Anonymous aggregated data collection

Claim 2

A data collection system, comprising: client devices each configured to receive content from a content provider: a first client device configured to perform a method comprising: receiving an anonymous data collection component from a second client device, the anonymous data collection component having aggregated media access information for one or more additional client devices, wherein the aggregated media access information in the anonymous data collection component is configured to maintain anonymity in terms of the one or more client devices from which each of the media access information is received; storing media access information of the first client device in the anonymous data collection component, wherein the media access information of tile first client device in the anonymous data collection component is configured to maintain anonymity in terms of the first client device: determining whether each client device identified in a set of unique identifiers has received the anonymous data collection component: selecting randomly a third client device from the set of unique identifiers if the third client device has not received the anonymous data collection component; and communicating the anonymous data collection component to the third client device.

Claim 3

A data collection system as recited in claim 1 , wherein the method further comprises encrypting the anonymous data collection component to generate an encrypted data structure; and communicating the encrypted data structure to the third client device.

Claim 4

A data collection system, comprising: client devices each configured to receive content from a content provider; a first client device configured to: create an anonymous data collection component to maintain aggregated media access information for one or more of the client devices, wherein the aggregated media access information in the anonymous data collection component is configured to maintain anonymity in terms of the one or more of the client devices from which each of the media access information is received; randomly select a second client device to receive the anonymous data collection component; and communicate the anonymous data collection component to the second client device.

Claim 5

A data collection system, comprising: client devices each configured to receive content from a content provider; a first client device configured to: create an anonymous data collection component to maintain aggregated media access information for one or more of the client devices, wherein the aggregated media access information in the anonymous data collection component is configured to maintain anonymity in terms of the one or more of the client devices from which each of the media access information is received; randomly select a second client device to receive the anonymous data collection component; and communicate the anonymous data collection component to the second client device.

Claim 6

A data collection system as recited in claim 3 , wherein the first client device is further configured to store media access information of the first client device in the anonymous data collection component, and wherein the media access information of the first client device is configured to maintain anonymity in terms of the first client device.

Claim 7

A data collection system as recited in claim 3 , wherein the first client device is further configured to store viewer profile data associated with the first client device in the anonymous data collection component.

Claim 8

A data collection system as recited in claim 3 , wherein the first client device is further configured to store random media access information in the anonymous data collection component.

Claim 9

A data collection system as recited in claim 3 , wherein the first client device is further configured to: store media access information of the first client device in the anonymous data collection component, wherein the media access information of the first client device is configured to maintain anonymity in terms of the first client device; and store random media access information in the anonymous data collection component to obscure the media access information of the first client device.

Claim 10

A data collection system as recited in claim 3 , wherein the first client device is further configured to: request a unique identifier corresponding to the second client device; receive the unique identifier; and communicate the anonymous data collection component to the second client device based on the unique identifier.

Claim 11

A data collection system as recited in claim 8 , wherein the first client device is further configured to receive an email address as the second client device unique identifier, and email the anonymous data collection component to the second client device.

Claim 12

A data collection system as recited in claim 8 , wherein the first client device is further configured to receive an Internet protocol address as the second client device unique identifier.

Claim 13

A data collection system as recited in claim 8 , wherein the first client device is further configured to: request a public key corresponding to the second client device from a key server; receive the public key and an email address as the second client device unique identifier; encrypt the anonymous data collection component with the public key to generate an encrypted data structure; and email the encrypted data structure to the second client device.

Claim 14

A data collection system as recited in claim 8 , wherein the first client device is further configured to: request a public key corresponding to the second client device from a key server; receive the public key and an Internet protocol address as the second client device unique identifier; encrypt the anonymous data collection component with the public key to generate an encrypted data structure; and communicate the encrypted data structure to the second client device.

Claim 15

A data collection system as recited in claim 3 , wherein the first client device is further configured to receive a set of unique identifiers, each unique identifier corresponding to a client device and the second client device randomly selected from the set of unique identifiers.

Claim 16

A data collection system as recited in claim 13 , wherein the first client device is further configured to store the set of unique identifiers in the anonymous data collection component.

Claim 17

A television-based entertainment system comprising the data collection system as recited in claim 3 .

Claim 18

A digital video recording system comprising the data collection system as recited in claim 3 .

Claim 19

A personal video recording system comprising the data collection system as recited in claim 3 .

Claim 20

A data collection system, comprising: client devices, each configured to receive content from a content provider and execute a data collection application; each data collection application configured to perform a method comprising: receiving an anonymous data collection component from a client device; storing media access information of a corresponding client device in the anonymous data collection component, the anonymous data collection component configured to maintain aggregated media access information for one or more of the client devices, wherein the aggregated media access information in the anonymous data collection component is configured to maintain anonymity in terms of the one or more client devices from which each of the media access information is received: determining from a set of unique identifiers each corresponding to a client device whether each client device identified in the set of unique identifiers has received the anonymous data collection component: selecting randomly a recipient client device from the set of unique identifiers if each client device identified in the set of unique identifiers has not received the anonymous data collection component; and communicating the anonymous data collection component to the recipient client device.

Claim 21

A data collection system, comprising: client devices, each configured to receive content from a content provider and execute a data collection application; each data collection application configured to perform a method comprising: receiving an anonymous data collection component from a client device; storing media access information of a corresponding client device in the anonymous data collection component, the anonymous data collection component configured to maintain aggregated media access information for one or more of the client devices, wherein the aggregated media access information in the anonymous data collection component is configured to maintain anonymity in terms of the one or more client devices from which each of the media access information is received: determining from a set of unique identifiers each corresponding to a client device whether each client device identified in the set of unique identifiers has received the anonymous data collection component: selecting randomly a recipient client device from the set of unique identifiers if each client device identified in the set of unique identifiers has not received the anonymous data collection component; and communicating the anonymous data collection component to the recipient client device.

Claim 22

A data collection system as recited in claim 18 , wherein the method further comprises encrypting the anonymous data collection component to generate an encrypted data structure before communicating the encrypted data structure to the recipient client.

Claim 23

A data collection system as recited in claim 19 , wherein the encrypting anonymous data collection component is performed by using a public key corresponding to the recipient client device, and wherein the public key corresponding to the recipient client device is requested from a key server.

Claim 24

A data collection system as recited in claim 18 , wherein the method further comprises: creating a second anonymous data collection component to maintain aggregated media access information for one or more of the client devices; storing media access information of the corresponding client device in the second anonymous data collection component, wherein the media access information of the corresponding client device in the second anonymous data collection component is configured to maintain anonymity in terms of the corresponding client device; and communicating the second anonymous data collection component to a randomly selected recipient client device.

Claim 25

A data collection system as recited in claim 21 , wherein the method further comprises storing viewer profile data associated with the corresponding client device in the second anonymous data collection component.

Claim 26

A data collection system as recited in claim 21 , wherein the method further comprises requesting a unique identifier corresponding to the recipient client device and communicate the second anonymous data collection component to the recipient client device based on the unique identifier.

Claim 27

A data collection system as recited in claim 21 , wherein the method further comprises: requesting a public key corresponding to the recipient client device from a key Server; requesting an address identifier from an address server; receiving the address identifier and the public key; encrypting the second anonymous data collection component with the public key to generate an encrypted data structure; and communicating the encrypted data structure to the recipient client device.

Claim 30

A method for anonymously collecting data as recited in claim 25 , further comprising storing media access information in the anonymous data collection component, the media access information to be stored in the anonymous data collection component is configured to maintain anonymity in terms of a client device from which the media access information is received.

Claim 31

A method for anonymously collecting data as recited in claim 25 , further comprising storing viewer profile data in the anonymous data collection component.

Claim 32

A method for anonymously collecting data as recited in claim 25 , further comprising storing random media access information in the anonymous data collection component.

Claim 33

A method for anonymously collecting data as recited in claim 25 , further comprising: storing media access information in the anonymous data collection component, wherein the media access information to be stored in the anonymous data collection component is configured to maintain anonymity in terms of a client device from which the media access information is received; and storing random media access information in the anonymous data collection component to obscure the media access information.

Claim 34

A method for anonymously collecting data as recited in claim 25 , further comprising receiving a set of unique identifiers from a content provider, each unique identifier corresponding to the one or more client devices and the client device randomly selected from the set of unique identifiers.

Claim 35

A method for anonymously collecting data as recited in claim 30 , further comprising storing the set of unique identifiers in the anonymous data collection component.

Claim 36

A method for anonymously collecting data as recited in claim 25 , further comprising: requesting a unique identifier corresponding to the client device; receiving the unique identifier; and communicating the anonymous data collection component to the client device based on the unique identifier.

Claim 37

A method for anonymously collecting data as recited in claim 32 , wherein: receiving the unique identifier includes receiving an email address as the unique identifier; and communicating includes emailing the anonymous data collection component to the client device.

Claim 38

A method for anonymously collecting data as recited in claim 32 , wherein receiving the unique identifier includes receiving an Internet protocol address as the unique identifier.

Claim 39

A method for anonymously collecting data as recited in claim 32 , further comprising: requesting a public key corresponding to the client device; receiving the public key and an email address as the unique identifier; encrypting the anonymous data collection component with the public key to generate an encrypted data structure; and emailing the encrypted data structure to the client device.

Claim 40

A method for anonymously collecting data as recited in claim 32 , further comprising: requesting a public key corresponding to the client device; receiving the public key and an Internet protocol address as the unique identifier; encrypting the anonymous data collection component with the public key to generate an encrypted data structure; and communicating the encrypted data structure to the client device.

Claim 41

One or more computer-readable media comprising computer-executable instructions that, when executed, direct a digital video recording system to perform the method of claim 25 .

Claim 42

One or more computer-readable media comprising computer-executable instructions that, when executed, direct a digital video recording system to: create a first anonymous data collection component to maintain aggregated media access information for one or more digital video recorders, wherein the aggregated media access information in the first anonymous data collection component is configured to maintain anonymity in terms of the one or more digital video recorders from which each of the media access information is received; store media access information in the anonymous data collection component, wherein the media access information in the anonymous data collection component is configured to maintain anonymity in terms of the digital video recording system; randomly select a digital video recorder to receive the anonymous data collection component; obtain a public key and an address identifier corresponding to the digital video recorder; encrypt the anonymous data collection component with the public key corresponding to the digital video recorder to generate an encrypted data structure; and communicate the encrypted data structure to the digital video recorder.

Claim 43

One or more computer-readable media comprising computer-executable instructions that, when executed, direct a digital video recording system to: create a first anonymous data collection component to maintain aggregated media access information for one or more digital video recorders, wherein the aggregated media access information in the first anonymous data collection component is configured to maintain anonymity in terms of the one or more digital video recorders from which each of the media access information is received; store media access information in the anonymous data collection component, wherein the media access information in the anonymous data collection component is configured to maintain anonymity in terms of the digital video recording system; randomly select a digital video recorder to receive the anonymous data collection component; obtain a public key and an address identifier corresponding to the digital video recorder; encrypt the anonymous data collection component with the public key corresponding to the digital video recorder to generate an encrypted data structure; and communicate the encrypted data structure to the digital video recorder.

Claim 44

One or more computer-readable media as recited in claim 38 , further comprising computer executable instructions that, when executed, direct the digital video recording system to store viewer profile data in the anonymous data collection component.

Claim 45

One or more computer-readable media as recited in claim 38 , further comprising computer executable instructions that, when executed, direct the digital video recording system to: receive at least a second anonymous data collection component; decrypt the second anonymous data collection component with a private key and password corresponding to the digital video recording system; store media access information in the second anonymous data collection component, the media access information being aggregated with additional media access information from one or more digital video recorders, wherein the aggregated media access information in the second anonymous data collection component is configured to maintain anonymity in terms of the one or more digital video recorders from which each of the media access information is received; randomly select a second digital video recorder to receive the second anonymous data collection component; obtain a public key and an address identifier corresponding to the second digital video recorder; encrypt the second anonymous data collection component with the public key corresponding to the second digital video recorder to generate a second encrypted data structure; and communicate the second encrypted data structure to the second digital video recorder.

Claim 46

One or more computer-readable media as recited in claim 38 , further comprising computer executable instructions that, when executed, direct the digital video recording system to: receive at least a second anonymous data collection component; decrypt the second anonymous data collection component with a private key and password corresponding to the digital video recording system; store media access information in the second anonymous data collection component, the media access information being aggregated with additional media access information from one or more digital video recorders, wherein the aggregated media access information in the second anonymous data collection component is configured to maintain anonymity in terms of the one or more digital video recorders from which each of the media access information is received; delete data that associates the media access information with the digital video recording system and that associates the additional media access information with any of the one or more digital video recorders; and communicate the second anonymous data collection component to a content provider.