Privacy sandbox is finally coming

Preface

Anthony Chavez（GoogleVP,Android Security and privacy Department PM） stay 2.16 Published an article blog,Introducing the Privacy Sandbox on Android. Article address ：

https://www.blog.google/products/android/introducing-privacy-sandbox-android/

It is mentioned in this article that ：

• Google Play There are 90% Your app is free , Mainly because of the support of electronic advertising

• A good app The ecological system , Need for users 、 Developers and business models are beneficial

• Currently planning to use, already in web I've practiced it on the Internet privacy box programme , Synchronize the scheme in android On the platform

• But some details need to be improved with the help of the strength of the industry , plan 2022 Release the first at the end of the year beta release

Android Privacy Sandbox Technical solution

Google stay chrome It has been planned and practiced for many years privacy sandbox Technical solution , At present, we also hope to transplant to Android in .

Theoretically ,Privacy sandbox The scheme can be used for all three parties SDK, But at present, it will mainly focus on advertising SDK The governance of , After all, advertising SDK Is a key area for using user privacy data .

By reading the official technical documents, you can find , Currently in Android platform , The scheme mainly includes the following four directions ：

• SDK Runtime

• Topics

• FLEDGE on Android

• Attribution Reporting

SDKRuntime

A market-oriented release App It usually involves a large number of three parties SDK, Such as login SDK、 Dot SDK、PUSH SDK etc. , Most will also include advertising SDK.

these SDK And Apk（ host ） Share user data and permissions , May pose a threat to user privacy .

SDK Runtime The plan is to App Run time and SDK Separation at run time , Alone SDK Manage the operating environment of .

here ,SDK No longer enjoy and APK The same permissions and data access capabilities , And the behavior of obtaining system privacy data is received by the host APK Control of .

The application market also needs to provide corresponding support .

The application market should not only distribute applications , And support is needed SDK Upload 、 Review and distribute .App Declare the dependent in the manifest file SDK name 、 Version information , While downloading and installing , Will also download SDK Of “ Installation package ” Installation .

Topics

Google It provides a set of methods to obtain user preference tags API.

• Google User based application installation list , Through machine learning , Identify user preferences

• Google Not recommended topic cache , Every time through the interface to get

• Different applications get topics It could be different

• Every time a user installs a new application , It is possible to generate new topic

• User uninstalls an application , dependent topic It won't fail immediately , It will last for a while

FLEDGE on Android

FLEDGE: First Locally-Executed Decision over Groups Experiment

The first locally executed group decision experiment

FLEDGE Problem solving scenario , stay APP And APP Advertising behavior between , Not the user's personal interests . It's hard to understand the literal meaning directly , Let's take a look at the case .

A It is an e-commerce application , If the user is A There are items in your shopping cart that you haven't bought yet , Need to be in B Advertising display in . here Google Two sets of API To achieve this function , Avoid sharing or uploading sensitive data to the server ：

• Custom Audience API

• Ad Selection API

The background logic of advertising will also involve bidding . stay Ad Selection API in , Will guide sell-side Put the selection logic on the end side .

Attribution Reporting

Attribution report , Solve the problem of relying on cross end user ID for attribution transformation analysis .Attribution Reporting API It includes ：

• Attribution report

• Event level optimization suggestion report based on machine learning

• Reports of invalid traffic and advertising fraud

The domestic environment  

 

At home , In recent years, government departments （ Including the Ministry of industry and information technology of the Internet Information Office ） The compliance of Internet applications is regulated very strictly and frequently . For the head and waist on the market APP Conducted frequent audits , Application that is not in conformity and cannot be rectified within the specified time , Will be forced off the shelf .

according to the understanding of , This year, （2022 year ） The beginning is also about to focus on SDK On compliance issues .

Most of the proposed regulations focus on data acquisition 、 Use and handling specifications . If Google This set of Android Privacy sandbox Can be successfully introduced to domestic manufacturers , Major app stores and head company developers cooperate , Laws and regulations are supplemented by constraints , I believe that the governance of privacy will go to a big level .

Ref

Introducing the Privacy Sandbox on Android：

https://www.blog.google/products/android/introducing-privacy-sandbox-android/

Privacy Sandbox on Android：

https://developer.android.google.cn/design-for-safety/ads

from ：Android Privacy sandbox is finally coming ！