Double Anonymization via Segmented Hashing Systems

Solution Overview

Problem

Existing data anonymization methods do not provide sufficient privacy and security for governmental agencies and individuals, as they may retain personally identifiable information, and there is a need for a higher level of anonymization that maintains usability and security.

Innovation Solution

The implementation of a double anonymization process using separate and distinct computing systems, where the first system hashes and deidentifies data, and the second system further anonymizes it by applying additional hashing algorithms to the hashed identifiers, with the final anonymized data stored by a third system, ensuring no system retains personally identifiable information.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If existing data anonymization methods are used, then data can be made available for use, but the level of privacy and security is insufficient for governmental agencies and individuals

Engineering Contradiction:

Improveprivacy and security levelVSAvoidanonymization process complexity

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

The patent divides the anonymization process into two separate stages performed by different computing systems. The first computing system performs initial anonymization by hashing identifiers and deidentifying data, then transmits the anonymized data to a second computing system that performs additional anonymization processing. This segmentation ensures that no single system retains personally identifiable information while maintaining data usability.

Inventive Principle:

Principle #1Segmentation

2Reliability

If single-system anonymization is used, then the process is simpler, but there is risk that the system retains personally identifiable information

Engineering Contradiction:

Improvedata privacy assuranceVSAvoidnumber of computing systems

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

The patent divides the anonymization process into two separate stages performed by different computing systems. The first computing system performs initial anonymization by hashing identifiers and deidentifying data, then transmits the anonymized data to a second computing system that performs additional anonymization processing. This segmentation ensures that no single system retains personally identifiable information while maintaining data usability.

Inventive Principle:

Principle #1Segmentation

Solution Approach 2:

The patent introduces an intermediary role where the first computing system acts as a mediator between the original data source and the second computing system. The first system anonymizes data before transmission, ensuring that personally identifiable information never reaches the second system. This intermediary approach distributes trust and reduces the risk of PII retention at any single point.

Inventive Principle:

Principle #24Intermediary (Mediator)

3Reliability

If multiple anonymization layers are applied, then privacy is enhanced, but data processing time increases

Engineering Contradiction:

Improveanonymization securityVSAvoiddata processing time

Core Design Contradiction:

ReliabilityVSLoss of time

Solution Approach 1:

The patent applies preliminary action by having the first computing system perform initial anonymization (hashing and deidentification) before data is transmitted to the second system. This preliminary processing reduces the complexity of work required by the second system and ensures that personally identifiable information is removed early in the process, preventing unnecessary processing of sensitive data.

Inventive Principle:

Principle #10Preliminary action

Data Source

PatentUS11397831B2Method and system for double anonymization of data

Publication Date: 2022.07.26 MASTERCARD INT INC

AI summary

A method for double anonymization of data includes: receiving, by a first computing system, a plurality of first data sets, each including a set identifier and personally identifiable information; anonymizing, by the first computing system, each of the first data sets, by hashing the set identifier included in each first data set to obtain a hashed identifier and deidentifying the personally identifiable information; transmitting, by the first computing system, the plurality of anonymized first data sets to a second computing system, wherein the second computing system is distinct and separate from the first computing system; anonymizing, by the second computing system, each of the anonymized first data sets, by hashing the hashed identifier to obtain a double-hashed identifier; and storing, in the second computing system or a third separate and distinct computing system, the plurality of double anonymized first data.