Statistical property preserving pseudonymization

A non-transitory machine readable storage medium storing machine executable instructions that, when executed by a machine, cause the machine to:

• encrypt a plurality of plaintext values to provide a second plurality of values;
• encrypt ancillary information associated with the plurality of plaintext values to provide a third plurality of values;
• and
• determine a plurality of pseudonym values having a predetermined statistical distribution based on the second plurality of values and the third plurality of values.

An apparatus comprising:

• at least one processor;
• and
• a memory to store instructions that, when executed by the at least one processor, cause the at least one processor to:
• access data representing a plurality of plaintext values associated with a plurality of ranges;
• encrypt a plaintext value of the plurality of plaintext values to provide a first encrypted value, wherein the plaintext value is associated with a first range of the plurality of ranges;
• encrypt an attribute associated with the plaintext value to provide a second encrypted value;
• and
• determine a pseudonym value corresponding to the plaintext value based on the first encrypted value and the second encrypted value.