Perturbation-based order preserving pseudonymization of data
AssigneeEntit Software LLC
InventorsLuther Martin, Timothy Roake
Life of this patent
Estimating the term…
Abstract
A technique includes converting a plurality of plaintext values to a corresponding plurality of pseudonym values. The conversion includes performing encryption of the plurality of plaintext values to provide a plurality of second values; perturbing the plurality of second values to provide the plurality of pseudonym values; and controlling the perturbing to cause an ordering of the plaintext values to be represented in the plurality of pseudonym values.
Claims20
A method comprising:
- accessing data representing a plurality of plaintext values;
- and
- converting the plurality of plaintext values to a corresponding plurality of pseudonym values, wherein converting the plurality of plaintext values comprises:
- performing encryption of the plurality of plaintext values to provide a plurality of second values;
- perturbing the plurality of second values to provide the plurality of pseudonym values;
- and
- controlling the perturbing to cause an ordering of the plaintext values to be represented in the plurality of pseudonym values.
An apparatus comprising:
- at least one processor;
- and
- a memory to store instructions that, when executed by the at least one processor, cause the at least one processor to:
- apply an order preserving encryption cipher to a plurality of plaintext values to provide ciphertext values;
- and
- add a plurality of pseudorandom values to the ciphertext values to generate a plurality of pseudonym values corresponding to the plurality of plaintext values.
A non-transitory machine readable storage medium storing instructions that, when executed by a machine, cause the machine to:
- access a first dataset representing a collection of values;
- apply an order preserving cipher to encrypt a first value of the collection of values to generate a second value;
- adjust the second value based on a hash of the first value to generate a third value;
- provide a second dataset representing a collection of pseudonyms corresponding to the collection of values;
- and
- set the pseudonym corresponding to the first value equal to the third value.
Dependencies are inferred from the claim text.