Cryptographic Pseudonym Mapping Method, Computer System, Computer Program And Computer-Readable Medium

A cryptographic pseudonym mapping method for an anonymous data sharing system, the method being adapted for generating a pseudonymised database (DB) from data relating to entities and originating from data sources (DSi), wherein the data are identified at the data sources (DSi) by entity identifiers (D) of the respective entities, and wherein the data are identified in the pseudonymised database (DB) by pseudonyms (P),

• characterised in that
• the pseudonyms (P) are assigned to the respective entity identifiers (D) applying a one-to-one mapping, irrespective of the originating data source, by
• applying one mapper (M) and one key manager (KM),
• wherein the key manager (KM) is applied for
• selecting a secret element (b) from a predetermined algebraic structure constituting a multiplicative or additive cyclic group,
• selecting, for each data source (DSi) an element (ei, ai) to be applied as a cryptographic key by the given data source (DSi), from the algebraic structure and sending it to the given data source (DSO while the element (ei, ai) is kept secret,
• calculating an inverse (di) of the element (ei, ai) in the given algebraic structure, and using it, together with the secret element (b), for generating a mapping cryptographic key (hi) of the mapper (M), the mapping cryptographic key (hi) corresponding to the given data source (DSi), and sending the mapping cryptographic key (hi) to the mapper (M) while keeping it secret and assigned to the given data source (DSi),
• transforming by the data source (DSi), each entity identifier (D) to be mapped, into a respective encrypted entity identifier (Ci) by using the element (ei, ai) to be applied as a cryptographic key, and
• a respective pseudonym (P) is generated by the mapper (M), for each encrypted entity identifier (Ci) encrypted by the data source (DSi), utilizing the mapping cryptographic key (hi) corresponding to the particular data source (DSi).