# US 12,182,309 B2 · Method and system for unifying de-identified data from multiple sources > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 12,182,309 B2 - Document ID: US12182309B2 - Status: Granted - Kind: B2 - Application number: 17/991,554 - Filed: 2022-11-21 - Published: 2023-05-25 - Granted: 2024-12-31 - Earliest claimed: 2021-11-23 - Assignees: Innovaccer Inc. - Applicants: Innovaccer Inc. - Inventors: Prashant Kumar; Varun Jain; Mridul Saran - Web page: https://patentgrep.com/patent/US12182309B2 ## CPC - G06F 21/6254: {by anonymising data, e.g. decorrelating personal data from the owner's identification} - H04L 9/0825: {using asymmetric-key encryption or public key infrastructure [PKI], e.g. key signature or public key certificates} - H04L 9/0861: {Generation of secret information including derivation or calculation of cryptographic keys or passwords} - H04L 9/0894: {Escrow, recovery or storing of secret information, e.g. secret key escrow or cryptographic key storage} - H04L 9/14: using a plurality of keys or algorithms - H04L 9/3213: {using tickets or tokens, e.g. Kerberos (network architectures or network communication protocols for entities authentication using tickets in a packet data network H04L63/0807)} - H04L 9/40: Network security protocols - H04L 63/0407: {wherein the identity of one or more communicating identities is hidden (cryptographic mechanisms or cryptographic arrangements for anonymous credentials or for identity based cryptographic systems H04L9/00)} - H04L 63/0428: {wherein the data content is protected, e.g. by encrypting or encapsulating the payload} - H04L 2209/42: Anonymization, e.g. involving pseudonyms - H04L 2209/88: Medical equipments - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract A method and a system are disclosed for generating a global identifier for linking or unifying a plurality of de-identified customer data received from multiple source environments. The plurality of customer data is de-identified based on a master salt and a master token is generated. The master token is encrypted using a source-encryption key to generate a source token. The source token is also encrypted using a target-encryption key to generate a transfer token. At a central environment or a central storage unit, the transfer token is decrypted and the source token is obtained. Thereafter, source token is decrypted to obtain the master token. At the central storage unit, the master token is hashed with a target salt to generate the global identifier which is subsequently used to unify the plurality of de-identified customer data. ## Claims ### Claim 1 A method for unifying a plurality of de-identified customer data from one or more source storage units, the method comprising: accessing, via the one or more source storage units over a communication network, a plurality of customer data; configuring a source processing unit, the source processing unit being in communication to the one or more source storage units and a source server, the source processing unit configured for: de-identifying the plurality of customer data based on a master salt to generate a master token; encrypting the master token using a source-encryption key to generate a source token; encrypting the source token using a target-encryption key to generate a transfer token; and allowing an authorized access of the transfer token via a secured channel at a central storage unit; and configuring a central processing unit, the central processing unit being in communication to the central storage unit and a central server, the central processing unit configured for: decrypting the transfer token using a target decryption key to obtain the source token; decrypting the source token using a source decryption key to obtain the master token; hashing the master token with a target salt to generate a global identifier; and unifying the plurality of de-identified customer data by using the global identifier. ### Claim 2 (depends on 1) The method as claimed in claim 1, wherein each of the plurality of customer data is associated with a corresponding identifier containing person identity information (PII) and non-PII information of respective customers. ### Claim 3 (depends on 2) The method as claimed in claim 2, wherein the master salt generates same master token at the one or more source storage units for any of the corresponding identifiers. ### Claim 4 (depends on 1) The method as claimed in claim 1, wherein the master salt is a randomly generated multi-digit alphanumeric code. ### Claim 5 (depends on 1) The method as claimed in claim 1, wherein the target salt is a randomly generated multi-digit alphanumeric code. ### Claim 6 (depends on 1) The method as claimed in claim 1, wherein the source-encryption key is a private key to encrypt the master token. ### Claim 7 (depends on 1) The method as claimed in claim 1, wherein the target encryption key is a public key to encrypt the source token. ### Claim 8 (depends on 1) The method as claimed in claim 1, wherein the source token is used by an authorized user to link respective customer data by accessing the source decryption key. ### Claim 9 A system for unifying a plurality of de-identified customer data from one or more source storage units, the system comprising: one or more source storage units 104 storing a plurality of customer data; a source processing unit connected in communication to the one or more source storage units and a source server in a communication network, the source processing unit configured for: de-identifying the plurality of customer data based on a master salt to generate a master token; encrypting the master token using a source-encryption key to generate a source token; encrypting the source token using a target-encryption key to generate a transfer token; and allowing an authorized access of the transfer token via a secured channel at a central storage unit; and a central processing unit connected in communication to the central storage unit and a central server in the communication network, the central processing unit is configured for: decrypting the transfer token using a target decryption key to obtain the source token; decrypting the source token using a source decryption key to obtain the master token; hashing the master token with a target salt to generate a global identifier; and unifying the plurality of de-identified customer data by using the global identifier. ### Claim 10 (depends on 9) The system as claimed in claim 9, wherein each of the plurality of customer data is associated with a corresponding identifier containing person identity information (PII) and non-PII information of respective customers. ### Claim 11 (depends on 10) The system as claimed in claim 10, wherein the master salt generates same master token at the one or more source storage units for any of the corresponding identifiers. ### Claim 12 (depends on 1) The system as claimed in claim 1, wherein the master salt is a randomly generated multi-digit alphanumeric code. ### Claim 13 (depends on 1) The system as claimed in claim 1, wherein the target salt is a randomly generated multi-digit alphanumeric code. ### Claim 14 (depends on 1) The system as claimed in claim 1, wherein the source-encryption key is a private key to encrypt the master token. ### Claim 15 (depends on 1) The system as claimed in claim 1, wherein the target encryption key is a public key to encrypt the source token. ### Claim 16 (depends on 1) The system as claimed in claim 1, wherein the source token is used by an authorized user to link respective customer data by accessing the source decryption key.