Verifiable anonymous data aggregation
AssigneeVia Science, Inc.
InventorsJesus Alejandro Cardenes Cabre, John Christopher Muddle, Madjid Aoudia, Jeremy Taylor
Life of this patent
Estimating the term…
Abstract
A system may be configured to combine zero-knowledge transport layer security (zkTLS) and AttestedHTTPS to allow authors to create functions for the anonymization and aggregation of data such that the functions may be reproduced in a deterministic, verifiable way. the system may allow data uploaders and others to trust that data has been uploaded and anonymized in a secure and verifiable way. The system may provide requestors with the results of aggregation in a manner that allows the requestor to prove that the result is the output of a verified function executed on anonymized data with the approval of the data uploaders.
Claims12
A computer-implemented method comprising:
- receiving, from first one or more system components corresponding to a first data uploader, first request data representing a first request to upload first data;
- sending, in response to the first request data, first response data representing (i) a first identifier corresponding to a data anonymization function, and (ii) a uniform resource locator (URL) corresponding to the data anonymization function, wherein the first identifier corresponds to a first artifact, stored on a distributed ledger, that links the first identifier to a first statement regarding the data anonymization function;
- in response to the first one or more system components using the first artifact to verify that the first identifier corresponds to the first statement, receiving the first data at an endpoint corresponding to the URL;
- processing the first data using the data anonymization function to determine first anonymized data;
- and
- sending, from the endpoint in response to receiving the first data, second response data representing a first statement that the first data was processed using the data anonymization function, the second response data bearing a digital signature corresponding to the endpoint.
A system, comprising:
- one or more processors;
- and
- at least one memory comprising instructions that, when executed by the one or more processors, cause the system to:
- receive, from first one or more system components corresponding to a first data uploader, first request data representing a first request to upload first data;
- send, in response to the first request data, first response data representing (i) a first identifier corresponding to a data anonymization function, and (ii) a uniform resource locator (URL) corresponding to the data anonymization function, wherein the first identifier corresponds to a first artifact, stored on a distributed ledger, that links the first identifier to a first statement regarding the data anonymization function;
- in response to the first one or more system components using the first artifact to verify that the first identifier corresponds to the first statement, receive the first data at an endpoint corresponding to the URL;
- process the first data using the data anonymization function to determine first anonymized data;
- and
- send, from the endpoint in response to receiving the first data, second response data representing a first statement that the first data was processed using the data anonymization function, the second response data bearing a digital signature corresponding to the endpoint.
Dependencies are inferred from the claim text.