Systems and methods for manipulation of private information on untrusted environments

A system for manipulation of private information in untrusted environments comprising:

• a trusted environment, comprising at least one processor, and further comprising a data set preparation engine, a data encryption key store, and an authenticator key store;
• and
• an untrusted computing environment comprising an analytical engine;
• wherein:
• the data set preparation engine receives a plurality of data records;
• and
• for each data record, the data set preparation engine:
• separates the data record of an unprotected data set into a confidential data attribute and a non-confidential data attribute;
• calculates an encrypted value for the confidential data attribute using an encryption algorithm;
• calculates an authentication value for the confidential data attribute, wherein the authentication value is one from among an unsigned hash and a signed hash;
• associates the encrypted value with the authentication value in a protected data set;
• aggregates data in the protected data set based on the authentication values;
• associates the non-confidential data record with the associated encrypted value and the authentication value;
• wherein the unprotected data set comprises a table of the confidential and non-confidential attributes, and includes
• a single unprotected name column whose rows include different names,
• first and second unprotected partial address columns, each unprotected partial address column providing a different part of a complete address for each name in the name column, and
• an unprotected additional attribute column providing an additional attribute for each name in the name column,
• wherein the protected data set comprises a table of the confidential and non-confidential attributes including
• two protected name columns corresponding to the single unprotected name column and including
• an authentication name column providing an authentication value for each name in the name column of the unprotected data set, and
• an encrypted value name column providing an encryption value for each name in the name column of the unprotected data set, and
• two protected partial address columns corresponding to the first unprotected partial address column and including
• an authentication partial address column providing an authentication value for each partial address in the first unprotected partial address column, and
• an encrypted value partial address column providing an encryption value for each partial address in the first unprotected partial address column, and
• an additional attribute column providing the same unprotected additional attribute for each name as in the unprotected data set;
• and
• exports the protected data set to the untrusted computing environment,
• wherein the additional attribute is the spoken language of people whose names appear in the single unprotected name column in the unprotected data set, and is the spoken language of people whose authentication values and encrypted values appear in the two protected name columns in the protected data set.