System and method for private integration of datasets
AssigneeSingapore Telecommunications Limited
InventorsHoon Wei LIM, Chittawar VARSHA
Life of this patent
Estimating the term…
Abstract
This document describes a system and method for sharing datasets between various modules or users whereby identity attributes in each dataset are obfuscated. The obfuscation is done such that when the separate datasets are combined, the identity attributes remain obfuscated while the remaining attributes in the combined datasets may be recovered by the users of the invention.
Claims12
A method for sharing datasets between modules whereby identity attributes in each dataset are encrypted, the method comprising:
- encrypting at a first module, identity attributes of the first module's dataset using a unique key ked1 associated with the first module and an encryption function E( ) to produce an obfuscated dataset;
- receiving, by an untrusted server, the obfuscated dataset from the first module and further encrypting the encrypted identity attributes in the obfuscated dataset using a unique key kus associated with the untrusted server and the encryption function E( ) to produce a further obfuscated dataset and shuffling the further obfuscated dataset;
- receiving, by an integration module, the further obfuscated and shuffled dataset from the untrusted server and receiving from the first module a unique key kdd1 associated with the first module, decrypting part of the encrypted identity attributes using the unique key kdd1 and a decryption function D( ),
- whereby the decryption function D( ) and the unique key kdd1 decrypts the encrypted identity attributes in the further obfuscated and shuffled dataset to produce a final first dataset having identity attributes that are only encrypted using the encryption function E( ) and the unique key kus.
A system for sharing datasets between modules whereby identity attributes in each dataset are encrypted, the system comprising:
- a first module configured to encrypt identity attributes of the first module's dataset using a unique key ked1 associated with the first module and an encryption function E( ) to produce an obfuscated dataset;
- a second module configured to receive the obfuscated dataset from the first module and further encrypt the encrypted identity attributes in the obfuscated dataset using a unique key kus associated with the untrusted server and the encryption function E( ) to produce a further obfuscated dataset and shuffle the further obfuscated dataset;
- an integration module configured to:
- receive the further obfuscated and shuffled dataset from the untrusted server and receive from the first module a unique key kdd1 associated with the first module,
- decrypt part of the encrypted identity attributes using the unique key kdd1 and a decryption function D( ),
- whereby the decryption function D( ) and the unique key kdd1 decrypts the encrypted identity attributes in the further obfuscated and shuffled dataset to produce a final first dataset having identity attributes that are only encrypted using the encryption function E( ) and the unique key kus.
Dependencies are inferred from the claim text.