Private Set Intersection Authorization via Encryption Keys

The system performs preliminary actions by generating authorization parameters and encryption keys before the PSI computation occurs. The data owner entity generates an authorization parameter that includes an encrypted authorization key, which is sent to the third entity before the PSI query is executed. This preliminary setup ensures that even if a malicious entity conducts PSI with random account numbers, they cannot access sensitive data without the proper authorization key that was distributed only to authorized parties in advance.

The patent introduces an intermediary authorization mechanism between the data owner and the querying entity. The authorization parameter acts as a mediator that controls access to sensitive data during PSI computations. The authorization parameter includes encrypted authorization keys that are distributed to authorized entities, creating an intermediary layer of security that prevents malicious entities from accessing unauthorized data while still allowing legitimate data sharing between authorized organizations.

The authorization key is segmented and encrypted within the authorization parameter structure. Instead of distributing plain authorization keys, the system encrypts the authorization key within an authorization parameter that is itself protected. This segmentation ensures that even if the authorization parameter is intercepted, the actual authorization key remains protected by encryption, thus enabling data accessibility for authorized entities while mitigating the risk of unauthorized access.

The system transforms the authorization key into a protected parameter form through encryption. The authorization key is encrypted within the authorization parameter using cryptographic methods, changing its state from a plain, easily accessible form to an encrypted, protected form. This parameter transformation allows authorized entities to access the key when needed while preventing unauthorized entities from using the encrypted parameter to gain access, thus balancing accessibility with security.