US 12,699,809 B2Granted

User data deidentification system for IP addresses

AssigneeTeleSign Corporation

InventorsHumberto Morales, Gordana Djankovic, Cynthia Ng

Life of this patent

Estimating the term…

Loading patent…

Abstract

A data deidentification system that extracts insights from user data and retains both the insights and user data in a form that complies with applicable data privacy and related standards. The system receives user data, which can include personal identifying information and other sensitive data governed by one or more standards, including standards specifying how the data can be used and how long it can be retained. From the data, the system extracts insights characterizing various aspects of the associated users. The system also selectively hashes portions of the data, obscuring the identity of associated users. Neither the insights nor the selectively hashed data identify individual users, and therefore they are not subject to the same standards and can be retained indefinitely. Later, after the standards-protected data has been discarded, the system can provide insight information in response to a request.

Claims15

Dependent claims

A computer-implemented method of deidentifying an IP address associated with a user, the method comprising:

receiving transaction data associated with the user,
wherein the transaction data comprises an internet protocol (IP) address;
determining whether the IP address is an IPv4 address or an IPv6 address;
generating a plurality of classless inter-domain routing (CIDR) blocks corresponding to the IP address,
wherein the number of the generated CIDR blocks is based on whether the IP address is an IPv4 address or an IPv6 address;
hashing the plurality of CIDR blocks to generate a plurality of hashed CIDR blocks;
hashing the IP address to generate a hashed IP address;
extracting insight data from the transaction data,
wherein the insight data comprises non-identifying data characterizing the transaction data;
storing, as deidentified transaction data, the insight data, the hashed IP address, and the plurality of hashed CIDR blocks;
receiving a request for transaction data, the request comprising a requested IP address;
and
providing deidentified transaction data based on the requested IP address.

10 more elements

Dependencies are inferred from the claim text.

Facts

Application: 18/806,387Filed 15 Aug 2024 · continuation in part
Priority: 19 Aug 2022
Published: US 2024/0061957 A112 Dec 2024
Granted: 4 Aug 2026
Term ends: Not estimatedThe source records don’t support an estimate.

Classification6 codes

G06F 21/602
Protecting data: providing cryptographic facilities or services
G06F 21/6254
Protecting personal data, e.g. for financial or medical purposes: by anonymising data, e.g. decorrelating personal data from the owner's…
G06F 21/64
Protecting data: protecting data integrity, e.g. using checksums, certificates or signatures
H04L 63/0414
Wherein the identity of one or more communicating identities is hidden: during transmission, i.e. party's identity is protected against…

Family

Application17/891,914Parent of this continuation-in-part · filed 19 Aug 2022
Application63/519,936Us provisional application · filed 16 Aug 2023
US 2024/0411929 A1Pre-grant publication · published 12 Dec 2024
US 12,105,848 B2Parent of this continuation-in-part
US 2024/0061957 A1Published application
US 12,699,809 B2This patent

From the US filing history. Foreign family members aren’t listed.