Back to results
US 11,106,821 B2Granted
Determining pseudonym values using tweak-based encryption
AssigneeMicro Focus LLC
InventorsTimothy Roake, Luther Martin
Life of this patent
Estimating the term…
Abstract
A technique includes accessing data that represents a plurality of values that are associated with a plurality of ranges. The technique includes determining a pseudonym value for a given value, where the given value is associated with a given range and determining the pseudonym includes encrypting the given value to provide the pseudonym value; controlling the encryption to cause the pseudonym value to be within the given range; and tweaking the encryption based on an attribute that is associated with the given value.
Claims20
A method comprising:
- accessing data representing a plurality of plaintext values having a plurality of ranges, wherein the plurality of plaintext values are associated with an attribute category, the plurality of plaintext values correspond to a collection of numbers for the attribute category, the plurality of ranges correspond to different ranges of numbers of the collection of numbers, and the collection of numbers has a statistical property;
- and
- determining a plurality of pseudonym values corresponding to the plurality of plaintext values and preserving the statistical property, wherein a first pseudonym value of the plurality of pseudonym values for a first plaintext value of the plurality of plaintext values is associated with a first range of the plurality of ranges, wherein determining the first pseudonym value of the plurality of pseudonym values comprises encrypting the first plaintext value of the plurality of plaintext values to provide the first pseudonym value, wherein the encrypting of the first plaintext value is controlled to cause the first pseudonym value to be within the first range and the encrypting of the plaintext value is tweaked based on an attribute associated with the first plaintext value.
A non-transitory storage medium storing instructions that, when executed by a machine, cause the machine to:
- access first data representing a plurality of plaintext values having a plurality of ranges, wherein the plurality of plaintext values are associated with an attribute category, the plurality of plaintext values correspond to a collection of numbers for the attribute category, the plurality of ranges correspond to different ranges of numbers of the collection of numbers, and the collection of numbers has a statistical property;
- and
- generate second data representing a plurality of pseudonym values corresponding to the plurality of plaintext values and preserving the statistical property, wherein a first pseudonym value of the plurality of pseudonym values for a first plaintext value of the plurality of plaintext values is associated with a first range of the plurality of ranges, wherein determining the first pseudonym value comprises encrypting the first plaintext value to provide the first pseudonym value, and wherein the encrypting is controlled to cause the first pseudonym value to be within the first range and the encrypting is tweaked based on an attribute associated with the first plaintext value.
An apparatus comprising:
- at least one processor;
- and
- a memory to store instructions to, when executed by the at least one processor, cause the at least one processor to:
- access data representing a plurality of plaintext values having a plurality of ranges, wherein the plurality of plaintext values are associated with an attribute category, the plurality of plaintext values correspond to a collection of numbers for the attribute category, the plurality of ranges correspond to different ranges of numbers of the collection of numbers, and the collection of numbers has a statistical property;
- and
- determining a plurality of tokens corresponding to the plurality of plaintext values and preserving the statistical property, wherein a first token of the plurality of tokens for a first plaintext value of the plurality of plaintext values is associated with a first range of the plurality of ranges, wherein determining the first token comprises encrypting the first plaintext value to provide the first token, wherein the encrypting is controlled to cause the first token to be within the first range of the plurality of ranges and the encrypting is tweaked based on an attribute associated with the first plaintext value.
3 more elements
Dependencies are inferred from the claim text.