US 11,687,672 B1Granted

Data access gateway for security and privacy

AssigneeBeijing Bytedance Network Technology Co., Ltd.

InventorsJianqing Zhang, Zhengqin Luo, Zhipeng Tian, Lifeng Sang, Mu Du, Ruoxin Shen, Xuan Zhang

Life of this patent

Estimating the term…

Loading patent…

Abstract

Systems and methods for processing data are described. More specifically, a query request may be received and a data pattern may be identified in the query request. Personally identifiable information associated with the query request may then be de-pseudonymized. Accordingly, a second request using the de-pseudonymized personally identifiable information and receiving a response to the second request may be generated. The personally identifiable information in the response may be pseudonymized such that the pseudonymized personally identifiable information and data included in the response is provided to a client.

Claims20

Dependent claims

A method for processing data, the method comprising:

receiving a query request, the query request including a pseudonymized user identifier;
querying one or more query engines that query a data pattern library and a desensitization strategy based on the received pseudonymized user identifier and identifying a data pattern in the data pattern library based on the pseudonymized user identifier of the query request;
de-pseudonymizing the pseudonymized user identifier of the query request based on the desensitization strategy and the identified data pattern in the data pattern library, wherein the pseudonymized user identifier is used to request a real user identifier based on the pseudonymized user identifier, the desensitization strategy, and the identified data pattern in the data pattern library;
generating a second request using the de-pseudonymized pseudonymized user identifier and receiving a response to the second request;
pseudonymizing the real user identifier in the response;
and
providing the pseudonymized user identifier and data included in the response to a client.

4 more elements

A system for processing data, the system comprising:

a storage area;
and
a data access gateway for security privacy configured to:
receive a query request, the query request including a pseudonymized user identifier;
query one or more query engines that query a data pattern library and a desensitization strategy based on the received pseudonymized user identifier and identify a data pattern in the data pattern library based on the pseudonymized user identifier of the query request;
de-pseudonymize the pseudonymized user identifier of the query request based on the desensitization strategy and the identified data pattern in the data pattern library, wherein the pseudonymized user identifier is used to request a real user identifier based on the pseudonymized user identifier, the desensitization strategy, and the identified data pattern in the data pattern library;
generate a second request using the de-pseudonymized pseudonymized user identifier and receiving a response to the second request;
pseudonymize the real user identifier in the response;
and
provide the pseudonymized user identifier and data included in the response to a client.

7 more elements

An electronic device, comprising:

a memory and a processor;
wherein the memory is used to store one or more computer instructions which, when executed by the processor, cause the processor to:
receive a query request, the query request including a pseudonymized user identifier;
query one or more query engines that query a data pattern library and a desensitization strategy based on the received pseudonymized user identifier and identify a data pattern in the data pattern library based on the pseudonymized user identifier of the query request;
de-pseudonymize the pseudonymized user identifier of the query request based on the desensitization strategy and the identified data pattern in the data pattern library, wherein the pseudonymized user identifier is used to request a real user identifier based on the pseudonymized user identifier, the desensitization strategy, and the identified data pattern in the data pattern library;
generate a second request using the de-pseudonymized pseudonymized user identifier and receiving a response to the second request;
pseudonymize the real user identifier in the response;
and
provide the pseudonymized user identifier and data included in the response to a client.

6 more elements

Dependencies are inferred from the claim text.

Facts

Application: 17/694,540Filed 14 Mar 2022 · us provisional application
Priority: 7 Jan 2022
Published: US 2023/0281338 A17 Sep 2023
Granted: 27 Jun 2023
Term ends: Not estimatedThe source records don’t support an estimate.

Classification9 codes

G06F 21/6254
Protecting personal data, e.g. for financial or medical purposes: by anonymising data, e.g. decorrelating personal data from the owner's…
G06F 21/604
Protecting data: tools and structures for managing or administering access control systems
G06F 21/6245
To a system of files or objects, e.g. local or distributed file system or database: protecting personal data, e.g. for financial or medical purposes
H04L 12/66
Data switching networks: arrangements for connecting between networks having differing types of switching systems, e.g. gateways