Back to results
US 10,380,366 B2Granted
Tracking privacy budget with distributed ledger
AssigneeSap SE
InventorsDaniel Bernau, Florian Hahn, Jonas Boehler
Life of this patent
Estimating the term…
Loading patent…
Loading patent…
AssigneeSap SE
InventorsDaniel Bernau, Florian Hahn, Jonas Boehler
Estimating the term…
Systems and methods are provided for sending a request to register a data offer from a data owner to participate in a distributed ledger, the request including information associated with the data offer and a privacy budget for the data offer, and wherein the information associated with the data offer and the privacy budget is stored in the distributed ledger and the data offer is accessible by third parties to the data owner. The systems and method further providing for receiving a request, associated with a third party computer, to access data associated with the data offer, processing a data request associated with the request to access data, based on determining that there is sufficient privacy budget to allow access to the data associated with the request to access data, to produce result data, anonymizing the result data, and updating the distributed ledger.
A computerized method, comprising:
A server computer associated with a first data owner comprising:
A non-transitory computer-readable medium comprising instructions stored thereon that are executable by at least one processor to cause a computing device associated with a first data owner to perform operations comprising:
Dependencies are inferred from the claim text.
Drawings are temporarily unavailable. Open the PDF at USPTO
From the US filing history. Foreign family members aren’t listed.
Protecting access to data via a platform, e.g. using keys or access control rules: to a system of files or objects, e.g. local or distributed file…
To a system of files or objects, e.g. local or distributed file system or database: protecting personal data, e.g. for financial or medical purposes
Finance; Insurance; Tax strategies; Processing of corporate or income taxes: accounting
Computing and data processing
About 10 years 10 months of term left · ends 26 Aug 2037 (estimated)
With the rise of data driven application scenarios, such as machine learning, there is an opportunity to enable sharing of master data (e.g., as training data). While access to data in general has improved, data sharing is still not a seamless activity and is, for example, a major barrier for value capturing in areas such as the U.S. healthcare market. Moreover, there are risks when sharing data because data may reveal insights into a company's business model or sensitive information about individuals. Furthermore, there are ethical considerations in regards to the decisions of machine learning approaches like neural networks (e.g., what influence the data of an individual may have in the training data). Research has shown that these risks also hold when data is anonymized with improper suppression methods by re-identification attacks.
Various ones of the appended drawings merely illustrate example embodiments of the present disclosure and should not be considered as limiting its scope.
FIG. 1 is a block diagram illustrating a networked system, according to some example embodiments.
FIG. 2 is a diagram illustrating a decentralized architecture, according to some example embodiments.
Systems and methods described herein provide a distributed architecture to optimize an interactive model in differential privacy from a three party to a two party model by utilizing distributed ledger technology. This distributed architecture provides for an anonymization technique to address threats, such as re-identification threats, and realizes a transparent market for sharing anonymized data. Involved parties may remain sovereigns of their own data while being enabled by example embodiments to participate in a distributed data-as-a-service business model.
For example, data owners may register one or more data offers to participate in a distributed ledger. The one or more data offers and associated privacy budgets are stored in the data ledger and the one or more data offers are accessible by third parties to each data owner. Each data owner may access or receive requests from one or more third parties to access data associated with the one or more data offers. The data owner analyzes the privacy budget for the data offer to determine if there is sufficient privacy budget to allow access to the data associated with the request to access data. The data owner processes a data request associated with the request to access data, based on determining that there is sufficient privacy budget to allow access to the data associated with the request to access data, to produce result data. The data owner anonymizes the result data, updates the balance for the privacy budget in the distributed ledger, and provides the anonymized result data to the third party.
FIG. 1 is a block diagram illustrating a networked system 100, according to some example embodiments. The system 100 may include one or more client devices such as client device 110. The client device 110 may comprise, but is not limited to, a mobile phone, desktop computer, laptop, portable digital assistant (PDA), smart phone, tablet, ultrabook, netbook, laptop, multi-processor system, microprocessor-based or programmable consumer electronic, game console, set-top box, computer in a vehicle, or any other communication device that a user may utilize to access the networked system 100. In some embodiments, the client device 110 may comprise a display module (not shown) to display information (e.g., in the form of user interfaces). In further embodiments, the client device 110 may comprise one or more of touch screens, accelerometers, gyroscopes, cameras, microphones, global positioning system (GPS) devices, and so forth. The client device 110 may be a device of a user that is used to request and receive information via a digital assistant, and so forth.