# US 2023/0058013 A1 · Providing access to encrypted insights using anonymous insight records > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 2023/0058013 A1 - Document ID: US20230058013A1 - Status: Published application - Kind: A1 - Application number: 17/978,525 - Filed: 2022-11-01 - Published: 2023-02-23 - Earliest claimed: 2021-08-18 - Assignees: FortifID, Inc. - Applicants: FortifID, Inc. - Inventors: Anirban Basak; Thomas P. Hardjono - Web page: https://patentgrep.com/patent/US20230058013A1 ## CPC - H04L 67/06: specially adapted for file transfer, e.g. file transfer protocol [FTP] - G06F 7/588: {Random number generators, i.e. based on natural stochastic processes} - G16H 10/60: for patient-specific data, e.g. for electronic patient records - G16H 40/67: for remote operation - H04L 9/3247: {involving digital signatures} - H04L 9/3297: {involving time stamps, e.g. generation of time stamps} - H04L 63/0428: {wherein the data content is protected, e.g. by encrypting or encapsulating the payload} - H04L 67/1097: for distributed storage of data in networks, e.g. transport arrangements for network file system [NFS], storage area networks [SAN] or network attached storage [NAS] - H04L 9/50: {using hash chains, e.g. blockchains or hash trees} - H04L 2209/56: Financial cryptography, e.g. electronic payment or e-cash - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) - G16H: HEALTHCARE INFORMATICS, i.e. INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR THE HANDLING OR PROCESSING OF MEDICAL OR HEALTHCARE DATA ## Abstract Techniques are described for algorithmic confidential computing on personal data and to an insights provider providing access to personal data using limited-use anonymous insights records stored on a blockchain. To enable service providers and other queriers to obtain such insights information in a secure manner, an insights provider creates an anonymous insights record that is recorded on a blockchain responsive a request from a subject indicating that the subject desires to share one or more items of insights information. An anonymous insights record contains a single-use (or limited number of use) random number that is used by the insights provider to index the data in a shards index database for the relevant shards of the insights data file. These multiple segments can then be stored across multiple separate repositories using a decentralized file storage service. ## Claims ### Claim 1 A computer-implemented method performed by an insights provider system, the method comprising: obtaining insight data related to a subject, wherein the insight data is derived from data obtained from one or more data providers external to the insights provider system; storing, using a decentralized storage service, a plurality of shards of a data file containing the insight data, wherein the data file includes a subject random number associated with the subject; storing, on a blockchain, an anonymous insights record including the subject random number; identifying, on the blockchain, a record indicating that insight data related to a subject is pending processing by the insights provider system, wherein the record identifies the subject random number; responsive to determining that a number of times the subject random number has been used is not more than a maximum permitted number of times the subject random number can be used: obtaining, based on the subject random number, the plurality of shards of the data file that includes the insight data; and providing, based on a reconstructed copy of data file from the plurality of shards of the data file, the insight data to a client computing device. ### Claim 2 (depends on 1) The computer-implemented method of claim 1, wherein the data file further includes an indication of a time at which access to the insight data expires, and wherein the insights data provider system blocks access to the insight data after the time at which access to the insight data expires. ### Claim 3 (depends on 1) The computer-implemented method of claim 1, wherein the data file is encrypted, and wherein the method further comprises using a secure enclave service to decrypt the data file and provide the insight data to a requesting client device. ### Claim 4 (depends on 1) The computer-implemented method of claim 1, wherein the subject random number is a first subject random number, and wherein the subject is further associated with a second subject random number associated with the data file that includes the insight data related to the subject. ### Claim 5 (depends on 1) The computer-implemented method of claim 1, further comprising receiving a message from a client that identifies the record indicating that the insight data related to the subject is pending processing, and wherein the record is created responsive to a client computing device invoking a smart contract on the blockchain identifying the subject random number. ### Claim 6 (depends on 1) The computer-implemented method of claim 1, further comprising generating, by the insights provider system, the data file using a secure enclave to compute the insight data related to the subject, wherein the secure enclave is an isolated compute environment integrated with the insights provider system via a secure communication channel. ### Claim 7 (depends on 1) The computer-implemented method of claim 1, wherein the data file includes data indicating a plurality of separate insights related to the subject. ### Claim 8 (depends on 1) The computer-implemented method of claim 1, wherein the data file further includes at least one of: an identifier of the data file, or a digital signature of the insights provider system, and wherein the anonymous insights record further includes at least one of: a hash of the data file, an identifier of an endpoint of a secure enclave service associated with the insights provider system, an expiration time of the anonymous insights record, or a digital signature of the insights provider system. ### Claim 9 (depends on 1) The computer-implemented method of claim 1, wherein a storage location of each of the plurality of shards of the data file is stored in a shards index database managed by the insights provider system, and wherein the storage location of each of the plurality of shards of the data file is indexed in the shards index database by the subject random number. ### Claim 10 (depends on 1) The computer-implemented method of claim 1, wherein the insight data includes at least one of: financial services information related to the subject, healthcare information related to the subject, or demographic information related to the subject. ### Claim 11 A system comprising: an insights provider system implemented by a first one or more electronic devices comprising a processor, the insights provider system including instructions that upon execution cause the insights provider system to: obtain insight data related to a subject, wherein the insight data is derived from data obtained from one or more data providers external to the insights provider system; store, using a decentralized storage service, a plurality of shards of a data file containing the insight data, wherein the data file includes a subject random number associated with the subject; store, on a blockchain, an anonymous insights record including the subject random number; identify, on the blockchain, a record indicating that insight data related to a subject is pending processing by the insights provider system, wherein the record identifies the subject random number; responsive to determining that a number of times the subject random number has been used is not more than a maximum permitted number of times the subject random number can be used: obtain, based on the subject random number, the plurality of shards of the data file that includes the insight data; and provide, based on a reconstructed copy of data file from the plurality of shards of the data file, the insight data to a client computing device; and a client computing device implemented by a second one or more electronic devices comprising a processor, the client computing device including instructions that upon execution cause the client computing device to: generate a request for insight data related to the subject by invoking a smart contract on the blockchain, wherein the smart contract is associated with a record on the blockchain including the subject random number. ### Claim 12 (depends on 11) The system of claim 11, wherein the data file further includes an indication of a time at which access to the insight data expires, and wherein the insights data provider system blocks access to the insight data after the time at which access to the insight data expires. ### Claim 13 (depends on 11) The system of claim 11, wherein the data file is encrypted, and wherein the instructions upon execution further cause the insights provider system to use a secure enclave service to decrypt the data file and provide the insight data to a requesting client device. ### Claim 14 (depends on 11) The system of claim 11, wherein the subject random number is a first subject random number, and wherein the subject is further associated with a second subject random number associated with the data file that includes the insight data related to the subject. ### Claim 15 (depends on 11) The system of claim 11, wherein the instructions upon execution further cause the insights provider system to receive a message from a client that identifies the record indicating that the insight data related to the subject is pending processing, and wherein the record is created responsive to a client computing device invoking a smart contract on the blockchain identifying the subject random number. ### Claim 16 (depends on 11) The system of claim 11, wherein the instructions upon execution further cause the insights provider system to generate, by the insights provider system, the data file using a secure enclave to compute the insight data related to the subject, wherein the secure enclave is an isolated compute environment integrated with the insights provider system via a secure communication channel. ### Claim 17 (depends on 11) The system of claim 11, wherein the data file includes data indicating a plurality of separate insights related to the subject. ### Claim 18 (depends on 11) The system of claim 11, wherein the data file further includes at least one of: an identifier of the data file, or a digital signature of the insights provider system, and wherein the anonymous insights record further includes at least one of: a hash of the data file, an identifier of an endpoint of a secure enclave service associated with the insights provider system, an expiration time of the anonymous insights record, or a digital signature of the insights provider system. ### Claim 19 (depends on 11) The system of claim 11, wherein a storage location of each of the plurality of shards of the data file is stored in a shards index database managed by the insights provider system, and wherein the storage location of each of the plurality of shards of the data file is indexed in the shards index database by the subject random number. ### Claim 20 (depends on 11) The system of claim 11, wherein the insight data includes at least one of: financial services information related to the subject, healthcare information related to the subject, or demographic information related to the subject.