Verifying ad requests

Abstract

A method for verifying an ad request includes verifying a signature including the ad request using symmetric or asymmetric keys. Using symmetric keys, after an ad request having a first signature is received, a signature generation algorithm is executed to generate a second signature. If the first signature matches the second signature, then the ad request is determined to be verified. Using asymmetric keys, after an ad request having a signature is received, a signature verification algorithm is executed to determine if the signature matches the ad request. If so, then the ad request is determined to be verified.

1 . (canceled) 
     
     
         2 . A method comprising:
 receiving a first ad request including a first request for a first advertisement to be placed on a first ad space within a first piece of content;   receiving a first private key associated with a first publisher of the first piece of content;   executing a signature generation algorithm using the first ad request and the first private key to generate a first digital signature;   generating a first signed ad request that includes the first ad request and the first digital signature; and   transmitting the signed ad request to a downstream entity involved in transactions for sale of ad impressions.   
     
     
         3 . The method of  claim 2  wherein the first ad request comprises a Uniform Resource Location (URL), and wherein executing the signature generation algorithm using the first ad request and the first private key comprises applying the signature generation algorithm to at least a portion of the URL. 
     
     
         4 . The method of  claim 2 , further comprising:
 prior to executing the signature generation algorithm using the first ad request and the first private key:
 determining that the first publisher is associated with the first ad request; and 
 selecting the first private key, from a plurality of private keys, based on the first publisher. 
   
     
     
         5 . The method of  claim 2  wherein executing a signature generation algorithm comprises executing an Elliptic Curve Cryptography (ECC) algorithm. 
     
     
         6 . The method of  claim 2  wherein the entity that receives the first ad request and the first private key receives the first ad request and the first private key from an upstream entity involved in the real-time transactions for sale of ad impressions. 
     
     
         7 . The method of  claim 2  wherein the first ad request is generated in response to a loading of the first piece of content, and a first set of code of the first piece of content indicates a presence of the first ad space. 
     
     
         8 . The method of  claim 2  wherein the first ad space is an ad space for an audio stream or a video stream. 
     
     
         9 . The method of  claim 2  wherein the first ad space is an ad space for a still image, an animated image, a video, or an audio track. 
     
     
         10 . The method of  claim 2  wherein executing a signature generation algorithm comprises applying the signature generation algorithm to a first portion of the first ad request without applying the signature generation algorithm to a second portion of the first ad request. 
     
     
         11 . The method of  claim 2  wherein executing the signature generation algorithm using the first ad request and the first private key is performed by a device executing one or more software modules associated with a Supply Side Platform (SSP). 
     
     
         12 . The method of  claim 2  wherein executing the signature generation algorithm using the first ad request and the first private key is performed by a device executing one or more software modules associated with an ad exchange. 
     
     
         13 . A method, comprising:
 receiving a first signed ad request, the first signed ad request including a first request for a first advertisement to be placed on a first ad space within a first piece of content and a first digital signature generated using a first private key associated with a first publisher of the first piece of content;   identifying a first public key associated with the first publisher;   executing a signature verification method by applying the first public key to the first ad request and determining if the first digital signature matches the first ad request; and   responsive at least to determining that the first digital signature matches the first ad request, verifying that the first signed ad request is associated with the first publisher.   
     
     
         14 . The method of  claim 13 , further comprising:
 responsive at least to verifying that the first ad request is associated with the first publisher, placing a first bid for the first ad request.   
     
     
         15 . The method of  claim 14  wherein placing the first bid for the first ad request is executed by one or more devices associated with a Demand Side Platform (DSP). 
     
     
         16 . The method of  claim 14  wherein placing the first bid for the first ad request is executed by one or more devices associated with an advertiser. 
     
     
         17 . The method of  claim 13  wherein the first digital signature is generated using Elliptic Curve Cryptography (ECC). 
     
     
         18 . The method of  claim 13 , further comprising obtaining a plurality of public keys associated with a plurality of publishers. 
     
     
         19 . The method of  claim 18  wherein the public keys are obtained using a non-secure channel or network connection. 
     
     
         20 . The method of  claim 13  wherein executing a signature verification method comprises executing a signature verification method on a first portion of the first ad request without executing a signature verification method on a second portion of the first ad request. 
     
     
         21 . The method of  claim 13 , further comprising:
 receiving a second signed ad request, the second signed ad request including a second request for a second advertisement to be placed on a second ad space within a second piece of content and a second digital signature generated using a second private key associated with a second publisher of the second piece of web content;   identifying a second public key associated with the second publisher;   executing a signature verification method by applying the second public key to the second ad request and determining if the second digital signature matches the second ad request;   responsive to determining that the second digital signature does not match the second ad request, at least one of:
 refraining from placing any bid for the second ad request; 
 refraining from determining any bid price for an ad impression associated with the second ad request; or 
 generating an error message associated with unsuccessfully verifying the second ad request. 
   
     
     
         22 . The method of  claim 13  wherein the first signed ad request comprises a Uniform Resource Location (URL), and wherein executing the signature verification method comprises applying the signature verification method to at least a portion of the URL. 
     
     
         23 . The method of  claim 13  wherein receiving the first signed ad request comprises receiving the first signed ad request from an upstream entity involved in real-time transactions for sale of ad impressions. 
     
     
         24 . The method of  claim 13  wherein verifying that the first signed ad request is associated with the first publisher is responsive to determining a timestamp included in the first signed ad request is within a particular time window from a current time. 
     
     
         25 . The method of  claim 13  wherein executing the signature verification method by applying the first public key to the first ad request to determine if the first digital signature matches the first ad request is performed by a device executing one or more software modules associated with an ad exchange. 
     
     
         26 . The method of  claim 13  wherein executing the signature verification method by applying the first public key to the first ad request to determine if the first digital signature matches the first ad request is performed by a device executing one or more software modules associated with a Demand Side Platform (DSP). 
     
     
         27 . The method of  claim 13  wherein the first signed ad request is generated in response to a loading of the first piece of content, and a first set of code of the first piece of content indicates a presence of the first ad space. 
     
     
         28 . The method of  claim 13  wherein first ad space is an ad space for an audio stream or a video stream. 
     
     
         29 . The method of  claim 13  wherein the first ad space is an ad space for a still image, an animated image, a video, or an audio track. 
     
     
         30 . A nontransitory processor-readable storage medium storing instructions which, when executed by one or more processors, cause the one or more processors to:
 receive a first ad request including a first request for a first advertisement to be placed on a first ad space within a first piece of content;   receive a first private key associated with a first publisher of the first piece of content;   execute a signature generation algorithm using the first ad request and the first key to generate a first digital signature;   generate a first signed ad request that includes the first ad request and the first digital signature; and   transmit the signed ad request to a downstream entity involved in transactions for sale of ad impressions.   
     
     
         31 . A nontransitory processor-readable storage medium storing instructions which, when executed by one or more processors, cause the one or more processors to:
 receive a first signed ad request, the first signed ad request including a first request for a first advertisement to be placed on a first ad space within a first piece of content and a first digital signature generated using a first private key associated with a first publisher of the first piece of web content;   identify a first public key associated with the first publisher;   execute a signature verification method by applying the first public key to the first ad request and determining if the first digital signature matches the first ad request; and   responsive at least to determining that the first digital signature matches the first ad request, verify that the first signed ad request is associated with the first publisher.   
     
     
         32 . The nontransitory processor-readable storage medium of  claim 31 , wherein the instructions cause the one or more processors to, responsive at least to verifying that the first ad request is associated with the first publisher, place a first bid for the first ad request.