Data Anonymization for Distributed Hierarchical Networks

A distributed hierarchical system comprising:

• a count determining module associated with a first network node within a group of network nodes, wherein the count determining module is configured to:
• determine a first set of attribute hierarchy counts that indicate a number of occurrences of corresponding attributes that are stored at the first network node and have not been transmitted upstream towards a hub of the distributed hierarchical system;
• and
• an anonymization module associated with the first network node, wherein the anonymization module is configured to:
• receive, from a second network node, a second set of attribute hierarchy counts that indicate a number of occurrences of corresponding attributes that are stored at the second network node and have not been transmitted upstream towards the hub;
• and
• determine whether a sum based on the first set of attribute hierarchy counts and the second set of attribute hierarchy counts satisfies an anonymization criterion, wherein the sum indicates a number of collective occurrences for a corresponding attribute that are stored at the first network node and the second network node and that have not been transmitted upstream towards the hub.

A device comprising:

• a network interface;
• a processor configured to execute computer readable instructions included on a non-transitory memory;
• and
• a non-transitory memory including computer readable instructions, that when executed by the processor, cause the device to:
• determine a first set of attribute hierarchy counts that indicate a number of occurrences of corresponding attributes that are stored at a first network node within a group of network nodes and have not been transmitted upstream towards a hub of a distributed hierarchical network;
• receive, from a second network node within the group, a second set of attribute hierarchy counts that indicate a number of occurrences of corresponding attributes that are stored at the second network node and have not been transmitted upstream towards the hub;
• and
• determine whether a sum based on the first set of attribute hierarchy counts and the second set of attribute hierarchy counts satisfies an anonymization criterion, wherein the sum indicates a number of collective occurrences for a corresponding attribute that are stored at the first network node and the second network node and that have not been transmitted upstream towards the hub.