Privacy-Preserving Data Correlation Using an Encrypted Bridge
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing technologies fail to securely correlate online interactions with offline actions while protecting personally identifiable information (PII).
Innovation Solution
A method involving a first computing system that receives encrypted online and offline interaction data, decrypts it using shared and asymmetric keys, correlates the data within a protected environment, and generates aggregate data without exposing unencrypted information.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If encrypted data is decrypted to enable correlation between online interactions and offline actions, then data correlation capability is improved, but privacy security deteriorates
Solution Approach 1:
The system segments the correlation process into two independent parts: (1) data preparation and encryption at source systems, and (2) decryption and correlation at the bridge system. Each participant holds only encrypted data and cannot access unencrypted PII from other participants, enabling correlation functionality while maintaining privacy security through functional segmentation of the data processing chain.
Solution Approach 2:
The bridge system acts as a trusted intermediary that receives encrypted data from multiple participants, performs correlation operations on decrypted data within its secure environment, and returns only aggregated results. This intermediary architecture enables the correlation function while preventing any single participant from accessing raw PII from other participants.
2Productivity
If unencrypted data is transmitted between systems for processing, then data processing efficiency is improved, but data security deteriorates
Solution Approach 1:
Data is encrypted at the source systems before transmission, and decryption keys are prepared in advance and securely distributed to the bridge system. This preliminary encryption and key distribution enables efficient processing at the bridge system without requiring real-time key management, while maintaining security through pre-established cryptographic protections.
Solution Approach 2:
Different parts of the system have different security requirements: source systems maintain encryption keys locally for security, while the bridge system has temporary access to decryption keys for processing. This local quality differentiation allows each system to operate with the appropriate level of access needed for its function while maintaining overall security.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
A method including receiving, at a first computing system from a second computing system, a first key and encrypted online interaction data, receiving, at the first computing system from a third computing system, a second key and encrypted offline action data encoding data indicating one or more offline actions, receiving, at the first computing system from the third computing system, executable code comprising a third key, and executing, by the first computing system, the executable code. The executable code causing the first computing system to decrypt the encrypted online interaction data and the encrypted offline action data using the first key, the second key, and the third key, correlate one or more of the offline actions in the offline action data to one or more online interactions in the online interaction data, and generate aggregate data indicating a number of offline actions correlated to the online interactions.