Elliptic Curve Cryptography for Anonymous Data Segmentation

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

As the amount of data associated with a pseudonym increases, the risk of revealing the owner's identity through data correlation techniques also increases, compromising anonymity, especially when multiple features like ZIP code, age, profession, and marital status are stored.

Innovation Solution

A computer-implemented method generates a set of public keys from a private key using elliptic curve cryptography, where the private key is derived from a user-selected secret through an embedding and randomizing function, allowing for secure and anonymous access to data without revealing the user's identity, by varying the base point or domain parameters to create multiple identifiers from a single private key.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Quantity of substance

If multiple features (ZIP code, age, profession, marital status) are stored with respect to a pseudonym, then the ability to store comprehensive user data is improved, but the risk of revealing the user's identity through data correlation techniques increases

Engineering Contradiction:
Improveamount of data storedVSAvoidrisk of identity revelation
Core Design Contradiction:
Quantity of substanceVSObject-affected harmful factors

Solution Approach 1:

The patent divides a single pseudonym into multiple pseudonyms, where each pseudonym can be associated with different sets of user features or data. This segmentation prevents data correlation attacks because even if one pseudonym is compromised, the user's identity cannot be easily revealed through correlation of features across pseudonyms. The system allows flexible association of features with specific pseudonyms rather than requiring all features to be stored under a single pseudnym.

Inventive Principle:
Principle #1Segmentation

2Ease of operation

If a single pseudnym is used to access services, then ease of operation is improved, but the risk of breaking anonymity increases with increasing amount of data stored

Engineering Contradiction:
Improveease of accessing servicesVSAvoidrisk of breaking anonymity
Core Design Contradiction:
Ease of operationVSObject-affected harmful factors

Solution Approach 1:

The patent generates multiple pseudonyms from a single master secret, allowing the user to employ different pseudonyms for different services or data storage purposes. This multi-functionality maintains ease of operation because the user only needs to remember one master secret while automatically receiving multiple pseudonyms that can be used across different contexts, thereby preserving anonymity even when accessing multiple services.

Inventive Principle:
Principle #6Universality (Multi-functionality)

3Loss of information

If data correlation techniques are applied to stored data, then analytical capabilities are improved, but the ability to protect user privacy deteriorates

Engineering Contradiction:
Improveinformation accessibilityVSAvoidprivacy protection
Core Design Contradiction:
Loss of informationVSReliability

Solution Approach 1:

By segmenting user data across multiple pseudonyms, the patent prevents effective data correlation analysis. Each pseudonym represents a fragmented view of the user's data, making it impossible for analysts to correlate features across the entire user profile. This segmentation maintains information accessibility within each pseudonym context while protecting overall user privacy by breaking the correlation chain.

Inventive Principle:
Principle #1Segmentation

Data Source

PatentEP2348447B1A computer implemented method for generating a set of identifiers from a private key, computer implemented method and computing device
Publication Date: 2014.07.16 COMPUGRP MEDICAL SE
  • EP2348447B1 patent drawingFigure 1
  • EP2348447B1 patent drawingFigure 2
  • EP2348447B1 patent drawingFigure 3

AI summary

The invention relates to a computer implemented method for generating a set of identifiers (118;914) from a private key (116; 818), the method comprising the steps of: - calculating a set of public keys, wherein the private key (116; 818) and each public key of the set of public keys form an asymmetric cryptographic key pair; and - outputting (208, 316, 504, 604) the identifiers comprising the public keys.