Encrypted Bridge Identifiers for Privacy-Preserving User Linkage
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing methods for establishing a link between user identifiers from different systems often reveal specific user identifiable information, compromising privacy as they require sharing hashed PII data that may expose internal data linkages.
Innovation Solution
A method involving encryption and double encryption of data sets using deterministic and El-Gamal keys, allowing for the generation of bridge identifiers that link user identifiers without disclosing specific user identifying information, ensuring that neither party learns additional PII data or internal linkages.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If hashed PII data is shared to establish links between user identifiers, then linkage capability is improved, but user privacy is compromised due to exposure of internal data linkages
Solution Approach 1:
The patent introduces encrypted bridge identifiers as an intermediary mechanism that enables linkage between user identifiers from different systems without directly exposing PII data. The bridge identifiers act as a mediator that preserves privacy while maintaining the ability to establish connections between users across systems.
Solution Approach 2:
The patent transforms the linkage mechanism by changing the parameter representation from hashed PII data to encrypted bridge identifiers. This parameter change allows the system to maintain linkage functionality while fundamentally altering how identifying information is handled, thereby protecting user privacy.
2Object-affected harmful factors
If encrypted bridge identifiers are used to maintain privacy, then user privacy is protected, but system complexity increases due to multiple encryption layers
Solution Approach 1:
The patent segments the encryption process into distinct layers: first-party encryption of PII data to create bridge identifiers, and third-party encryption of these bridge identifiers for secure exchange. This segmentation allows each party to operate with their own encryption keys and processes, managing complexity through modular design.
Solution Approach 2:
The patent implements nested encryption where the third party encrypts the already-encrypted bridge identifiers with their own encryption layer. This nested structure (first-party encryption within second-party encryption) enables secure multi-party collaboration while maintaining a manageable complexity through hierarchical organization of encryption operations.
Data Source
AI summary
Systems and methods may be used for establishing a link between user identifiers of different systems without disclosing specific user identifying information. One method includes generating a matching relationship based on double encrypted one or more first data sets of a first party system and double encrypted one or more second data sets of a second party system. The matching relationship indicates one or more links between match keys associated with the first party system and the match keys associated with the third party system. The method includes assigning bridge identifiers for user identifiers associated with the first party system and the user identifiers associated with the third party system based on the matching relationship.