US 9,313,022 B2Granted

Homomorphic cryptography modeling in support of privacy policies

AssigneeXerox Corporation

InventorsThierry Jacquin, Johan Clier, Ioan Calapodescu

Life of this patent

Estimating the term…

Loading patent…

Abstract

Data privacy is becoming increasingly important and, in some jurisdictions, required. Access to private data can be controlled by forcing all access to go through minimizations services that allow only authorized access to private data. These minimization services can become processing bottlenecks if the only way to modify private data is by way of requests to the minimization service. Certain homomorphic operations allow for encrypted data to be modified without being first decrypted although other operands must be encrypted. Augmenting a minimization service to provide a public encryption key provides for encryption of the other operands. Providing a records manager that can take advantage of homomorphic operations allows certain data operations to be performed without compromising security and without accessing the minimization service.

Claims20

Dependent claims

A method for implementing a privacy policy, the method comprising:

receiving code for an application comprising a record class definition comprising a field definition for a data field;
receiving a privacy designation wherein the data field is designated as a field containing data that is to be kept private;
with a processor, based on the designation, generating a records manager and a mapping aspect,
wherein the records manager comprises a private class definition corresponding to the record class, the private class definition identifying an associated homomorphic minimization service that provides a minimized value of data in the data field wherein the minimized value of data in the data field is encrypted,
wherein the mapping aspect comprises pointcuts for identifying joins at which the records manager is to augment the functioning of the application code by calling the homomorphic minimization service to thereby obtain the minimized value of data in the data field, the minimized value being encrypted, and
wherein the records manager and the mapping aspect are configured to be deployed in association with one another and with the application such that an execution system obtaining the application after deployment and then running the application has access only to an encrypted form of the minimized data in the data field.

3 more elements

Dependencies are inferred from the claim text.

Facts

Application: 14/665,356Filed 23 Mar 2015 · continuation in part
Priority: 27 Dec 2013
Published: US 2015/0186666 A19 Jul 2015
Granted: 12 Apr 2016
Term ends: Not estimatedThe source records don’t support an estimate.

Classification7 codes

H04L 9/008
Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols: involving homomorphic…
G06F 21/6218
Protecting access to data via a platform, e.g. using keys or access control rules: to a system of files or objects, e.g. local or distributed file…
G06F 21/6245
To a system of files or objects, e.g. local or distributed file system or database: protecting personal data, e.g. for financial or medical purposes
H04L 9/14
Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols: using a plurality of keys…

Family

Application14/141,548Parent of this continuation-in-part · filed 27 Dec 2013
Application14/202,477Parent of this continuation-in-part · filed 10 Mar 2014
US 2015/0195083 A1Pre-grant publication · published 9 Jul 2015
US 2015/0186666 A1Published application
US 2015/0254456 A1Published application
US 9,317,710 B2Related patent
US 9,443,101 B2Related patent
US 9,313,022 B2This patent

From the US filing history. Foreign family members aren’t listed.