Back to results
US 9,998,435 B1Granted
System and method to anonymize data transmitted to a destination computing device
AssigneeCiphercloud, Inc.
InventorsPravin Kothari, Malakondayya Gorantla
Life of this patent
Estimating the term…
Abstract
A method and system for anonymizing data is disclosed. Data to be anonymized is received by an anonymization system. A request for a data encryption key is generated. A masked data encryption key is received in response to the request. The data encryption key is retrieved from the masked data encryption key. The data is anonymized using an anonymization module to derive an anonymized data using the data encryption key.
Claims18
A method for anonymizing data, comprising:
- receiving data to be anonymized by an anonymization system executed on a computing device, the data including a plurality of characters;
- generating a request for a data encryption key with a corresponding request identifier;
- generating a masked data encryption key corresponding to the request identifier for the data encryption key by
- providing a first encryption key, a second encryption key and a master key;
- masking the master key with the first encryption key using a computer implemented first crypto function to generate a masked master key;
- and
- generating the masked data encryption key using a computer implemented second crypto function and the masked master key;
- storing the corresponding request identifier in a data store and associating the generated masked data encryption key with the stored corresponding request identifier;
- receiving the masked data encryption key in response to the request;
- retrieving the data encryption key from the received masked data encryption key;
- anonymizing the data using an anonymization module to derive anonymized data using the retrieved data encryption key;
- receiving a subsequent request for a data encryption key with an associated request identifier;
- and
- verifying if there is a match between the associated request identifier and the stored corresponding request identifier, and
- when there is a match, returning the masked data encryption key associated with the stored corresponding request identifier;
- and
- when there is no match, generating a new masked data encryption key and responding with the generated new masked data encryption key.
14 more elements
A system to anonymize data, comprising:
- an anonymization system executed on a computing device configured to
- receive data to be anonymized, the data including a plurality of characters;
- generate a request for a data encryption key with a corresponding request identifier;
- receive a generated masked data encryption key that corresponds the request identifier in response to the request,
- wherein, a masked master key is generated by masking a master key with a first encryption key using a computer implemented first crypto function;
- and
- the masked data encryption key is generated using a computer implemented second crypto function and the masked master key;
- and wherein, the corresponding request identifier is stored in a data store and the corresponding request identifier is associated with the generated masked data encryption key;
- retrieve the data encryption key from the received masked data encryption key;
- anonymize the data using an anonymization module to derive an anonymized data using the retrieved data encryption key;
- and
- wherein the system is further configured to
- receive a subsequent request for a data encryption key with an associated request identifier;
- verify if there is a match between the associated request identifier and the stored corresponding request identifier, and
- when there is a match, return the masked data encryption key associated with the stored corresponding request identifier;
- and
- when there is no match, generate a new masked data encryption key and respond with the generated new masked data encryption key.
14 more elements
Dependencies are inferred from the claim text.