Monotonic One-Way Polynomial Obfuscation for Secure Data Comparison

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing data protection methods fail to securely obfuscate sensitive data while maintaining the ability to compare confidential data elements, posing a risk in cloud-based applications where sensitive information needs to be protected and analyzed.

Innovation Solution

Implementing a monotonic one-way polynomial obfuscation function that maps confidential domain values to non-confidential range values, allowing comparison of obfuscated data elements without revealing their actual values, using a secret key to determine coefficients for the obfuscation function, ensuring the data remains secure and comparable.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If data is obfuscated using traditional encryption methods, then security is improved, but the ability to compare data elements is lost

Engineering Contradiction:
Improvedata securityVSAvoiddata comparability
Core Design Contradiction:
ReliabilityVSEase of operation

Solution Approach 1:

The patent transforms the obfuscation approach by changing the mathematical parameters from traditional encryption functions to monotonic one-way polynomial functions. This parameter change allows the obfuscated values to preserve their relative ordering, enabling comparison operations while maintaining security. The monotonic property ensures that if x1 < x2, then f(x1) < f(x2), allowing comparisons on obfuscated data to reflect the original data relationships.

Inventive Principle:
Principle #35Parameter changes

Solution Approach 2:

The patent introduces an intermediary obfuscation function that acts as a mediator between the original sensitive data and the need for comparison operations. This function transforms data into an intermediate representation that retains ordering information while removing direct access to original values, thus enabling secure comparison without exposing sensitive information.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Ease of operation

If original data values are accessed for comparison, then comparability is maintained, but security is compromised

Engineering Contradiction:
Improvedata comparabilityVSAvoiddata security
Core Design Contradiction:
Ease of operationVSReliability

Solution Approach 1:

The patent extracts only the necessary property for comparison (the monotonic ordering relationship) from the original data, while leaving the actual sensitive values protected. By taking out just the ordering information and discarding the need to access original values, the system achieves comparability without compromising security.

Inventive Principle:
Principle #2Taking out (Extraction)

Solution Approach 2:

The patent creates a copy of the data in obfuscated form that preserves the essential comparison property. This copied representation allows all necessary comparison operations to be performed without touching the original sensitive data, thus maintaining both security and functionality.

Inventive Principle:
Principle #26Copying

3Reliability

If data is stored in obfuscated form, then security is enhanced, but query functionality is limited

Engineering Contradiction:
Improvedata securityVSAvoidquery capability
Core Design Contradiction:
ReliabilityVSAdaptability or versatility

Solution Approach 1:

The patent changes the mathematical parameters of the storage representation from encrypted values to monotonic one-way function outputs. This parameter change enables the system to support comparison-based queries (finding min, max, ranges, rankings) while maintaining security, thus enhancing query versatility within the constraints of obfuscated storage.

Inventive Principle:
Principle #35Parameter changes

Data Source

PatentUS20240005024A1Order preserving dataset obfuscation
Publication Date: 2024.01.04 SERVICENOW INC
  • US20240005024A1 patent drawing
  • US20240005024A1 patent drawing
  • US20240005024A1 patent drawing

AI summary

A determination is made to obfuscate a protected dataset including data elements that are to remain comparable with one another after the obfuscation. An obfuscation function for the protected dataset is selected wherein the obfuscation function is a monotonic one-way function. One or more parameters for the obfuscation function are automatically determined based at least in part on a secret value. Using one or more processors, the protected dataset is automatically obfuscated to generate an obfuscated version using the obfuscation function with the determined one or more parameters. Computer access to the obfuscated version of the protected dataset is provided as a comparable alternative for the protected dataset.