Anonymous Data Sharing System Using Encrypted Entity Identifier Mapping

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Existing data management methods fail to maintain anonymity while allowing for comprehensive data analysis, as they either rely on trusted central data managers who can deanonymize data or require sufficient attributes for unique identification, leading to potential attacks on anonymity.

Innovation Solution

A system where data sources encrypt entity identifiers and use a classifier function to map them to common anonymous values, with an independent registrar generating encryption and report keys, ensuring entities remain anonymous to the data manager and allowing bijective mapping between open and anonymous identifiers.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Productivity

If a central data manager is used to assign anonymous identifiers and maintain bijective mapping between universal and anonymous identifiers, then data analysis capability is improved, but anonymity is compromised because the central data manager can deanonymize all data

Engineering Contradiction:

Improvedata analysis capabilityVSAvoidanonymity protection

Core Design Contradiction:

ProductivityVSReliability

Solution Approach 1:

The system segments the identifier mapping function into multiple independent components: each data source maintains its own encryption key and mapping function. Instead of a centralized mapping authority, each participant independently encrypts universal identifiers using their own key, transforming a single-point-of-failure system into a distributed system where no single entity can deanonymize data alone.

Inventive Principle:

Principle #1Segmentation

Solution Approach 2:

Public key cryptography serves as an intermediary mechanism that enables anonymous identifier assignment without requiring trust in a central authority. The encryption key acts as a mediator that transforms universal identifiers into anonymous identifiers in a way that is mathematically reversible only by the key holder, yet the key holder cannot identify which anonymous identifier corresponds to which universal identifier without additional information.

Inventive Principle:

Principle #24Intermediary (Mediator)

2Reliability

If data sources send only attributes without entity identifiers to the data manager, then anonymity is preserved, but entity identification accuracy deteriorates leading to incorrect network construction

Engineering Contradiction:

Improveanonymity protectionVSAvoidentity identification accuracy

Core Design Contradiction:

ReliabilityVSMeasurement precision

Solution Approach 1:

The system transforms the identifier parameter from plaintext to encrypted form. Instead of sending attributes alone or plaintext identifiers, the system encrypts universal identifiers using data source-specific keys, creating anonymous identifiers that preserve the uniqueness property needed for accurate entity identification while removing the plaintext information that would compromise anonymity.

Inventive Principle:

Principle #35Parameter changes

3Measurement precision

If sufficient attributes are collected for unique entity identification, then entity identification accuracy is improved, but anonymity is vulnerable to attacks based on uniqueness of attribute sets

Engineering Contradiction:

Improveentity identification accuracyVSAvoidanonymity attack vulnerability

Core Design Contradiction:

Measurement precisionVSObject-affected harmful factors

Solution Approach 1:

The system replaces the mechanical approach of using attribute uniqueness for identification with a cryptographic approach. Instead of relying on the uniqueness of attribute sets which can be analyzed and attacked, the system uses encryption mathematics to guarantee unique identification while protecting anonymity. The security basis shifts from attribute analysis resistance to cryptographic security.

Inventive Principle:

Principle #28Mechanics substitution (Replace mechanical system)

Data Source

PatentUS11263344B2Data management method and registration method for an anonymous data sharing system, as well as data manager and anonymous data sharing system

Publication Date: 2022.03.01 XTENDR ZRT

AI summary

The invention is a data management method for an anonymous data sharing system, comprising the steps of receiving a data supply from a data source (10), the data supply comprising an anonymous data source identifier, an entity identifier encrypted with the private encryption key of the data source (10), and data associated with the entity. The method further comprises mapping the encrypted entity identifier to a common anonymous entity identifier by applying a classifier key associated with the data source identifier in such a manner that for every entity identifier the following applies: by encrypting said entity identifier with the private encryption key of any data source (10) and by mapping it using the classifier key associated with the identifier of the data source, the same common anonymous entity identifier is obtained, wherein the data associated with the entity are stored in a database (12) in a manner that said data are assigned to the common anonymous identifier. The invention also relates to a registration method, to a data manager, and to an anonymous data sharing system comprising same.