Method and system for semantic preserving location encryption
AssigneeInternational Business Machines Corporation
InventorsAllon Adir, Lev Greenberg, Omri Soceanu
Life of this patent
Estimating the term…
Abstract
Embodiments of the present systems and methods may provide techniques for encryption of location information, while preserving a format and semantics of the information. For example, in an embodiment, a computer-implemented method for encrypting data may comprise receiving location data and generating encrypted data from the received location data, wherein the encrypted data preserves the format and semantics of the received location data.
Claims20
A method for encrypting data, the method comprising:
- obtaining, at a computer system comprising a processor, memory accessible by the processor, and computer program instructions stored in the memory and executable by the processor to perform the method, data indicating a location data from a data source system comprising a physical device having a physical location;
- determining, at the computer system, a semantic classification of the indicated location;
- transforming, at the computer system, the data indicating a location to an indicator using a bijective function, the indicator belonging to a range of indicators of the determined semantic classification;
- encrypting, at the computer system, the indicator using format preserving encryption;
- and
- transforming, at the computer system, the encrypted indicator to a second indicator using an inverse bijective function, wherein the semantic classification of the indicated location is preserved in the second indicator;
- and
- generating, at the computer system, encrypted data from the received location data, wherein the encrypted data preserves the format and semantics of the received data indicating a location.
A system for encrypting data, the system comprising a processor, memory accessible by the processor, and computer program instructions stored in the memory and executable by the processor to perform:
- obtaining, at the system, data indicating a location from a data source system comprising a physical device having a physical location;
- determining, at the system, a semantic classification of the indicated location;
- transforming, at the system, the data indicating a location to an indicator using a bijective function, the indicator belonging to a range of indicators of the determined semantic classification;
- encrypting, at the system, the indicator using format preserving encryption;
- and
- transforming, at the system, the encrypted indicator to a second indicator using an inverse bijective function, wherein the semantic classification of the indicated location is preserved in the second indicator;
- and
- generating, at the system, encrypted data from the received location data, wherein the encrypted data preserves the format and semantics of the received data indicating a location.
A computer program product for encrypting data, the computer program product comprising a non-transitory computer readable storage having program instructions embodied therewith, the program instructions executable by a computer, to cause the computer to perform a method comprising:
- obtaining, at the computer system comprising a processor, memory accessible by the processor, and computer program instructions stored in the memory and executable by the processor to perform the method, data indicating a location from a data source system comprising a physical device having a physical location;
- determining, at the computer system, a semantic classification of the indicated location;
- transforming, at the computer system, the data indicating a location to an indicator using a bijective function, the indicator belonging to a range of indicators of the determined semantic classification;
- encrypting, at the computer system, the indicator using format preserving encryption;
- and
- transforming, at the computer system, the encrypted indicator to a second indicator using an inverse bijective function, wherein the semantic classification of the indicated location is preserved in the second indicator;
- and
- generating, at the computer system, encrypted data from the received location data, wherein the encrypted data preserves the format and semantics of the received data indicating a location.
Dependencies are inferred from the claim text.