preferences, demographics, etc.) of the detected audience as a whole and then receive content personalized or targeted for the entire group as opposed to any individual within the group.
  • the content server 109 and/or the advertising server 119 can still provide more relevant content without compromising individual privacy.
  • FIG. 7 is a ladder diagram that illustrates a sequence of messages and processes used in providing privacy protection in a presentation device when the personalized content is targeted advertising content, according to one embodiment.
  • a network process is represented by a thin vertical line.
  • a step or message passed from one process to another is represented by horizontal arrows.
  • the processes represented in FIG. 7 are a browser application 1 15, a web server 701 (e.g., content server 109), and an advertising network 1 17.
  • the browser application 1 15 is executing on a presentation device 103 (not shown in FIG. 7) that is configured to provide privacy protection according to the various embodiments described herein.
  • the browser application 115 sends a request to the web server 701 for the contents of a webpage for downloading and display at the browser 115.
  • the browser 1 15 determines that the downloaded webpage includes a placeholder or content insert for displaying an advertisement that is to be provided by the advertising network 117.
  • the browser 115 sends a request to the advertising network 1 17 to download an advertisement for placement in the webpage downloaded at process 703.
  • the advertising network 1 17 determines that the browser 115 is associated with a user for which it has previous browsing history data (e.g., user data 1 11).
  • the advertising network 1 17 then generates a personalized advertisement based on this previous browsing history data for downloading to the browser 115.
  • the advertisement may relate to products similar to those previously viewed by the user according to the user's browsing history data.
  • the browser 115 and/or the content privacy platform 101 can detect whether the presentation device 103 executing the browser 115 is in a presentation mode.
  • operating the presentation device 103 or browser 115 in presentation mode means that the browser view (e.g., a display user interface of the browser 1 15) is potentially watched by multiple users.
  • such a presentation mode can be determined when: (1) the presentation device 103 where the browser 115 is running is connected to a data projector; (2) the browser 115 or the presentation device 103's screen is shared in an online meeting; (3) the presentation device 103's camera/microphone, near- field radio, and/or proximity/smell sensor detect that the browser view is potentially watched by multiple users; etc.
  • the webpage loaded in the browser 115 can use Javascript or other similar code to check whether the browser 1 15 is in presentation mode at any time (e.g., based on one or more conditions for determining a presentation mode described above and in the various embodiments described herein).
  • the webpage can also receive a Javascript event (notification) when the browser 1 15 goes to the presentation mode while rendering the webpage.
  • a Javascript API or similar application interface can be used for this purpose.
  • a personally targeted advertisement e.g., personalized
  • the modifying the at least one personally targeted advertisement shown in the webpage includes, but is not limited to, deleting or hiding the advertisement in part or in full.
  • the webpage can select alternative advertisements that are not personalized to an individual user to display in place of the personalized advertisement received at process 705.
  • the webpage can determine a current location of the presentation device 103 (e.g., using a Javascript location API or equivalent) and then show advertisements targeted for an area related to this location in place of the personalized advertisement.
  • the webpage can query calendar data from or of the user (e.g., using a Javascript calendar API or equivalent) to detect a presentation mode (e.g., by determining whether the calendar data includes an entry for a presentation meeting to be performed by the user) or detect additional information about the presentation audience who are potentially watching the browser view (e.g., by querying for the calendar data for users invited to the presentation).
  • This additional information about the presentation audience can then be used to retrieve an advertisement from the advertising network 1 17 that is tailored or personalized to the presentation audience as a whole or to at least two of the users in the audience. In this way, the privacy of any individual user is protected because any publicly displayed advertisement is either not personalized or personalized to multiple users so that attributing the personalized advertisement is difficult or not possible.
  • all advertisements discussed above are served from the advertising network 1 17, or a local cache at the presentation device 103.
  • FIGs. 8A and 8B are diagrams of example user interfaces in which personalized content presented on a presentation device 103 are replaced with non-personalized content, according to one embodiment.
  • FIG. 8A depicts a presentation display 801 of a presentation device 103 operating in presentation mode.
  • the presentation display 801 shows a browser view 803 that includes a personally targeted advertisement 805.
  • the personally targeted advertisement 805 relate to cars because the associated user's browsing history indicates that he has recently searched car-related webpages for the displayed mode of car. This browsing history is potentially privacy sensitive. Accordingly, the content privacy platform 101 is modifying the personalized advertisement 805 in response to the detected presentation mode.
  • the modifying of the personalized advertisement 805 includes requesting a non- personalized advertisement 807 from the advertising network 1 17 to display in place of the personalized advertisement 805.
  • a browser view 809 containing the non-personalized advertisement 807 is then displayed on the presentation display 801 while the presentation device 103 is in presentation mode.
  • FIG. 8B illustrates an example of personalized content that is a personal photo used as a wallpaper background of the presentation device 103.
  • a presentation display 821 is showing an operating system desktop in which a user has displayed a personal photograph 823 as the background image.
  • the personal photograph 823 is the personalized content associated with the user and the client application 1 13 presenting the personalized content is an operating system process responsible for displaying background images.
  • the content privacy platform 101 can detect that the personal photograph 823 is personalized content and is not in the set of standard background images of the operating system.
  • FIG. 1 can detect that the personal photograph 823 is personalized content and is not in the set of standard background images of the operating system.
  • the presentation device 103 that is connected to the presentation display 821 is in presentation mode, and so, the content privacy platform 101 is activated to protect the privacy of the personalized content (e.g., the personal photograph 823).
  • the content privacy platform 101 modifies the personalized content by replacing the personal photograph 823 with a default background image 825 of the operating system while the presentation device 103 is in presentation.
  • the presentation device is detected to exit presentation mode (e.g., using opposite criteria described with detecting entering of the presentation mode)
  • the content privacy platform 101 can restore the background image to the personal photograph 823.
  • the processes described herein for providing privacy protection in a presentation device may be advantageously implemented via software, hardware (e.g., general processor, Digital Signal Processing (DSP) chip, an Application Specific Integrated Circuit (ASIC), Field Programmable Gate Arrays (FPGAs), etc.), firmware or a combination thereof.
  • DSP Digital Signal Processing
  • ASIC Application Specific Integrated Circuit
  • FPGA Field Programmable Gate Arrays
  • FIG. 9 illustrates a computer system 900 upon which an embodiment of the invention may be implemented.
  • Computer system 900 is programmed (e.g., via computer program code or instructions) to provide privacy protection in a presentation device as described herein and includes a communication mechanism such as a bus 910 for passing information between other internal and external components of the computer system 900.
  • Information also called data
  • Information is represented as a physical expression of a measurable phenomenon, typically electric voltages, but including, in other embodiments, such phenomena as magnetic, electromagnetic, pressure, chemical, biological, molecular, atomic, sub-atomic and quantum interactions. For example, north and south magnetic fields, or a zero and non-zero electric voltage, represent two states (0, 1) of a binary digit (bit).
  • a superposition of multiple simultaneous quantum states before measurement represents a quantum bit (qubit).
  • a sequence of one or more digits constitutes digital data that is used to represent a number or code for a character.
  • information called analog data is represented by a near continuum of measurable values within a particular range.
  • a bus 910 includes one or more parallel conductors of information so that information is transferred quickly among devices coupled to the bus 910.
  • One or more processors 902 for processing information are coupled with the bus 910.
  • a processor 902 performs a set of operations on information as specified by computer program code related to providing privacy protection in a presentation device.
  • the computer program code is a set of instructions or statements providing instructions for the operation of the processor and/or the computer system to perform specified functions.
  • the code for example, may be written in a computer programming language that is compiled into a native instruction set of the processor. The code may also be written directly using the native instruction set (e.g., machine language).
  • the set of operations include bringing information in from the bus 910 and placing information on the bus 910.
  • the set of operations also typically include comparing two or more units of information, shifting positions of units of information, and combining two or more units of information, such as by addition or multiplication or logical operations like OR, exclusive OR (XOR), and AND.
  • Each operation of the set of operations that can be performed by the processor is represented to the processor by information called instructions, such as an operation code of one or more digits.
  • a sequence of operations to be executed by the processor 902, such as a sequence of operation codes, constitute processor instructions, also called computer system instructions or, simply, computer instructions.
  • Processors may be implemented as mechanical, electrical, magnetic, optical, chemical or quantum components, among others, alone or in combination.
  • Computer system 900 also includes a memory 904 coupled to bus 910.
  • the memory 904 such as a random access memory (RAM) or other dynamic storage device, stores information including processor instructions for providing privacy protection in a presentation device. Dynamic memory allows information stored therein to be changed by the computer system 900. RAM allows a unit of information stored at a location called a memory address to be stored and retrieved independently of information at neighboring addresses.
  • the memory 904 is also used by the processor 902 to store temporary values during execution of processor instructions.
  • the computer system 900 also includes a read only memory (ROM) 906 or other static storage device coupled to the bus 910 for storing static information, including instructions, that is not changed by the computer system 900.
  • ROM read only memory
  • Nonvolatile (persistent) storage device 908 such as a magnetic disk, optical disk or flash card, for storing information, including instructions, that persists even when the computer system 900 is turned off or otherwise loses power.
  • Information including instructions for providing privacy protection in a presentation device, is provided to the bus 910 for use by the processor from an external input device 912, such as a keyboard containing alphanumeric keys operated by a human user, or a sensor.
  • an external input device 912 such as a keyboard containing alphanumeric keys operated by a human user, or a sensor.
  • a sensor detects conditions in its vicinity and transforms those detections into physical expression compatible with the measurable phenomenon used to represent information in computer system 900.
  • Other external devices coupled to bus 910 used primarily for interacting with humans, include a display device 914, such as a cathode ray tube (CRT) or a liquid crystal display (LCD), or plasma screen or printer for presenting text or images, and a pointing device 916, such as a mouse or a trackball or cursor direction keys, or motion sensor, for controlling a position of a small cursor image presented on the display 914 and issuing commands associated with graphical elements presented on the display 914.
  • a display device 914 such as a cathode ray tube (CRT) or a liquid crystal display (LCD), or plasma screen or printer for presenting text or images
  • a pointing device 916 such as a mouse or a trackball or cursor direction keys, or motion sensor, for controlling a position of a small cursor image presented on the display 914 and issuing commands associated with graphical elements presented on the display 914.
  • a display device 914 such as a cathode ray tube (CRT
  • special purpose hardware such as an application specific integrated circuit (ASIC) 920
  • ASIC application specific integrated circuit
  • the special purpose hardware is configured to perform operations not performed by processor 902 quickly enough for special purposes.
  • application specific ICs include graphics accelerator cards for generating images for display 914, cryptographic boards for encrypting and decrypting messages sent over a network, speech recognition, and interfaces to special external devices, such as robotic arms and medical scanning equipment that repeatedly perform some complex sequence of operations that are more efficiently implemented in hardware.
  • Computer system 900 also includes one or more instances of a communications interface 970 coupled to bus 910.
  • Communication interface 970 provides a one-way or two-way communication coupling to a variety of external devices that operate with their own processors, such as printers, scanners and external disks. In general the coupling is with a network link 978 that is connected to a local network 980 to which a variety of external devices with their own processors are connected.
  • communication interface 970 may be a parallel port or a serial port or a universal serial bus (USB) port on a personal computer.
  • USB universal serial bus
  • communications interface 970 is an integrated services digital network (ISDN) card or a digital subscriber line (DSL) card or a telephone modem that provides an information communication connection to a corresponding type of telephone line.
  • ISDN integrated services digital network
  • DSL digital subscriber line
  • a communication interface 970 is a cable modem that converts signals on bus 910 into signals for a communication connection over a coaxial cable or into optical signals for a communication connection over a fiber optic cable.
  • communications interface 970 may be a local area network (LAN) card to provide a data communication connection to a compatible LAN, such as Ethernet. Wireless links may also be implemented.
  • LAN local area network
  • the communications interface 970 sends or receives or both sends and receives electrical, acoustic or electromagnetic signals, including infrared and optical signals, that carry information streams, such as digital data.
  • the communications interface 970 includes a radio band electromagnetic transmitter and receiver called a radio transceiver.
  • the communications interface 970 enables connection to the communication network 105 for providing privacy protection in a presentation device.
  • Non- volatile media include, for example, optical or magnetic disks, such as storage device 908.
  • Volatile media include, for example, dynamic memory 904.
  • Transmission media include, for example, coaxial cables, copper wire, fiber optic cables, and carrier waves that travel through space without wires or cables, such as acoustic waves and electromagnetic waves, including radio, optical and infrared waves. Signals include man-made transient variations in amplitude, frequency, phase, polarization or other physical properties transmitted through the transmission media.
  • Computer-readable media include, for example, a floppy disk, a flexible disk, hard disk, magnetic tape, any other magnetic medium, a CD-ROM, CDRW, DVD, any other optical medium, punch cards, paper tape, optical mark sheets, any other physical medium with patterns of holes or other optically recognizable indicia, a RAM, a PROM, an EPROM, a FLASH-EPROM, any other memory chip or cartridge, a carrier wave, or any other medium from which a computer can read.
  • a floppy disk a flexible disk, hard disk, magnetic tape, any other magnetic medium, a CD-ROM, CDRW, DVD, any other optical medium, punch cards, paper tape, optical mark sheets, any other physical medium with patterns of holes or other optically recognizable indicia, a RAM, a PROM, an EPROM, a FLASH-EPROM, any other memory chip or cartridge, a carrier wave, or any other medium from which a computer can read.
  • FIG. 10 illustrates a chip set 1000 upon which an embodiment of the invention may be implemented.
  • Chip set 1000 is programmed to providing privacy protection in a presentation device as described herein and includes, for instance, the processor and memory components described with respect to FIG. 9 incorporated in one or more physical packages (e.g., chips).
  • a physical package includes an arrangement of one or more materials, components, and/or wires on a structural assembly (e.g., a baseboard) to provide one or more characteristics such as physical strength, conservation of size, and/or limitation of electrical interaction.
  • the chip set can be implemented in a single chip.
  • the chip set 1000 includes a communication mechanism such as a bus 1001 for passing information among the components of the chip set 1000.
  • a processor 1003 has connectivity to the bus 1001 to execute instructions and process information stored in, for example, a memory 1005.
  • the processor 1003 may include one or more processing cores with each core configured to perform independently.
  • a multi-core processor enables multiprocessing within a single physical package. Examples of a multi-core processor include two, four, eight, or greater numbers of processing cores.
  • the processor 1003 may include one or more microprocessors configured in tandem via the bus 1001 to enable independent execution of instructions, pipelining, and multithreading.
  • the processor 1003 may also be accompanied with one or more specialized components to perform certain processing functions and tasks such as one or more digital signal processors (DSP) 1007, or one or more application- specific integrated circuits (ASIC) 1009.
  • DSP digital signal processors
  • ASIC application- specific integrated circuits
  • a DSP 1007 typically is configured to process real- world signals (e.g., sound) in real time independently of the processor 1003.
  • an ASIC 1009 can be configured to performed specialized functions not easily performed by a general purposed processor.
  • Other specialized components to aid in performing the inventive functions described herein include one or more field programmable gate arrays (FPGA) (not shown), one or more controllers (not shown), or one or more other special-purpose computer chips.
  • FPGA field programmable gate arrays
  • the processor 1003 and accompanying components have connectivity to the memory 1005 via the bus 1001.
  • the memory 1005 includes both dynamic memory (e.g., RAM, magnetic disk, writable optical disk, etc.) and static memory (e.g., ROM, CD-ROM, etc.) for storing executable instructions that when executed perform the inventive steps described herein to provide privacy protection in a presentation device.
  • the memory 1005 also stores the data associated with or generated by the execution of the inventive steps.
  • FIG. 11 is a diagram of exemplary components of a mobile station (e.g., handset) capable of operating in the system of FIG. 1 , according to one embodiment.
  • a radio receiver is often defined in terms of front-end and back-end characteristics.
  • the front-end of the receiver encompasses all of the Radio Frequency (RF) circuitry whereas the back-end encompasses all of the base-band processing circuitry.
  • Pertinent internal components of the telephone include a Main Control Unit (MCU) 1103, a Digital Signal Processor (DSP) 1 105, and a receiver/transmitter unit including a microphone gain control unit and a speaker gain control unit.
  • MCU Main Control Unit
  • DSP Digital Signal Processor
  • a main display unit 1107 provides a display to the user in support of various applications and mobile station functions that offer automatic contact matching.
  • An audio function circuitry 1109 includes a microphone 111 1 and microphone amplifier that amplifies the speech signal output from the microphone 1111. The amplified speech signal output from the microphone 111 1 is fed to a coder/decoder (CODEC) 1113.
  • CDDEC coder/decoder
  • a radio section 1115 amplifies power and converts frequency in order to communicate with a base station, which is included in a mobile communication system, via antenna 11 17.
  • the power amplifier (PA) 11 19 and the transmitter/modulation circuitry are operationally responsive to the MCU 1103, with an output from the PA 11 19 coupled to the duplexer 1121 or circulator or antenna switch, as known in the art.
  • the PA 1 119 also couples to a battery interface and power control unit 1120.
  • a user of mobile station 1101 speaks into the microphone 111 1 and his or her voice along with any detected background noise is converted into an analog voltage.
  • the analog voltage is then converted into a digital signal through the Analog to Digital Converter (ADC) 1123.
  • ADC Analog to Digital Converter
  • the control unit 1103 routes the digital signal into the DSP 1 105 for processing therein, such as speech encoding, channel encoding, encrypting, and interleaving.
  • the processed voice signals are encoded, by units not separately shown, using a cellular transmission protocol such as global evolution (EDGE), general packet radio service (GPRS), global system for mobile communications (GSM), Internet protocol multimedia subsystem (IMS), universal mobile telecommunications system (UMTS), etc., as well as any other suitable wireless medium, e.g., microwave access (WiMAX), Long Term Evolution (LTE) networks, code division multiple access (CDMA), wireless fidelity (WiFi), satellite, and the like.
  • a cellular transmission protocol such as global evolution (EDGE), general packet radio service (GPRS), global system for mobile communications (GSM), Internet protocol multimedia subsystem (IMS), universal mobile telecommunications system (UMTS), etc.
  • EDGE global evolution
  • GPRS general packet radio service
  • GSM global system for mobile communications
  • IMS Internet protocol multimedia subsystem
  • UMTS universal mobile telecommunications system
  • any other suitable wireless medium e.g., microwave access (WiMAX), Long Term Evolution (LTE)
  • the encoded signals are then routed to an equalizer 1125 for compensation of any frequency-dependent impairments that occur during transmission though the air such as phase and amplitude distortion.
  • the modulator 1127 combines the signal with a RF signal generated in the RF interface 1129.
  • the modulator 1127 generates a sine wave by way of frequency or phase modulation.
  • an up- converter 1131 combines the sine wave output from the modulator 1127 with another sine wave generated by a synthesizer 1 133 to achieve the desired frequency of transmission.
  • the signal is then sent through a PA 1119 to increase the signal to an appropriate power level.
  • the PA 11 19 acts as a variable gain amplifier whose gain is controlled by the DSP 1105 from information received from a network base station.
  • the signal is then filtered within the duplexer 1121 and optionally sent to an antenna coupler 1135 to match impedances to provide maximum power transfer. Finally, the signal is transmitted via antenna 1117 to a local base station.
  • An automatic gain control (AGC) can be supplied to control the gain of the final stages of the receiver.
  • the signals may be forwarded from there to a remote telephone which may be another cellular telephone, other mobile phone or a land-line connected to a Public Switched Telephone Network (PSTN), or other telephony networks.
  • PSTN Public Switched Telephone Network
  • Voice signals transmitted to the mobile station 1101 are received via antenna 11 17 and immediately amplified by a low noise amplifier (LNA) 1137.
  • a down-converter 1139 lowers the carrier frequency while the demodulator 1 141 strips away the RF leaving only a digital bit stream.
  • the signal then goes through the equalizer 1125 and is processed by the DSP 1105.
  • a Digital to Analog Converter (DAC) 1143 converts the signal and the resulting output is transmitted to the user through the speaker 1 145, all under control of a Main Control Unit (MCU) 1103-which can be implemented as a Central Processing Unit (CPU) (not shown).
  • MCU Main Control Unit
  • CPU Central Processing Unit
  • the MCU 1103 receives various signals including input signals from the keyboard 1147.
  • the keyboard 1147 and/or the MCU 1103 in combination with other user input components comprise a user interface circuitry for managing user input.
  • the MCU 1103 runs a user interface software to facilitate user control of at least some functions of the mobile station 1 101 to provide privacy protection in a presentation device.
  • the MCU 1103 also delivers a display command and a switch command to the display 1 107 and to the speech output switching controller, respectively.
  • the MCU 1103 exchanges information with the DSP 1105 and can access an optionally incorporated SIM card 1149 and a memory 1151.
  • the MCU 1 103 executes various control functions required of the station.
  • the DSP 1105 may, depending upon the implementation, perform any of a variety of conventional digital processing functions on the voice signals. Additionally, DSP 1105 determines the background noise level of the local environment from the signals detected by microphone 111 1 and sets the gain of microphone 11 11 to a level selected to compensate for the natural tendency of the user of the mobile station 1 101.
  • the CODEC 1113 includes the ADC 1123 and DAC 1143.
  • the memory 1 151 stores various data including call incoming tone data and is capable of storing other data including music data received via, e.g., the global Internet.
  • the software module could reside in RAM memory, flash memory, registers, or any other form of writable computer-readable storage medium known in the art including non-transitory computer-readable storage medium.
  • the memory device 1151 may be, but not limited to, a single memory, CD, DVD, ROM, RAM, EEPROM, optical storage, or any other non-volatile or non-transitory storage medium capable of storing digital data.
  • An optionally incorporated SIM card 1149 carries, for instance, important information, such as the cellular phone number, the carrier supplying service, subscription details, and security information.
  • the SIM card 1149 serves primarily to identify the mobile station 1101 on a radio network.
  • the card 1149 also contains a memory for storing a personal telephone number registry, text messages, and user specific mobile station settings.

Landscapes

  • Engineering & Computer Science (AREA)
  • Databases & Information Systems (AREA)
  • Multimedia (AREA)
  • Signal Processing (AREA)
  • Health & Medical Sciences (AREA)
  • General Health & Medical Sciences (AREA)
  • Theoretical Computer Science (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Social Psychology (AREA)
  • Bioethics (AREA)
  • Marketing (AREA)
  • Business, Economics & Management (AREA)
  • Medical Informatics (AREA)
  • Computer Hardware Design (AREA)
  • Computer Security & Cryptography (AREA)
  • Software Systems (AREA)
  • Physics & Mathematics (AREA)
  • General Engineering & Computer Science (AREA)
  • General Physics & Mathematics (AREA)
  • Computer Graphics (AREA)
  • Information Transfer Between Computers (AREA)

Abstract

An approach is provided for protecting privacy in a presentation device. The approach involves determining that a presentation device is operating in a presentation mode. The approach also involves receiving personalized content from a content server for presentation at the presentation device. The personalized content is generated based on user data previously collected from a user. The approach further involves modifying the personalized content while the presentation device is operating in the presentation mode.

Description

METHOD AND APPARATUS FOR
PRIVACY PROTECTION IN A PRESENTATION DEVICE
BACKGROUND
[0001] Service providers and device manufacturers (e.g., wireless, cellular, etc.) are continually challenged to deliver value and convenience to consumers by, for example, providing compelling network services and content. For example, one traditional approach to making services and/or related content more compelling is to personalize such services and content for a particular user (e.g., targeted advertisements, content recommendations, etc.). However, such personalized content can also potentially cause privacy concerns for a user, particularly when the personalized content is presented on a computer or other device that is being viewed or can be viewed by multiple people (e.g., when the computer or device, e.g., a presentation device, is publicly presenting information). Accordingly, service providers and device manufacturers face significant technical challenges to protection of a user's personalized content when using a presentation device where the personalized content can be inadvertently exposed to others.
SOME EXAMPLE EMBODIMENTS
[0002] Therefore, there is a need for an approach for privacy protection in a presentation device.
[0003] According to one embodiment, a method comprises determining that a presentation device is operating in a presentation mode. The method also comprises receiving personalized content from a content server for presentation at the presentation device. The personalized content is generated based on user data previously collected about a user. The method further comprises modifying the personalized content while the presentation device is operating in the presentation mode. In one embodiment, the modifying comprises blocking, omitting, or substituting the personalized content for display at the presentation device while in the presentation mode.
[0004] According to another embodiment, an apparatus comprising at least one processor, and at least one memory including computer program code, the at least one memory and the computer program code configured to, with the at least one processor, cause, at least in part, the apparatus to determine that a presentation device is operating in a presentation mode. The apparatus is also caused to receive personalized content from a content server for presentation at the presentation device. The personalized content is generated based on user data previously collected about a user. The apparatus is further caused to modify the personalized content while the presentation device is operating in the presentation mode. In one embodiment, the modifying comprises blocking, omitting, or substituting the personalized content for display at the presentation device while in the presentation mode.
[0005] According to another embodiment, a computer-readable storage medium carrying one or more sequences of one or more instructions which, when executed by one or more processors, cause, at least in part, an apparatus to determine that a presentation device is operating in a presentation mode. The apparatus is also caused to receive personalized content from a content server for presentation at the presentation device. The personalized content is generated based on user data previously collected about a user. The apparatus is further caused to modify the personalized content while the presentation device is operating in the presentation mode. In one embodiment, the modifying comprises blocking, omitting, or substituting the personalized content for display at the presentation device while in the presentation mode.
[0006] According to another embodiment, an apparatus comprises means for determining that a presentation device is operating in a presentation mode. The apparatus also comprises means for receiving personalized content from a content server for presentation at the presentation device. The personalized content is generated based on user data previously collected about a user. The apparatus further comprises means for modifying the personalized content while the presentation device is operating in the presentation mode. In one embodiment, the modifying comprises blocking, omitting, or substituting the personalized content for display at the presentation device while in the presentation mode.
[0007] In addition, for various example embodiments of the invention, the following is applicable: a method comprising facilitating a processing of and/or processing (1) data and/or (2) information and/or (3) at least one signal, the (1) data and/or (2) information and/or (3) at least one signal based, at least in part, on (including derived at least in part from) any one or any combination of methods (or processes) disclosed in this application as relevant to any embodiment of the invention.
[0008] For various example embodiments of the invention, the following is also applicable: a method comprising facilitating access to at least one interface configured to allow access to at least one service, the at least one service configured to perform any one or any combination of network or service provider methods (or processes) disclosed in this application.
[0009] For various example embodiments of the invention, the following is also applicable: a method comprising facilitating creating and/or facilitating modifying (1) at least one device user interface element and/or (2) at least one device user interface functionality, the (1) at least one device user interface element and/or (2) at least one device user interface functionality based, at least in part, on data and/or information resulting from one or any combination of methods or processes disclosed in this application as relevant to any embodiment of the invention, and/or at least one signal resulting from one or any combination of methods (or processes) disclosed in this application as relevant to any embodiment of the invention.
[0010] For various example embodiments of the invention, the following is also applicable: a method comprising creating and/or modifying (1) at least one device user interface element and/or (2) at least one device user interface functionality, the (1) at least one device user interface element and/or (2) at least one device user interface functionality based at least in part on data and/or information resulting from one or any combination of methods (or processes) disclosed in this application as relevant to any embodiment of the invention, and/or at least one signal resulting from one or any combination of methods (or processes) disclosed in this application as relevant to any embodiment of the invention.
[0011] In various example embodiments, the methods (or processes) can be accomplished on the service provider side or on the mobile device side or in any shared way between service provider and mobile device with actions being performed on both sides.
[0012] For various example embodiments, the following is applicable: An apparatus comprising means for performing the method of any of the claims. [0013] Still other aspects, features, and advantages of the invention are readily apparent from the following detailed description, simply by illustrating a number of particular embodiments and implementations, including the best mode contemplated for carrying out the invention. The invention is also capable of other and different embodiments, and its several details can be modified in various obvious respects, all without departing from the spirit and scope of the invention. Accordingly, the drawings and description are to be regarded as illustrative in nature, and not as restrictive.
BRIEF DESCRIPTION OF THE DRAWINGS
[0014] The embodiments of the invention are illustrated by way of example, and not by way of limitation, in the figures of the accompanying drawings:
[0015] FIG. 1 is a diagram of a system capable of provider privacy protection in a presentation device, according to one embodiment;
[0016] FIG. 2 is a diagram of an example of a presentation device operating in a presentation mode, according to one embodiment;
[0017] FIGs. 3A and 3B are diagrams of additional examples of detecting that a presentation device is operating in a presentation mode, according to one embodiment;
[0018] FIG. 4 is a diagram of illustrating an example of modifying personalized content presented by a presentation device that is operating in a presentation mode, according to one embodiment;
[0019] FIG. 5 is a diagram of the components of a content privacy platform, according to one embodiment;
[0020] FIG. 6 is a flowchart of a process for providing privacy protection in a presentation device, according to one embodiment;
[0021] FIG. 7 is a ladder diagram that illustrates a sequence of messages and processes used in providing privacy protection in a presentation device when the personalized content is targeted advertising content, according to one embodiment; [0022] FIGs. 8A and 8B are diagrams of example user interfaces in which personalized content presented displayed on a presentation device is replaced with non-personalized content, according to one embodiment;
[0023] FIG. 9 is a diagram of hardware that can be used to implement an embodiment of the invention;
[0024] FIG. 10 is a diagram of a chip set that can be used to implement an embodiment of the invention; and
[0025] FIG. 11 is a diagram of a mobile terminal (e.g., handset) that can be used to implement an embodiment of the invention.
DESCRIPTION OF SOME EMBODIMENTS
[0026] Examples of a method, apparatus, and computer program for providing privacy protection in a presentation device are disclosed. In the following description, for the purposes of explanation, numerous specific details are set forth in order to provide a thorough understanding of the embodiments of the invention. It is apparent, however, to one skilled in the art that the embodiments of the invention may be practiced without these specific details or with an equivalent arrangement. In other instances, well-known structures and devices are shown in block diagram form in order to avoid unnecessarily obscuring the embodiments of the invention.
[0027] FIG. 1 is a diagram of a system 100 capable of provider privacy protection in a presentation device, according to one embodiment. As noted above, service providers and device manufacturers are increasingly using personalized content to provide better service and/or increase user engagement with their respective services, content, and/or devices. By way of example, personalized content can be any content generated that considers or uses previously collected user data (e.g., profile information, interaction history, context, etc.). However, because such personalized content is derived from or shaped by user data, other people or users who also see the personalized content may guess or infer the underlying user data, thereby creating potential privacy concerns when such data is exposed to other users. The chance of exposure of this information can be greater when a device is used for a presentation to a public audience. In other words, when a presentation device is used to make a presentation to a public audience, there is a potential for the device to also display or otherwise present a user's personalized content during the presentation that might expose a user's private data.
[0028] An example of personalized content includes, but is not limited to, targeted advertisements. For example, many of today's advertisements are targeted for individual users. In one scenario, a user may visit some car related website. This information (e.g., the user's accessing of the website via a browser or clicking one or more link on the website) was captured by an advertising network. Later, the user goes to a meeting to make a presentation using the user's computer, or e.g. with a presentation device such as a borrowed computer and identifies himself or herself for example by logging into a user account using the presentation device. The computer is thereby placed into a presentation mode (e.g., a mode in which the computer's display is viewable by multiple other users).
[0029] FIG. 2 is a diagram of an example of a presentation device operating in a presentation mode, according to one embodiment. In this example, a presentation device 201 (e.g., the user's computer in the above scenario) is connected to a projector device 203 that projects a presentation display 205 that mirrors the display of the presentation device 201. During, the user's presentation, the user uses an application (e.g., a browser application) executing on the presentation device 201 to show a webpage 207 to his audience on the presentation display 205. On this webpage 207, an advertising network displays car related advertisements 209. These advertisements 209, however, carries user privacy information (e.g., the user's interest in cars as indicated by his previously recorded browsing history). By displaying this personalized content or targeted advertising during the presentation, this information is shared to all the people in the meeting, thereby creating a potential privacy leak or concern for the user.
[0030] Returning to FIG. 1 , to address this privacy problem, a system 100 introduces a content privacy platform 101 with the capability to detect when a presentation device 103 is in a presentation mode, and then automatically modify any personalized content that is to be presented by the presentation device 103 while the presentation device 103 is in presentation mode so that exposure of the personalized content is avoided or otherwise minimized. In this way, a user would not have to take any manual steps (e.g., using a clean computer, pre-clearing browser history, etc.) to ensure that personalized content is not exposure during a public presentation. These manuals steps often can be burdensome and easily forgotten. In addition, clearing browsing histories or other previously collected user data may then result in loss of valuable content personalizations that the user wants to maintain, except during a public presentation.
[0031] As shown, the presentation device 103 has connectivity to content privacy platform 101 over a communication network 105. In one embodiment, the system 100 is an instance of dynamic content delivery service that generates personalized content and/or related information (e.g., advertisements or other information inserts) for both online and offline content consumption by the presentation device 103. The content privacy platform 101 then performs one or more of the functions associated with providing privacy protection in the presentation device 103 according to the various embodiments described herein (e.g., by protecting any delivered personalized content from exposure while the presentation device 103 is being used to make a presentation, i.e., operating in a presentation mode).
[0032] By way of example, the system 100 provides connectivity from the presentation device 103 and the content privacy platform 101 to a content service provider 107 comprising multiple content servers 109a-109n (also collectively referred to as content servers 109) to seamlessly provide access to the content (e.g., including both personalized and non-personalized content) available from the content service provider 107. The content service provider 107 can provide any type of content to the presentation device 103 including, but not limited to, web pages, web application, media content (e.g., video, audio, e-books, etc.), and/or any other content that can be presented (e.g., displayed in the case of images or videos, played back in the case of audio, etc.) at the presentation device 103. In one embodiment, the content service provider 107 has access to a user data database 11 1 that can be used to personalize content for a particular user of the presentation device 103. By way of example, the user data 1 11 can be any previously collected data about a user (e.g., web browsing history, interaction history, historical contextual information, etc.) that the content service provider 107 can use to generate personalized content for the specific user. In one embodiment, the user data 11 1 can be collected from the presentation device 103 and/or any other devices or services associated with the user. For example, user data 1 1 1 collected from one user device (e.g., a user's laptop computer) can be used to personalize content for delivery to another user device (e.g., the user's mobile phone).
[0033] In one embodiment, from the perspective of the content service provider 107 and/or content servers 109, the content privacy platform 101 enables the content service provider 107 to manage what personalized or non-personalized content is delivered to the presentation device 103 for presentation at the presentation device 103 while the presentation device 103 is being used to make a presentation.
[0034] In one embodiment, the content service provider 107 manages the delivery (e.g., via streaming, downloading, etc.) of content directly to a client application 1 13 or Internet browser application 1 15 executing on the presentation device 103. By way of example, the content service provider 107 may manage the delivery of content on its own (e.g., via the content servers 109), or it can manage the content delivery via third party content delivery networks (CDNs) (e.g., Akamai or Limelight).
[0035] In one embodiment, the client application 1 13 and/or browser 1 15 include computer code for generating a user interface to access content (e.g., personalized and non-personalized content) from the service provider 107 via the content servers 109, as well as code for protecting privacy when the presentation device 103 is in a presentation mode according to the various embodiments described herein (e.g., code for detecting a presentation mode, modifying personalized content, etc.).
[0036] In one embodiment, the system 100 can insert or include personalized content into other non-personalized content received from the content service provider 107 for presentation on either the client application 1 13 or the browser 1 15. As discussed above, the personalized content can be targeted advertising, personalized content recommendations, etc. Accordingly, the client application 1 13 and/or the browser 1 15 can support the ability to present this other content and then insert any associated personalized content for presentation. For example, for content delivery to the client application 1 13 or the browser 1 15, the service provider 107 may specify that information (e.g., targeted or non-targeted advertisements or other content inserts) from an advertising network 1 17 comprising one or more advertising servers 1 19a-l 19m (also collectively referred to as advertising servers 1 19) be presented in and/or with the content.
[0037] Accordingly, the advertising network 1 17 and/or advertising servers 1 19 can also have access to the user data 1 1 1 to generate and deliver personalized content (e.g., targeted advertising) or non-personalized content (e.g., generic or non-targeted advertising) that can be inserted into the content provided by the content service provider 107 and/or content servers 109 indicated in the content. In addition or alternatively, the content into which the personalized content is inserted can be native content generated by the client application 1 13 and/or browser 1 15 itself, so that the content need not be provided by a network component (e.g., the content service provider 107 and/or content servers 109). In one embodiment, the advertising network 1 17 and/or the advertising servers 1 19 can expose relevant interfaces (e.g., application programming interfaces (APIs)) to client applications 1 13, browser 1 15, the content service provider 107, and/or the content servers 109 to target users for presentation of one or more content inserts (e.g., personalized or non-personalized advertisements). For example, the browser application 1 15 can display webpages with embedded targeted advertisements as the personalized content. Examples of client applications 1 13 that support personalized content (e.g., targeted advertisements) include, but are not limited, advertisement-financed applications such as file managers, clocks, text editors, games, and/or any other application with dedicated space on their user interfaces to show personalized content inserts (e.g., targeted advertisements).
[0038] In one embodiment, the presentation device 103 and/or any other device or service (e.g., content service provider 107) associated with the user can include a user data and context collection engine for collecting user data for storage in the user data database 1 1 1. The user data and collection engine can determine any user data that can be used to generate personalized content. For example, the collection engine can determine and store historical user or context data including, but not limited to, local time, geographic position from a positioning system, ambient temperature, pressures, sound and light, applications currently executing on the presentation device 103, connected devices, history of application usage, content currently being rendered on the presentation device 103, user input through a user interface (UI), and/or other user interactions determined at the presentation device 103 and/or other device associated with a specific user. As previously discussed, the collected user or context data can then be used to determine the personalized content and/or personalized information inserts (e.g., advertisements) to present at the presentation device 103.
[0039] In one embodiment, the system 100 enables both an online and an offline mode of operation for preventing exposure of potentially private information. In other words, the system 100 supports both online and offline determining, retrieving, and/or generating of personalized and/or non-personalized content for use by the presentation device 103. Accordingly, the content privacy platform 101 can operate in both an online or offline mode to protect the privacy of user data. When operating in an offline mode, for instance, the content privacy platform 101 can be a local component of the presentation device 103, the client application 1 13, and/or the browser 1 15. In one embodiment, the content servers 109 and/or advertising servers 119 can also be local components of the presentation device 103, the client application 113, and/or the browser 115 to support full functionality when operating in an offline or standalone mode. In yet another embodiment of an offline mode, the client application 113 and/or browser 115 can cache or pre- download content (e.g., personalized or non-personalized) from the content servers 109 and/or advertising servers 1 19. The content privacy platform 101 can then process, retrieve, and selectively presented the cached content in response detecting a presentation mode of the presentation device 103.
[0040] In one embodiment, the system 100 can determine whether the presentation device is in a presentation mode (e.g., a mode in which the presentation device 103 has made its display viewable to a public audience) using any number of means. For example, referring to the example of FIG. 2, the presentation device 201 can use hardware to detect that a physical connection (e.g., a cable 21 1) has been made between the presentation device 103 and external display hardware (e.g., the projector 203, monitor, television, or other similar display).
[0041] FIGs. 3A and 3B are diagrams of additional examples of detecting that a presentation device 103 is operating in a presentation mode, according to one embodiment. In the example of FIG. 3A, the presentation device 103 can detect that the device 103 has joined an online conference, for instance, by receiving a notification from conferencing software executing on the presentation device 103 that an online conference is active and/or that the conferencing software is currently sharing the user's screen on the presentation device 103 with other conference participants. If an online conference or screen sharing during the online conference is detected, the system 100 can determine that the presentation device 103 is in presentation mode. An optional message 301 can be displayed that to indicate that the presentation device 103 has been detected to join a conference (e.g., with screen sharing) and that a presentation mode has been activated or detected.
[0042] In the example of FIG. 3B, the presentation device 103 can use imaging and/or other proximity sensing technologies (e.g., an imaging/proximity sensor 321) to detect that multiple people 323 are within proximity of the presentation device 103 (e.g., within a threshold distance). Examples of the imaging/proximity sensor 321 include, but are not limited to, camera sensors, microphone sensors, near-field radio sensors, infrared sensors, smell sensors, and/or the like. If there are multiple people 325 detected, the system 100 can determine that the presentation device 103 is in presentation mode. An optional message 325 can be displayed to indicate that a presentation audience has been detected in proximity of the presentation device 103 and that a presentation mode has been activated or detected. Any such message 325 or notification may provide for user input (not shown) to verify whether or not the presentation mode determination is correct.
[0043] It is noted that the examples of detecting a presentation mode described with respect to FIGs. 2 and FIGs. 3A and 3B are provided by way of illustration and not as limitations. Accordingly, it is contemplated that the system 100 can use any equivalent means known in the art to detect that the presentation device 103 has made its display or any connected displays viewable by a public audience (e.g., other users). In one embodiment, it is contemplated that the presentation mode need not relate to visual data presented via a display. Instead, content (e.g., personalized or non-personalized) can also be audio content (e.g., audio files or audio portions of multimedia files) that can be broadcast by the presentation device 103 via an internal or external audio system. In yet another embodiment, content (e.g., personalized or non-personalized) can be any other type of signal that can be transmitted by the presentation device 103. For example, content can be potentially transmitted in the form of short-range or long-range wireless signal (e.g., Bluetooth, WiFi, near field communications, etc.). The content carried by these signals can then also be protected according to various embodiments described herein when the presentation device 103 is in presentation mode. In other words, presentation of content by the presentation device 103 can occur through any media during a presentation as long as that content is potentially exposed to a public audience. Regardless of the content media type, the system 100 can nonetheless apply the approach to protecting the privacy of personalized content according to the various embodiments described herein.
[0044] After detecting that the presentation device 103 is in a presentation mode, the system 100 can take privacy preserving measures, for instance, by modifying any personalized content so that private user data is not exposed while the presentation device 103 is in presentation mode. FIG. 4 is a diagram of illustrating an example of modifying personalized content presented by a presentation device that is operating in a presentation mode, according to one embodiment. In this example, a presentation device 103 is engaged in an online conference and has activated screen sharing so that its display 401 is viewable by other participants of the conference. During the conference, a browser application 115 is used to access a web page that is presented in a browser user interface (UI) 403 on the display 401. The web page, for example, includes code for retrieving and placing personalized advertisement targeted to the user (i.e., personalized content) in the browser UI 403 from, for instance, the advertising network 1 17. On retrieval of the personalized advertisement 405 and before the personalized advertisement 405 is actually displayed in the browser UI 403, the content privacy platform 101 and/or the browser application 1 15 can detect that presentation device 103 is in a presentation mode. Based on this detection, the content privacy platform 101 can then modify the personalized content so that it is not exposed. In this case, the personalized content 405 is blocked from being displayed as shown in the browser UI 407. The browser UI 407 then represents the output of the browser application 115 that is visible to the conference participants (e.g., the public audience) while the presentation device is in presentation mode). It is contemplated that the browser application 115 and/or the content privacy platform 101 can use any means to block the personalized advertisement (e.g., activating ad-blocking software, using native ad-blocking code, etc.). [0045] The example of FIG. 4 is provided to illustrate just one example of how personalized content can be modified to protect user privacy during a presentation. In other embodiments, the system 100 can use other modifying approaches including, but not limited to, masking content, retrieving other non-personalized content to present in place of the personalized content, etc. For example, with respect to an advertisement, instead of just blocking a personalized advertisement, the system 100 can request another more generic or non-personalized advertisement from the advertising network 117 to present in place of the personalized or targeted ad. The non- personalized content is generated without using user data 11 1 that is specific to a particular user. However, in another embodiment, the non-personalized content or advertisement can be generated based on data about the public audience of the presentation as a whole, so that any personalization of the content is not readily traceable to any one individual within the audience, thereby still protecting privacy on an individual user level.
[0046] In the above example, the browser application 115 is discussed. However, in the various embodiments described herein, the privacy protection functions of the browser application 115 are also applicable to any client application 113 executing on the presentation device 103. It is further contemplated that the client application 113 need not be a standalone application, but can also be any component of another application or of an operating system of the presentation device 103. By way of example, the client application 113 includes one or more components for receiving and/or presenting personalized and non-personalized content (e.g., advertisements, content recommendations, or other application content) to a user.
[0047] In one embodiment, the client application 113 and/or browser 115 include a content placement framework and related information data structures. By way of example, the content placement framework receives content and/or content inserts (e.g., personalized content, targeted advertisements, etc.) from, for instance, the content servers 109 and/or advertising servers 1 19. For example, content inserts (e.g., advertisements) are content data that can be inserted into other content (e.g., web page content) to present to a user. For example, content inserts are usually discrete and/or interchangeable content items that have a defined placement within a content layout (e.g., a web page). In one embodiment, the content inserts can be stored in or cached in the information data structures of the client application 113 and/or browser 115 for use in either online or offline mode, and for processing by the content privacy platform 101.
[0048] In other words, the content placement framework serves as the entry and exit points for receiving content (e.g., personalized or non-personalized) and then placing that content in relevant portions of a user interface for presentation to a user. In one embodiment, the content placement framework also includes logic for performing one or more functions of the content privacy platform 101 (e.g., detecting a presentation mode, receiving personalized content, modifying the personalized content for display during the presentation mode, etc.).
[0049] In one embodiment, the content placement framework can also relay user data 11 1 (e.g., context, profile information, etc.) to the content service provider 107 and/or the advertising network 117 to generate personalized content. In this way, the content provided by the content service provider 107 and/or the advertising network 117 can be enriched with personalized or other custom information. As noted above, because this personalized content is more specifically targeted and/or tailored to individual characteristics and/or preferences of a user, exposing such personalized content during a presentation may also compromise the user's privacy.
[0050] In one embodiment, the content placement framework has connectivity to components external to the client application 1 13 and/or browser 115 via one or more application interfaces. For example, the application interface facilitates communications between the client application 113 and/or browser 115 and other components of the system 100 within the presentation device 103 and/or external to the presentation device 103. In one embodiment, the application interface exposes its interface via standard application programming interfaces (APIs) to detect a presentation mode, receive personalized content, modify personalized content, or a combination thereof.
[0051] In one embodiment, the client application 1 13 and/or browser 115 includes a user interaction tracker for collecting user data 11 1 including, but not limited to: (1) historical user interactions and/or responses with the content servers 109, advertising servers 1 19, etc.; (2) historical context information (e.g., location, time, activity, etc.) when accessing content; (3) user profile information (e.g., preferences, demographics, etc.); etc. By way of example, the user interaction may include determining click through rates, conversion rates, etc. to facilitate determination of user response to specific content items (e.g., advertisements, media items, and/or other application content). In some embodiments, the user interaction tracker may perform more sophisticated monitoring of user interactions such as tracking application use, state changes (e.g., activation/deactivation of a presentation mode) associated with the presentation device 103, the applications or processes executing at the presentation device 103, or a combination thereof. In one embodiment, the user interaction tracker can also monitor context changes, profile information, etc. associated with the presentation device 103 or a user associated with the presentation device 103 to, for instance, facilitate detection of a presentation and/or the customization and/or personalization of content that is to be presented at the presentation device 103.
[0052] In one embodiment, the information collected by the user interaction tracker is stored in the interaction/profile/context data structure of the user data database 1 1 1. In addition, the user interaction tracker can operate via an interaction interface to retrieve interaction information from one or more applications or processes executing on the presentation device 103. The interaction interface can also provide and track connectivity information with respect to presentation displays (e.g., both internal and external presentation displays), online conferences, device sensor data (e.g., imaging/proximity sensor data), and/or other data of the presentation device 103 that can be used to determine when the presentation device is in presentation mode.
[0053] Returning to FIG. 1 , by way of example, the communication network 105 of system 100 includes one or more networks such as a data network, a wireless network, a telephony network, or any combination thereof. It is contemplated that the data network may be any local area network (LAN), metropolitan area network (MAN), wide area network (WAN), a public data network (e.g., the Internet), short range wireless network, or any other suitable packet- switched network, such as a commercially owned, proprietary packet-switched network, e.g., a proprietary cable or fiber-optic network, and the like, or any combination thereof. In addition, the wireless network may be, for example, a cellular network and may employ various technologies including enhanced data rates for global evolution (EDGE), general packet radio service (GPRS), global system for mobile communications (GSM), Internet protocol multimedia subsystem (IMS), universal mobile telecommunications system (UMTS), etc., as well as any other suitable wireless medium, e.g., worldwide interoperability for microwave access (WiMAX), Long Term Evolution (LTE) networks, code division multiple access (CDMA), wideband code division multiple access (WCDMA), wireless fidelity (WiFi), wireless LAN (WLAN), Bluetooth®, Internet Protocol (IP) data casting, satellite, mobile ad-hoc network (MANET), and the like, or any combination thereof.
[0054] The presentation device 103 is any type of mobile terminal, fixed terminal, or portable terminal including a mobile handset, station, unit, device, multimedia computer, multimedia tablet, internet node, communicator, desktop computer, laptop computer, notebook computer, netbook computer, tablet computer, personal communication system (PCS) device, personal navigation device, personal digital assistants (PDAs), audio/video player, digital camera/camcorder, positioning device, television receiver, radio broadcast receiver, electronic book device, game device, or any combination thereof, including the accessories and peripherals of these devices, or any combination thereof. It is also contemplated that the presentation device 103 can support any type of interface to the user (such as "wearable" circuitry, etc.).
[0055] By way of example, the content privacy platform 101 , the presentation device 103, the content service provider 107, the content servers 109, the advertising network 1 17, and the advertising servers communicate with each other and other components of the system 100 using well known, new or still developing protocols. In this context, a protocol includes a set of rules defining how the network nodes within the communication network 105 interact with each other based on information sent over the communication links. The protocols are effective at different layers of operation within each node, from generating and receiving physical signals of various types, to selecting a link for transferring those signals, to the format of information indicated by those signals, to identifying which software application executing on a computer system sends or receives the information. The conceptually different layers of protocols for exchanging information over a network are described in the Open Systems Interconnection (OSI) Reference Model. [0056] Communications between the network nodes are typically effected by exchanging discrete packets of data. Each packet typically comprises (1) header information associated with a particular protocol, and (2) payload information that follows the header information and contains information that may be processed independently of that particular protocol. In some protocols, the packet includes (3) trailer information following the payload and indicating the end of the payload information. The header includes information such as the source of the packet, its destination, the length of the payload, and other properties used by the protocol. Often, the data in the payload for the particular protocol includes a header and payload for a different protocol associated with a different, higher layer of the OSI Reference Model. The header for a particular protocol typically indicates a type for the next protocol contained in its payload. The higher layer protocol is said to be encapsulated in the lower layer protocol. The headers included in a packet traversing multiple heterogeneous networks, such as the Internet, typically include a physical (layer 1) header, a data- link (layer 2) header, an internetwork (layer 3) header and a transport (layer 4) header, and various application headers (layer 5, layer 6 and layer 7) as defined by the OSI Reference Model.
[0057] In one embodiment, the client application 1 13/browser application and the content privacy platform 101 interact according to a client-server model. According to the client-server model, a client process sends a message including a request to a server process, and the server process responds by providing a service (e.g., messaging, advertisements, etc.). The server process may also return a message with a response to the client process. Often the client process and server process execute on different computer devices, called hosts, and communicate via a network using one or more protocols for network communications. The term "server" is conventionally used to refer to the process that provides the service, or the host computer on which the process operates. Similarly, the term "client" is conventionally used to refer to the process that makes the request, or the host computer on which the process operates. As used herein, the terms "client" and "server" refer to the processes, rather than the host computers, unless otherwise clear from the context. In addition, the process performed by a server can be broken up to run as multiple processes on multiple hosts (sometimes called tiers) for reasons that include reliability, scalability, and redundancy, among others. [0058] FIG. 5 is a diagram of the components of a content privacy platform, according to one embodiment. By way of example, the content privacy platform 101 includes one or more components for providing privacy protection for a presentation device according to the various embodiments described herein. It is contemplated that the functions of these components may be combined or performed by other components of equivalent functionality. In this embodiment, the content privacy platform 101 includes a presentation mode detector module 501 , a content downloader module 503, a content modifier module 505, and a user interface module 507. The above presented modules and components of the content privacy platform 101 can be implemented in hardware, firmware, software, or a combination thereof. Though depicted as a separate entity in FIG. 1 , it is contemplated that the content privacy platform 101 may be implemented as a module of any of the components of the system 100 (e.g., a component of the presentation device 103, the content service provider 107, content servers 109, advertising network 1 17, advertising server 119, etc.). In another embodiment, one or more of the modules 501-507 may be implemented as a cloud based service, local service, native application, or combination thereof. The functions of these modules are discussed with respect to FIG. 6.
[0059] FIG. 6 is a flowchart of a process for providing privacy protection in a presentation device, according to one embodiment. In various embodiments, the content privacy platform 101 and/or any of the modules 501-507 of the content privacy platform 101 as shown in FIG. 5 may perform one or more portions of the process 600 and may be implemented in, for instance, a chip set including a processor and a memory as shown in FIG. 10. As such, the privacy routing platform 101 and/or the modules 501-507 can provide means for accomplishing various parts of the process 600, as well as means for accomplishing embodiments of other processes described herein in conjunction with other components of the system 100. Although the process 600 is illustrated and described as a sequence of steps, its contemplated that various embodiments of the process 600 may be performed in any order or combination and need not include all of the illustrated steps.
[0060] In step 601 , the presentation mode detector module 501 determines that a presentation device 103 is operating in a presentation mode. By way of example, a presentation mode is a mode in which the presentation device 103 has made one or more of an external or internal output device (e.g., displays, audio system, wireless transmitters, etc.) that is capable of presenting content (e.g., personalized or non-personalized content) accessible (e.g., viewable) by a public audience comprising one or more other users.
[0061] In one embodiment, the presentation mode is determined by detecting an activation of a presentation display hardware of the presentation device, a connection of an external presentation display hardware, or a combination thereof. For example, if the presentation device 103 has internal presentation display hardware (e.g., a built-in projector), then activation of this internal display hardware can be detected and used to determine that the device is in presentation mode. As another example, a presentation device 103 that is a hybrid portable computer can be configured with a screen that can swivel or otherwise be positioned to an outward facing configuration for presentation. In such a case, the positioning of the screen of the presentation device 103 in this outward facing configuration can be used to detect and determine that the presentation device 103 has entered a presentation mode. In another use case, as described above, the presentation mode detector module 501 can detect when an external presentation display (e.g., a projector 203) has been connected to the presentation device 103. This connection can be either a physical connection (e.g., via a cable) or a wireless connection (e.g., wireless display technology). It is noted that the examples above are provided only by way of illustration, and that it is contemplated that any detected configuration, activation, etc. of internal or external displays indicative of using to the presentation device 103 to make a presentation can be used according to the various embodiments described herein.
[0062] In one embodiment, the presentation mode is determined by detecting that the presentation device has activated a conferencing application, has connected to an online conference, or a combination thereof. The presentation mode detector module 501 may check or receive notifications from a conference application (e.g., a video conference application) executing on the presentation device 103 (e.g., via APIs or other code or scripts) about the status of the conference application. One status information can include whether or not the user has executed or activated the application. In one embodiment, the simple execution of the conference application can be used to determine that presentation device 103 has entered a presentation (e.g., based on the assumption that a user will activate or execute a conference application only when needed to make a presentation over the conference). In other embodiments, the presentation mode detector module 501 can use more specific status information to determine a presentation mode, such as when the conference application is used to actually join an online conference, when the user has shared a screen of the presentation device 103 over the online conference, and/or the like.
[0063] In one embodiment, the presentation mode is determined by detecting one or more other users within proximity of the presentation device using one or more sensors of the presentation device. In this embodiment, the presentation mode detector module 501 can collect sensor data (e.g., imaging/proximity sensor data), and then process the sensor data to determine whether there is an indication that multiple people are detected. For example, if multiple people are detected within a predetermined distance of the presentation device 103, the presentation mode detector module 501 can determine that the presentation device 103 is in a presentation mode. In another embodiment, the presentation mode detector module 501 can process the sensor data (e.g., images) to recognize objects or their characteristics (e.g., chairs arranged in a certain configuration, people arranged in a certain configuration, a certain number of people/objects, etc.) that are indicative of a presentation.
[0064] In yet another embodiment, the presentation detector module 501 can use contextual data (e.g., time, location, etc.) to determine whether a presentation mode is active. For example, presence of the presentation device 103 in a conference of an office building during work hours can be indicative of an ongoing presentation. In addition, the presentation device 103's location can be mapped to an indoor floor plan of the building to determine whether the presentation device is located in position that indicates a presentation (e.g., positioned at a lectern, at the front of a meeting room, on a stage, etc.). In yet another embodiment, the contextual information can be compared to calendar or other similar data to determine whether a meeting or presentation has been previously scheduled to determine whether the presentation device 103 is in presentation mode.
[0065] In step 603, the content downloader module 503 receives personalized content from a content server 109 for presentation at the presentation device 103. In one embodiment, the personalized content is generated based on user data 1 11 previously collected about a user. As previously described, such personalized content can be privacy sensitive because an observer other than the user who views the personalized content can potentially infer the underlying user data 11 1 that was used to generate the personalized content. In one embodiment, the personalized content can be received after the presentation mode is detected in step 601. In other embodiments, the receipt of such personalized content can act as a trigger to initiate the detection of whether the receiving presentation device 103 is in presentation mode, and whether privacy preserving actions are needed to protect the personalized content.
[0066] In one embodiment, the content server 109 or content service provider 107 can provide any type of content to the presentation. For example, the content server 109 can provide advertising content. Accordingly, in this case, the content server 109 can be an advertisement server 119 or an advertising network 117, and the personalized content is a personalized advertisement for the user.
[0067] In one embodiment, the personalized content is for display by a client application 113 or browser application 115 executing on the presentation device 103. For example, in the example of a browser application 115, the personalized content can be part of a web page or can be the advertisements or other content inserts included in the web page. In either case, client application 113 and/or the browser application 115 can include computer code for performing the modifying of the personalized content, the determining of the presentation mode, or a combination thereof.
[0068] In step 605, the content modifier module 505 modifies the personalized content while the presentation device 103 is operating in the presentation mode. In one embodiment, the modifying of the personalized content comprises blocking the personalized from being displayed at the presentation device. The content modifier module 505 can ignore or otherwise override an application request to display the personalized content. In this way, the personalized content is not displayed as long as the presentation device 103 is detected to be in the presentation mode.
[0069] In another embodiment, the personalized content is a part of other content received from the content server. For example, the personalized content can be a content insert (e.g., an advertisement) for display within other content (e.g., a web page). In this case, the modifying of the personalized content comprises omitting the personalized content from the other content. This omitting of the personalized content is performed before any of the personalized content is rendered on a presentation display of the presentation device 103 while in presentation mode.
[0070] In another embodiment, the content modifier module 505 can optionally interact with the content downloader module 503 to request non-personalized content from the content server 109. Then, the modifying of the personalized content comprises substituting the personalized content with the non-personalized content. As discussed above, the non-personalized content is any content that is generated without using the user data 11 1 for a specific individual user. This content can be any generic or non-specific content that would be provided by the content server 109 when no user data 111 is available.
[0071] However, in one embodiment, the non-personalized content can be generated for a determined audience of a presentation being presented at the presentation device during the presentation mode. In other words, the content modifier module 505 can identify the characteristics (e.g., location, time, profile, preferences, demographics, etc.) of the detected audience as a whole and then receive content personalized or targeted for the entire group as opposed to any individual within the group. In this way, the content server 109 and/or the advertising server 119 can still provide more relevant content without compromising individual privacy.
[0072] FIG. 7 is a ladder diagram that illustrates a sequence of messages and processes used in providing privacy protection in a presentation device when the personalized content is targeted advertising content, according to one embodiment. A network process is represented by a thin vertical line. A step or message passed from one process to another is represented by horizontal arrows. The processes represented in FIG. 7 are a browser application 1 15, a web server 701 (e.g., content server 109), and an advertising network 1 17. In this example, the browser application 1 15 is executing on a presentation device 103 (not shown in FIG. 7) that is configured to provide privacy protection according to the various embodiments described herein. [0073] At process 703, the browser application 115 sends a request to the web server 701 for the contents of a webpage for downloading and display at the browser 115. In this example, the browser 1 15 determines that the downloaded webpage includes a placeholder or content insert for displaying an advertisement that is to be provided by the advertising network 117.
[0074] Accordingly, at process 705, the browser 115 sends a request to the advertising network 1 17 to download an advertisement for placement in the webpage downloaded at process 703. In response, the advertising network 1 17 determines that the browser 115 is associated with a user for which it has previous browsing history data (e.g., user data 1 11). The advertising network 1 17 then generates a personalized advertisement based on this previous browsing history data for downloading to the browser 115. For example, the advertisement may relate to products similar to those previously viewed by the user according to the user's browsing history data.
[0075] At process 707, prior to displaying the downloaded personalized advertisement, the browser 115 and/or the content privacy platform 101 (not shown in FIG. 7) can detect whether the presentation device 103 executing the browser 115 is in a presentation mode. As previously discussed, in one embodiment, operating the presentation device 103 or browser 115 in presentation mode means that the browser view (e.g., a display user interface of the browser 1 15) is potentially watched by multiple users. For example, such a presentation mode can be determined when: (1) the presentation device 103 where the browser 115 is running is connected to a data projector; (2) the browser 115 or the presentation device 103's screen is shared in an online meeting; (3) the presentation device 103's camera/microphone, near- field radio, and/or proximity/smell sensor detect that the browser view is potentially watched by multiple users; etc.
[0076] In one embodiment, the webpage loaded in the browser 115 can use Javascript or other similar code to check whether the browser 1 15 is in presentation mode at any time (e.g., based on one or more conditions for determining a presentation mode described above and in the various embodiments described herein). In addition or alternatively, the webpage can also receive a Javascript event (notification) when the browser 1 15 goes to the presentation mode while rendering the webpage. For example, to implement this check or notification, a Javascript API or similar application interface can be used for this purpose. [0077] At process 709, if the webpage detects that the browser 115 is in presentation mode, at least one personally targeted (e.g., personalized) advertisement that is to be shown in the webpage can be modified for display while the presentation mode is active. For example, the modifying the at least one personally targeted advertisement shown in the webpage includes, but is not limited to, deleting or hiding the advertisement in part or in full.
[0078] Optionally, the webpage can select alternative advertisements that are not personalized to an individual user to display in place of the personalized advertisement received at process 705. For example, the webpage can determine a current location of the presentation device 103 (e.g., using a Javascript location API or equivalent) and then show advertisements targeted for an area related to this location in place of the personalized advertisement.
[0079] In addition or alternatively, the webpage can query calendar data from or of the user (e.g., using a Javascript calendar API or equivalent) to detect a presentation mode (e.g., by determining whether the calendar data includes an entry for a presentation meeting to be performed by the user) or detect additional information about the presentation audience who are potentially watching the browser view (e.g., by querying for the calendar data for users invited to the presentation). This additional information about the presentation audience can then be used to retrieve an advertisement from the advertising network 1 17 that is tailored or personalized to the presentation audience as a whole or to at least two of the users in the audience. In this way, the privacy of any individual user is protected because any publicly displayed advertisement is either not personalized or personalized to multiple users so that attributing the personalized advertisement is difficult or not possible.
[0080] In one embodiment, all advertisements discussed above are served from the advertising network 1 17, or a local cache at the presentation device 103.
[0081] FIGs. 8A and 8B are diagrams of example user interfaces in which personalized content presented on a presentation device 103 are replaced with non-personalized content, according to one embodiment. FIG. 8A depicts a presentation display 801 of a presentation device 103 operating in presentation mode. In this example, the presentation display 801 shows a browser view 803 that includes a personally targeted advertisement 805. In this example, the personally targeted advertisement 805 relate to cars because the associated user's browsing history indicates that he has recently searched car-related webpages for the displayed mode of car. This browsing history is potentially privacy sensitive. Accordingly, the content privacy platform 101 is modifying the personalized advertisement 805 in response to the detected presentation mode. The modifying of the personalized advertisement 805 includes requesting a non- personalized advertisement 807 from the advertising network 1 17 to display in place of the personalized advertisement 805. A browser view 809 containing the non-personalized advertisement 807 is then displayed on the presentation display 801 while the presentation device 103 is in presentation mode.
[0082] FIG. 8B illustrates an example of personalized content that is a personal photo used as a wallpaper background of the presentation device 103. As shown, a presentation display 821 is showing an operating system desktop in which a user has displayed a personal photograph 823 as the background image. In this example, the personal photograph 823 is the personalized content associated with the user and the client application 1 13 presenting the personalized content is an operating system process responsible for displaying background images. The content privacy platform 101 , for instance, can detect that the personal photograph 823 is personalized content and is not in the set of standard background images of the operating system. As with the example of FIG. 8A, the presentation device 103 that is connected to the presentation display 821 is in presentation mode, and so, the content privacy platform 101 is activated to protect the privacy of the personalized content (e.g., the personal photograph 823). In this example, the content privacy platform 101 modifies the personalized content by replacing the personal photograph 823 with a default background image 825 of the operating system while the presentation device 103 is in presentation. When the presentation device is detected to exit presentation mode (e.g., using opposite criteria described with detecting entering of the presentation mode), the content privacy platform 101 can restore the background image to the personal photograph 823.
[0083] The processes described herein for providing privacy protection in a presentation device may be advantageously implemented via software, hardware (e.g., general processor, Digital Signal Processing (DSP) chip, an Application Specific Integrated Circuit (ASIC), Field Programmable Gate Arrays (FPGAs), etc.), firmware or a combination thereof. Such exemplary hardware for performing the described functions is detailed below.
[0084] FIG. 9 illustrates a computer system 900 upon which an embodiment of the invention may be implemented. Computer system 900 is programmed (e.g., via computer program code or instructions) to provide privacy protection in a presentation device as described herein and includes a communication mechanism such as a bus 910 for passing information between other internal and external components of the computer system 900. Information (also called data) is represented as a physical expression of a measurable phenomenon, typically electric voltages, but including, in other embodiments, such phenomena as magnetic, electromagnetic, pressure, chemical, biological, molecular, atomic, sub-atomic and quantum interactions. For example, north and south magnetic fields, or a zero and non-zero electric voltage, represent two states (0, 1) of a binary digit (bit). Other phenomena can represent digits of a higher base. A superposition of multiple simultaneous quantum states before measurement represents a quantum bit (qubit). A sequence of one or more digits constitutes digital data that is used to represent a number or code for a character. In some embodiments, information called analog data is represented by a near continuum of measurable values within a particular range.
[0085] A bus 910 includes one or more parallel conductors of information so that information is transferred quickly among devices coupled to the bus 910. One or more processors 902 for processing information are coupled with the bus 910.
[0086] A processor 902 performs a set of operations on information as specified by computer program code related to providing privacy protection in a presentation device. The computer program code is a set of instructions or statements providing instructions for the operation of the processor and/or the computer system to perform specified functions. The code, for example, may be written in a computer programming language that is compiled into a native instruction set of the processor. The code may also be written directly using the native instruction set (e.g., machine language). The set of operations include bringing information in from the bus 910 and placing information on the bus 910. The set of operations also typically include comparing two or more units of information, shifting positions of units of information, and combining two or more units of information, such as by addition or multiplication or logical operations like OR, exclusive OR (XOR), and AND. Each operation of the set of operations that can be performed by the processor is represented to the processor by information called instructions, such as an operation code of one or more digits. A sequence of operations to be executed by the processor 902, such as a sequence of operation codes, constitute processor instructions, also called computer system instructions or, simply, computer instructions. Processors may be implemented as mechanical, electrical, magnetic, optical, chemical or quantum components, among others, alone or in combination.
[0087] Computer system 900 also includes a memory 904 coupled to bus 910. The memory 904, such as a random access memory (RAM) or other dynamic storage device, stores information including processor instructions for providing privacy protection in a presentation device. Dynamic memory allows information stored therein to be changed by the computer system 900. RAM allows a unit of information stored at a location called a memory address to be stored and retrieved independently of information at neighboring addresses. The memory 904 is also used by the processor 902 to store temporary values during execution of processor instructions. The computer system 900 also includes a read only memory (ROM) 906 or other static storage device coupled to the bus 910 for storing static information, including instructions, that is not changed by the computer system 900. Some memory is composed of volatile storage that loses the information stored thereon when power is lost. Also coupled to bus 910 is a nonvolatile (persistent) storage device 908, such as a magnetic disk, optical disk or flash card, for storing information, including instructions, that persists even when the computer system 900 is turned off or otherwise loses power.
[0088] Information, including instructions for providing privacy protection in a presentation device, is provided to the bus 910 for use by the processor from an external input device 912, such as a keyboard containing alphanumeric keys operated by a human user, or a sensor. A sensor detects conditions in its vicinity and transforms those detections into physical expression compatible with the measurable phenomenon used to represent information in computer system 900. Other external devices coupled to bus 910, used primarily for interacting with humans, include a display device 914, such as a cathode ray tube (CRT) or a liquid crystal display (LCD), or plasma screen or printer for presenting text or images, and a pointing device 916, such as a mouse or a trackball or cursor direction keys, or motion sensor, for controlling a position of a small cursor image presented on the display 914 and issuing commands associated with graphical elements presented on the display 914. In some embodiments, for example, in embodiments in which the computer system 900 performs all functions automatically without human input, one or more of external input device 912, display device 914 and pointing device 916 is omitted.
[0089] In the illustrated embodiment, special purpose hardware, such as an application specific integrated circuit (ASIC) 920, is coupled to bus 910. The special purpose hardware is configured to perform operations not performed by processor 902 quickly enough for special purposes. Examples of application specific ICs include graphics accelerator cards for generating images for display 914, cryptographic boards for encrypting and decrypting messages sent over a network, speech recognition, and interfaces to special external devices, such as robotic arms and medical scanning equipment that repeatedly perform some complex sequence of operations that are more efficiently implemented in hardware.
[0090] Computer system 900 also includes one or more instances of a communications interface 970 coupled to bus 910. Communication interface 970 provides a one-way or two-way communication coupling to a variety of external devices that operate with their own processors, such as printers, scanners and external disks. In general the coupling is with a network link 978 that is connected to a local network 980 to which a variety of external devices with their own processors are connected. For example, communication interface 970 may be a parallel port or a serial port or a universal serial bus (USB) port on a personal computer. In some embodiments, communications interface 970 is an integrated services digital network (ISDN) card or a digital subscriber line (DSL) card or a telephone modem that provides an information communication connection to a corresponding type of telephone line. In some embodiments, a communication interface 970 is a cable modem that converts signals on bus 910 into signals for a communication connection over a coaxial cable or into optical signals for a communication connection over a fiber optic cable. As another example, communications interface 970 may be a local area network (LAN) card to provide a data communication connection to a compatible LAN, such as Ethernet. Wireless links may also be implemented. For wireless links, the communications interface 970 sends or receives or both sends and receives electrical, acoustic or electromagnetic signals, including infrared and optical signals, that carry information streams, such as digital data. For example, in wireless handheld devices, such as mobile telephones like cell phones, the communications interface 970 includes a radio band electromagnetic transmitter and receiver called a radio transceiver. In certain embodiments, the communications interface 970 enables connection to the communication network 105 for providing privacy protection in a presentation device.
[0091] The term computer-readable medium is used herein to refer to any medium that participates in providing information to processor 902, including instructions for execution. Such a medium may take many forms, including, but not limited to, no n- volatile media, volatile media and transmission media. Non- volatile media include, for example, optical or magnetic disks, such as storage device 908. Volatile media include, for example, dynamic memory 904. Transmission media include, for example, coaxial cables, copper wire, fiber optic cables, and carrier waves that travel through space without wires or cables, such as acoustic waves and electromagnetic waves, including radio, optical and infrared waves. Signals include man-made transient variations in amplitude, frequency, phase, polarization or other physical properties transmitted through the transmission media. Common forms of computer-readable media include, for example, a floppy disk, a flexible disk, hard disk, magnetic tape, any other magnetic medium, a CD-ROM, CDRW, DVD, any other optical medium, punch cards, paper tape, optical mark sheets, any other physical medium with patterns of holes or other optically recognizable indicia, a RAM, a PROM, an EPROM, a FLASH-EPROM, any other memory chip or cartridge, a carrier wave, or any other medium from which a computer can read.
[0092] FIG. 10 illustrates a chip set 1000 upon which an embodiment of the invention may be implemented. Chip set 1000 is programmed to providing privacy protection in a presentation device as described herein and includes, for instance, the processor and memory components described with respect to FIG. 9 incorporated in one or more physical packages (e.g., chips). By way of example, a physical package includes an arrangement of one or more materials, components, and/or wires on a structural assembly (e.g., a baseboard) to provide one or more characteristics such as physical strength, conservation of size, and/or limitation of electrical interaction. It is contemplated that in certain embodiments the chip set can be implemented in a single chip.
[0093] In one embodiment, the chip set 1000 includes a communication mechanism such as a bus 1001 for passing information among the components of the chip set 1000. A processor 1003 has connectivity to the bus 1001 to execute instructions and process information stored in, for example, a memory 1005. The processor 1003 may include one or more processing cores with each core configured to perform independently. A multi-core processor enables multiprocessing within a single physical package. Examples of a multi-core processor include two, four, eight, or greater numbers of processing cores. Alternatively or in addition, the processor 1003 may include one or more microprocessors configured in tandem via the bus 1001 to enable independent execution of instructions, pipelining, and multithreading. The processor 1003 may also be accompanied with one or more specialized components to perform certain processing functions and tasks such as one or more digital signal processors (DSP) 1007, or one or more application- specific integrated circuits (ASIC) 1009. A DSP 1007 typically is configured to process real- world signals (e.g., sound) in real time independently of the processor 1003. Similarly, an ASIC 1009 can be configured to performed specialized functions not easily performed by a general purposed processor. Other specialized components to aid in performing the inventive functions described herein include one or more field programmable gate arrays (FPGA) (not shown), one or more controllers (not shown), or one or more other special-purpose computer chips.
[0094] The processor 1003 and accompanying components have connectivity to the memory 1005 via the bus 1001. The memory 1005 includes both dynamic memory (e.g., RAM, magnetic disk, writable optical disk, etc.) and static memory (e.g., ROM, CD-ROM, etc.) for storing executable instructions that when executed perform the inventive steps described herein to provide privacy protection in a presentation device. The memory 1005 also stores the data associated with or generated by the execution of the inventive steps.
[0095] FIG. 11 is a diagram of exemplary components of a mobile station (e.g., handset) capable of operating in the system of FIG. 1 , according to one embodiment. Generally, a radio receiver is often defined in terms of front-end and back-end characteristics. The front-end of the receiver encompasses all of the Radio Frequency (RF) circuitry whereas the back-end encompasses all of the base-band processing circuitry. Pertinent internal components of the telephone include a Main Control Unit (MCU) 1103, a Digital Signal Processor (DSP) 1 105, and a receiver/transmitter unit including a microphone gain control unit and a speaker gain control unit. A main display unit 1107 provides a display to the user in support of various applications and mobile station functions that offer automatic contact matching. An audio function circuitry 1109 includes a microphone 111 1 and microphone amplifier that amplifies the speech signal output from the microphone 1111. The amplified speech signal output from the microphone 111 1 is fed to a coder/decoder (CODEC) 1113.
[0096] A radio section 1115 amplifies power and converts frequency in order to communicate with a base station, which is included in a mobile communication system, via antenna 11 17. The power amplifier (PA) 11 19 and the transmitter/modulation circuitry are operationally responsive to the MCU 1103, with an output from the PA 11 19 coupled to the duplexer 1121 or circulator or antenna switch, as known in the art. The PA 1 119 also couples to a battery interface and power control unit 1120.
[0097] In use, a user of mobile station 1101 speaks into the microphone 111 1 and his or her voice along with any detected background noise is converted into an analog voltage. The analog voltage is then converted into a digital signal through the Analog to Digital Converter (ADC) 1123. The control unit 1103 routes the digital signal into the DSP 1 105 for processing therein, such as speech encoding, channel encoding, encrypting, and interleaving. In one embodiment, the processed voice signals are encoded, by units not separately shown, using a cellular transmission protocol such as global evolution (EDGE), general packet radio service (GPRS), global system for mobile communications (GSM), Internet protocol multimedia subsystem (IMS), universal mobile telecommunications system (UMTS), etc., as well as any other suitable wireless medium, e.g., microwave access (WiMAX), Long Term Evolution (LTE) networks, code division multiple access (CDMA), wireless fidelity (WiFi), satellite, and the like.
[0098] The encoded signals are then routed to an equalizer 1125 for compensation of any frequency-dependent impairments that occur during transmission though the air such as phase and amplitude distortion. After equalizing the bit stream, the modulator 1127 combines the signal with a RF signal generated in the RF interface 1129. The modulator 1127 generates a sine wave by way of frequency or phase modulation. In order to prepare the signal for transmission, an up- converter 1131 combines the sine wave output from the modulator 1127 with another sine wave generated by a synthesizer 1 133 to achieve the desired frequency of transmission. The signal is then sent through a PA 1119 to increase the signal to an appropriate power level. In practical systems, the PA 11 19 acts as a variable gain amplifier whose gain is controlled by the DSP 1105 from information received from a network base station. The signal is then filtered within the duplexer 1121 and optionally sent to an antenna coupler 1135 to match impedances to provide maximum power transfer. Finally, the signal is transmitted via antenna 1117 to a local base station. An automatic gain control (AGC) can be supplied to control the gain of the final stages of the receiver. The signals may be forwarded from there to a remote telephone which may be another cellular telephone, other mobile phone or a land-line connected to a Public Switched Telephone Network (PSTN), or other telephony networks.
[0099] Voice signals transmitted to the mobile station 1101 are received via antenna 11 17 and immediately amplified by a low noise amplifier (LNA) 1137. A down-converter 1139 lowers the carrier frequency while the demodulator 1 141 strips away the RF leaving only a digital bit stream. The signal then goes through the equalizer 1125 and is processed by the DSP 1105. A Digital to Analog Converter (DAC) 1143 converts the signal and the resulting output is transmitted to the user through the speaker 1 145, all under control of a Main Control Unit (MCU) 1103-which can be implemented as a Central Processing Unit (CPU) (not shown).
[00100] The MCU 1103 receives various signals including input signals from the keyboard 1147. The keyboard 1147 and/or the MCU 1103 in combination with other user input components (e.g., the microphone 111 1) comprise a user interface circuitry for managing user input. The MCU 1103 runs a user interface software to facilitate user control of at least some functions of the mobile station 1 101 to provide privacy protection in a presentation device. The MCU 1103 also delivers a display command and a switch command to the display 1 107 and to the speech output switching controller, respectively. Further, the MCU 1103 exchanges information with the DSP 1105 and can access an optionally incorporated SIM card 1149 and a memory 1151. In addition, the MCU 1 103 executes various control functions required of the station. The DSP 1105 may, depending upon the implementation, perform any of a variety of conventional digital processing functions on the voice signals. Additionally, DSP 1105 determines the background noise level of the local environment from the signals detected by microphone 111 1 and sets the gain of microphone 11 11 to a level selected to compensate for the natural tendency of the user of the mobile station 1 101.
[00101] The CODEC 1113 includes the ADC 1123 and DAC 1143. The memory 1 151 stores various data including call incoming tone data and is capable of storing other data including music data received via, e.g., the global Internet. The software module could reside in RAM memory, flash memory, registers, or any other form of writable computer-readable storage medium known in the art including non-transitory computer-readable storage medium. For example, the memory device 1151 may be, but not limited to, a single memory, CD, DVD, ROM, RAM, EEPROM, optical storage, or any other non-volatile or non-transitory storage medium capable of storing digital data.
[00102] An optionally incorporated SIM card 1149 carries, for instance, important information, such as the cellular phone number, the carrier supplying service, subscription details, and security information. The SIM card 1149 serves primarily to identify the mobile station 1101 on a radio network. The card 1149 also contains a memory for storing a personal telephone number registry, text messages, and user specific mobile station settings.
[00103] While the invention has been described in connection with a number of embodiments and implementations, the invention is not so limited but covers various obvious modifications and equivalent arrangements, which fall within the purview of the appended claims. Although features of the invention are expressed in certain combinations among the claims, it is contemplated that these features can be arranged in any combination and order.

Claims

CLAIMS WHAT IS CLAIMED IS:
1. A method comprising:
determining that a presentation device is operating in a presentation mode;
receiving personalized content from a content server for presentation at the presentation
device, wherein the personalized content is generated based on user data previously collected about a user; and
modifying the personalized content while the presentation device is operating in the
presentation mode.
2. The method of claim 1, wherein the modifying of the personalized content comprises blocking the personalized from being displayed at the presentation device.
3. The method of claim 1, wherein the personalized content is a part of other content received from the content server, and wherein the modifying of the personalized content comprises omitting the personalized content from the other content.
4. The method of claims 1, further comprising requesting non-personalized content from the content server, wherein the modifying of the personalized content comprises substituting the personalized content with the non-personalized content.
5. The method of claim 4, wherein the non-personalized content is generated for a determined audience of a presentation being presented at the presentation device during the presentation mode.
6. The method according to any of claims 1-5, wherein the content server is an advertisement server, and wherein the personalized content is a personalized advertisement for the user.
7. The method of claim 1-5, wherein the personalized content is for display by a browser application executing on the presentation device, and wherein the browser application includes code for performing the modifying of the personalized content, the determining of the presentation mode, or a combination thereof.
8. The method according to any of claims 1-5, wherein the presentation mode is determined by detecting an activation of a presentation display hardware of the presentation device, a connection of an external presentation display hardware, or a combination thereof.
9. The method according to any of claims 1-5, wherein the presentation mode is determined by detecting that the presentation device has activated a conferencing application, has connected to an online conference, or a combination thereof.
10. The method according to any of claims 1-5, wherein the presentation mode is determined by detecting one or more other users within proximity of the presentation device using one or more sensors of the presentation device.
1 1. An apparatus comprising:
at least one processor; and
at least one memory including computer program code for one or more programs, the at least one memory and the computer program code configured to, with the at least one processor, cause the apparatus to perform at least the following,
determine that a presentation device is operating in a presentation mode; receive personalized content from a content server for presentation at the presentation device, wherein the personalized content is generated based on user data previously collected about a user; and modify the personalized content while the presentation device is operating in the presentation mode.
12. The apparatus of claim 11, wherein the modifying of the personalized content comprises blocking the personalized from being displayed at the presentation device.
13. The apparatus of claim 1 1, wherein the personalized content is a part of other content received from the content server, and wherein the modifying of the personalized content comprises omitting the personalized content from the other content.
14. The apparatus of claims 1 1, wherein the apparatus is further caused to request non- personalized content from the content server, and wherein the modifying of the personalized content comprises substituting the personalized content with the non-personalized content.
15. The apparatus of claim 14, wherein the non-personalized content is generated for a determined audience of a presentation being presented at the presentation device during the presentation mode.
16. The apparatus according to any of claims 11-15, wherein the content server is an advertisement server, and wherein the personalized content is a personalized advertisement for the user.
17. The apparatus of claim 16, wherein the personalized content is for display by a browser application executing on the presentation device, and wherein the browser application includes code for performing the modifying of the personalized content, the determining of the
presentation mode, or a combination thereof.
18. The apparatus according to any of claims 11-15, wherein the presentation mode is determined by detecting an activation of a presentation display hardware of the presentation device, a connection of an external presentation display hardware, or a combination thereof.
19. The apparatus according to any of claims 11-15, wherein the presentation mode is determined by detecting that the presentation device has activated a conferencing application, has connected to an online conference, or a combination thereof.
20. The apparatus according to any of claims 11-15, wherein the presentation mode is determined by detecting one or more other users within proximity of the presentation device using one or more sensors of the presentation device.
21. A no n- transitory computer- readable storage medium carrying one or more sequences of one or more instructions which, when executed by one or more processors, cause an apparatus to perform:
determining that a presentation device is operating in a presentation mode;
receiving personalized content from a content server for presentation at the presentation
device, wherein the personalized content is generated based on user data previously collected about a user; and
modifying the personalized content while the presentation device is operating in the
presentation mode.
22. The non- transitory computer- readable storage medium of claim 21, wherein the modifying of the personalized content comprises blocking the personalized from being displayed at the presentation device.
23. The non- transitory computer- readable storage medium of claim 21, wherein the personalized content is a part of other content received from the content server, and wherein the modifying of the personalized content comprises omitting the personalized content from the other content.
24. The non-transitory computer-readable storage medium of claims 21, wherein the apparatus is further caused to request non-personalized content from the content server, and wherein the modifying of the personalized content comprises substituting the personalized content with the non-personalized content.
25. The non- transitory computer- readable storage medium of claim 24, wherein the non- personalized content is generated for a determined audience of a presentation being presented at the presentation device during the presentation mode.
26. The non-transitory computer-readable storage medium according to any of claims 21-25, wherein the content server is an advertisement server, and wherein the personalized content is a personalized advertisement for the user.
27. The non- transitory computer- readable storage medium of claim 26, wherein the personalized content is for display by a browser application executing on the presentation device, and wherein the browser application includes code for performing the modifying of the personalized content, the determining of the presentation mode, or a combination thereof.
28. The non-transitory computer-readable storage medium according to any of claims 21-25, wherein the presentation mode is determined by detecting an activation of a presentation display hardware of the presentation device, a connection of an external presentation display hardware, or a combination thereof.
29. The non-transitory computer-readable storage medium according to any of claims 21-25, wherein the presentation mode is determined by detecting that the presentation device has activated a conferencing application, has connected to an online conference, or a combination thereof.
30. The non-transitory computer-readable storage medium according to any of claims 1-5, wherein the presentation mode is determined by detecting one or more other users within proximity of the presentation device using one or more sensors of the presentation device.
31. An apparatus comprising means for performing at least the method of any of claims 1-10.
32. A computer program product including one or more sequences of one or more instructions which, when executed by one or more processors, cause an apparatus to at least perform at least the method of any of claims 1-10.
33. A method comprising facilitating access to at least one interface configured to allow access to at least one service, the at least one service configured to perform at least the method of any of claims 1-10.
34. A method comprising facilitating creating and/or facilitating modifying (1) at least one device user interface element and/or (2) at least one device user interface functionality, the (1) at least one device user interface element and/or (2) at least one device user interface functionality based, at least in part, on at least the method of any of claims 1-10.
PCT/FI2017/050395 2017-05-26 2017-05-26 Method and apparatus for privacy protection in a presentation device WO2018215690A1 (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
PCT/FI2017/050395 WO2018215690A1 (en) 2017-05-26 2017-05-26 Method and apparatus for privacy protection in a presentation device

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
PCT/FI2017/050395 WO2018215690A1 (en) 2017-05-26 2017-05-26 Method and apparatus for privacy protection in a presentation device

Publications (1)

Publication Number Publication Date
WO2018215690A1 true WO2018215690A1 (en) 2018-11-29

Family

ID=64396299

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/FI2017/050395 WO2018215690A1 (en) 2017-05-26 2017-05-26 Method and apparatus for privacy protection in a presentation device

Country Status (1)

Country Link
WO (1) WO2018215690A1 (en)

Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20130086603A1 (en) * 2011-10-04 2013-04-04 Absio Corporation Method and apparatus for precision interest matching locally stored content
US20130304817A1 (en) * 2012-05-14 2013-11-14 Samsung Electronics Co., Ltd. Content delivery system with content sharing mechanism and method of operation thereof
US20140173442A1 (en) * 2012-12-18 2014-06-19 Microsoft Corporation Presenter view in presentation application
US20170039389A1 (en) * 2013-12-24 2017-02-09 Intel Corporation Privacy enforcement via localized personalization

Patent Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20130086603A1 (en) * 2011-10-04 2013-04-04 Absio Corporation Method and apparatus for precision interest matching locally stored content
US20130304817A1 (en) * 2012-05-14 2013-11-14 Samsung Electronics Co., Ltd. Content delivery system with content sharing mechanism and method of operation thereof
US20140173442A1 (en) * 2012-12-18 2014-06-19 Microsoft Corporation Presenter view in presentation application
US20170039389A1 (en) * 2013-12-24 2017-02-09 Intel Corporation Privacy enforcement via localized personalization

Similar Documents

Publication Publication Date Title
US20230112569A1 (en) Method and apparatus for managing files in an online account
US8996688B2 (en) Method and apparatus for monitoring and controlling data sharing
US9883340B2 (en) Method and apparatus for providing group route recommendations
US20160140625A1 (en) Method and apparatus for distributing items using a social graph
US20130340086A1 (en) Method and apparatus for providing contextual data privacy
US9412021B2 (en) Method and apparatus for controlling transmission of data based on gaze interaction
US20140123157A1 (en) Method and apparatus for providing application notifications
US20120198347A1 (en) Method and apparatus for enhancing user based content data
US20100325154A1 (en) Method and apparatus for a virtual image world
US20150134687A1 (en) System and method of sharing profile image card for communication
US10475137B2 (en) Method and apparatus for socially aware applications and application stores
US20150072663A1 (en) Method and Apparatus for Providing Zone-Based Device Interaction
US20130226926A1 (en) Method and apparatus for acquiring event information on demand
US20120192247A1 (en) Method and apparatus for providing data based on granularity information
US20110239142A1 (en) Method and apparatus for providing content over multiple displays
US20130254716A1 (en) Method and apparatus for presenting content via social networking messages
US20150193399A1 (en) Method and apparatus for determining partial updates for a document object model
US10275421B1 (en) Transmitting a state of a mobile application to an additional mobile application executing on a client device
US9571604B2 (en) Method and apparatus for distributing collaborative content
CA2779649C (en) Method and apparatus for organizing messages and attachments as a conversation
US20130151462A1 (en) Method and apparatus for private collaborative filtering
US10229138B2 (en) Method and apparatus for tagged deletion of user online history
US20140136650A1 (en) Method and apparatus for subscription of notifications based on content items
US20140075348A1 (en) Method and apparatus for associating event types with place types
US20130326379A1 (en) Method and apparatus for providing an interface for triggering device action

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 17910870

Country of ref document: EP

Kind code of ref document: A1

NENP Non-entry into the national phase

Ref country code: DE

122 Ep: pct application non-entry in european phase

Ref document number: 17910870

Country of ref document: EP

Kind code of ref document: A1