System and method to anonymize data transmitted to a destination computing device
AssigneeCiphercloud, Inc.
InventorsPravin Kothari, Debabrata Dash, Yuh-wen Soung, Theron Tock
Life of this patent
Estimating the term…
Abstract
A method and system for anonymizing data to be transmitted to a destination computing device is disclosed. Anonymization strategy for data anonymization is provided. Data to be transmitted is received from a user computer. Selective anonymization of the data is performed, based on the anonymization strategy, using an anonymization module. Anonymized data is transmitted to the destination computing device over a network.
Claims38
A method for anonymizing data to be transmitted to a destination computing device, comprising:
- providing anonymization strategy for data anonymization on a data store in a computing device;
- receiving data to be stored in the destination computing device, from a user computer;
- performing selective anonymization of the data to be stored in the destination computing device, based on the anonymization strategy for the data to be stored, using an anonymization module;
- transmitting anonymized data to the destination computing device for storage, over a network,
- wherein the anonymization strategy includes anonymization based on at least one or both of tokenization and encryption;
- and
- wherein the anonymization based on encryption includes at least one of AES encryption, encryption that permits exact word matching search, encryption that permits search and encryption that permits partial string and wild card searches.
An anonymization system to anonymize data transmitted to a destination computing device, comprising:
- an anonymization strategy module executed on a computing device to store anonymization strategy for data anonymization in a data store;
- a logic to receive data to be transmitted to the destination from a user computer;
- an anonymization module executed on the computing device to selectively anonymize data based on the anonymization strategy and transmit the anonymized data to the destination computing device;
- a management console module configured to
- receive meta data for an application executed on the destination computing device, meta data indicative of one or more data fields of the application;
- present at least one data field of the application along with a plurality of anonymization strategies for selection;
- associate one of the anonymization strategy to the at least one data field of the application, based on the selection;
- store the associated anonymization strategy for the at least one data field of the application, using the anonymization strategy module;
- wherein the anonymization module
- retrieves stored anonymization strategy for one or more data fields of the data to be transmitted;
- performs the anonymization of original data in one or more data fields based on the retrieved anonymization strategy for the one or more data fields;
- and
- assemble data to be transmitted, using anonymized data fields, wherein the anonymized data is configured to be searchable using anonymized keyword;
- wherein the anonymized data is configured to be case-insensitive searchable using anonymized keyword;
- and
- wherein the data field is case-sensitive and the data field is converted into a single case data field and the converted data field is anonymized and the anonymized converted data field is stored in the destination computing device, in addition to the anonymized case-sensitive data field.
An anonymization system to anonymize data transmitted to a destination computing device, comprising:
- an anonymization strategy module executed on a computing device to store anonymization strategy for data anonymization in a data store;
- a logic to receive data to be stored in the destination computing device, from a user computer;
- and
- an anonymization module executed on the computing device to selectively anonymize data to be stored in the destination computing device, based on the anonymization strategy for the data to be stored and transmit the anonymized data to the destination computing device for storage;
- wherein the anonymization strategy includes anonymization based on at least one or both of tokenization and encryption;
- and
- wherein the anonymization based on encryption includes at least one of AES encryption, encryption that permits exact word matching search, encryption that permits search and encryption that permits partial string and wild card searches.
A method for anonymizing data to be transmitted to a destination computing device, comprising:
- providing anonymization strategy for data anonymization on a data store in a computing device;
- receiving data to be stored in the destination computing device, from a user computer;
- performing selective anonymization of the data to be stored in the destination computing device, based on the anonymization strategy for the data to be stored, using an anonymization module;
- transmitting anonymized data to the destination computing device for storage, over a network;
- wherein providing anonymization strategy for data anonymization in the computing device further including:
- receiving meta data for an application executed on the destination computing device, meta data indicative of one or more data fields of the application;
- presenting at least one data field of the application along with a plurality of anonymization strategies for selection;
- associating one of the anonymization strategy to the at least one data field of the application, based on the selection;
- and
- storing the associated anonymization strategy for the at least one data field of the application;
- wherein performing selective anonymization further including:
- retrieving stored anonymization strategy for one or more data fields of the data to be transmitted;
- performing the anonymization of one or more data fields based on the retrieved anonymization strategy for the one or more data fields;
- and
- assembling data to be transmitted, using anonymized data fields;
- wherein the anonymized data is configured to be case-insensitive searchable using anonymized keyword and the data field is case-sensitive;
- converting the data field into a single case data field;
- anonymizing the converted data field and the case-sensitive data field;
- and
- storing anonymized converted data field and anonymized case-sensitive data field in the destination computing device.
Dependencies are inferred from the claim text.