Aggregation Permission Service for Privacy-Safe Query Responses
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing systems struggle to provide access to data while preserving privacy and confidentiality, especially when users have permissions to access sensitive or protected data items.
Innovation Solution
An aggregation permission service provider system that applies aggregation policies to modify database query responses, ensuring users only see aggregated data, thereby protecting private information without altering the underlying data or permissioning systems.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If users are granted access to data, then data accessibility is improved, but data privacy and confidentiality deteriorate
Solution Approach 1:
The patent introduces an intermediary layer between the data source and the user that modifies query responses. This intermediary applies aggregation policies to transform detailed data into aggregated data, allowing users to access data while preventing direct exposure to sensitive individual records. The intermediary acts as a mediator that reconciles the conflict between accessibility and privacy by transforming the data representation.
Solution Approach 2:
The patent changes the parameter of data granularity from detailed individual records to aggregated summaries. By modifying the level of detail in the data returned to users, the system enables access to useful information while eliminating exposure to sensitive specific values. This parameter transformation resolves the contradiction by presenting data at an aggregation level that maintains utility but removes privacy risks.
2Loss of information
If detailed data is provided to users, then information completeness is improved, but sensitivity and confidentiality of individual records worsen
Solution Approach 1:
The system changes the data representation parameter from detailed records to aggregated summaries. This transformation maintains information completeness at the aggregate level while removing sensitivity at the individual record level. Users receive complete aggregated information necessary for analysis while individual record sensitivity is protected through the aggregation transformation.
Solution Approach 2:
The patent segments the data into aggregated groups rather than presenting individual records. By dividing and aggregating data into meaningful segments, the system provides complete information about the overall data structure and patterns while preventing exposure to sensitive individual records within those segments.
3Object-affected harmful factors
If aggregation policies are applied to data, then data privacy is improved, but data quality and usability deteriorate
Solution Approach 1:
The patent applies aggregation policies that transform data parameters from detailed to aggregated representations. This parameter change achieves privacy protection while maintaining data quality through careful aggregation design. The aggregation level and methodology are configured to preserve meaningful patterns and relationships in the data while removing sensitive individual details.
Solution Approach 2:
The system applies different aggregation strategies to different parts of the data based on their sensitivity and utility characteristics. By applying local quality transformations, the system maintains high data quality for analysis-critical dimensions while applying strong aggregation for privacy-critical dimensions, thus balancing privacy protection with data usability.
4Reliability
If existing permissioning systems are used, then access control is improved, but flexibility in protecting sensitive data worsens
Solution Approach 1:
The patent creates a universal aggregation policy framework that can be applied across different data types, sources, and access scenarios. This multi-functional system handles various protection needs through a single unified mechanism, providing both reliable access control and flexible protection capabilities. The universal framework adapts to different aggregation requirements without needing separate specialized systems.
Data Source
AI summary
Computer apparatus for providing a response to a query comprises one or more processors and non-transitory memory, and computer code stored in the non-transitory memory and operable when executed by the one or more processors to cause the one or more processors to perform:storing, at an aggregation permission service, at least one aggregation policy, each of the at least one aggregation policy associated with a resource and each of the at least one aggregation policy including:at least one condition defining a policy over aggregation results, andat least one action associated with each condition;receiving, at the aggregation permission service, response data from the resource, the response data relating to a user query for data;identifying, at the aggregation permission service, the aggregation policy relating to the resource from which the response data was received;in response to determining that at least condition from the identified aggregation policy is met, at the aggregation permission service, applying the at least one action associated with the condition that was determined to be met such as to produce modified response data; andproviding, from the aggregation permission service to a user terminal, the modified response data.