System and method for securely analyzing data and controlling its release

• US 20070038674A1
• Filed: 08/11/2006
• Published: 02/15/2007
• Est. Priority Date: 08/12/2005
• Status: Abandoned Application

• Current Assignee: Safe Data Sharing Incorporated
• Original Assignee: Safe Data Sharing Incorporated
• Inventors: Bejar, Arturo
• Application Number:
  US11/502,976
• Publication Number:
  US 20070038674A1
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 21/6254 by anonymising data, e.g. decorrelating personal data from the owner's identification

Abstract

A system and method allows data to be shared for analysis without compromising the security of all the data, while allowing the analysis to proceed.

Claims

1. A method of analyzing data from a plurality of parties, the method comprising:

receiving a plurality of records from each of the plurality of parties, each of the records comprising transformed data that at least obscures a value of the transformed data when decoded by a computer system; and

performing an analysis on at least a portion of at least one of the plurality of records received from each of the plurality of parties, in which the analysis comprises an analysis other than matching at least a portion of said at least the portion of at least one of the plurality of records from each of the plurality of parties.

2. The method of claim 1:

additionally comprising receiving at least one permission from at least one of the plurality of parties; and

wherein the performing the analysis step is responsive to the at least one permission received.

3. The method of claim 2, additionally comprising:

receiving at least one request for analysis; and

refusing to comply with the at least one request for analysis request received, responsive to the at least one permission received.

4. The method of claim 1, wherein the performing the analysis step additionally comprises matching at least a second portion of said at least one of the plurality of records from each of the plurality of parties, said second portion being selected from the group comprising the first portion and a portion different from the first portion.

5. The method of claim 1, additionally comprising releasing information responsive to the analysis responsive to instructions agreed upon by each of the plurality of the parties.

6. The method of claim 5, wherein the releasing the information comprises:

releasing, responsive to instructions received before the analysis, summary information regarding the analysis to all of the plurality of parties;

receiving additional instructions responsive to the releasing of the summary information; and

releasing data from at least one of the plurality of parties to at least one other of the plurality of parties responsive to the additional instructions.

7. The method of claim 1, wherein each of the records in the plurality comprises at least one field transformed in a consistent manner by each of the plurality of the parties.

8. The method of claim 7, wherein a portion of the records in the plurality of one of the parties in the plurality are transformed in a manner that does not allow analysis with the remaining records in the plurality.

9. The method of claim 8 wherein the portion of the records transformed in the manner that does not allow analysis with the remaining records in the plurality are transformed to allow analysis with a plurality of records of a different party.

10. The method of claim 1, wherein at least a portion of each of the records in the plurality are transformed by encryption with a first key to produce a result, and encryption of the result with at least one second key, different from the first key.

11. The method of claim 1, wherein the analysis is performed as part of providing a reward.

12. The method of claim 1, wherein the analysis is performed to detect fraud.

13. The method of claim 12, wherein the fraud comprises financial fraud.

14. A system for analyzing data from a plurality of parties, the system comprising:

a project receiver having an input operatively coupled for receiving a plurality of records from each of the plurality of parties, each of the records comprising transformed data that at least obscures a value of the transformed data when decoded by a computer system, the project receiver for providing at an output at least one of the plurality of records from each of the plurality of parties; and

a matcher/analyzer having an input coupled to the project receiver output for receiving the at least one of the plurality of records from each of the plurality of parties, the matcher/analyzer for performing an analysis on at least a first portion of least one of the plurality of records received from each of the plurality of parties, in which the analysis comprises an analysis other than matching the at least the first portion of said at least one of the plurality of records from each of the plurality of parties, and for providing at least one result of said analysis at an output.

15. The system of claim 14, wherein:

the project receiver input is additionally for receiving at least one permission from at least one of the plurality of parties, and the project receiver is additionally for providing the at least one permission at the project receiver output;

the matcher/analyzer additionally receives the at least one permission at the matcher/analyzer input; and

the matcher/analyzer performs the analysis responsive to the at least one permission received.

16. The system of claim 15, wherein:

the project receiver input additionally receives at least one request for analysis;

the project receiver is additionally for providing the at least one request for analysis at the project receiver output;

the matcher/analyzer input is additionally for receiving the at least one request for analysis; and

the matcher/analyzer is additionally for refusing to comply with the analysis request received, responsive to the at least one permission received.

17. The system of claim 14, wherein the matcher/analyzer is additionally for matching at least a second portion of said at least one of the plurality of records from each of the plurality of parties, said second portion being selected from the group comprising the first portion and a portion different from the first portion.

18. The system of claim 14:

wherein the project receiver is additionally for receiving at the project receiver input and providing at the project receiver output, at least one permission agreed upon by each of the plurality of the parties;

additionally comprising a results provider having an input coupled to the matcher/analyzer output for receiving the at least one result of the analysis and to the project receiver output for receiving the at least one permission, the results provider for releasing information responsive to the analysis responsive to the at least one permission.

19. The system of claim 18, wherein:

the at least one permission is received by the project receiver before the analysis;

the results provider receives at least one instruction after the analysis; and

the results provider releases at least one selected from the information responsive to the analysis and additional information responsive to the analysis responsive to the at least one instruction.

20. The system of claim 14, wherein each of the records in the plurality comprises at least one field transformed in a consistent manner by each of the plurality of the parties.

21. The system of claim 20, wherein a portion of the records in the plurality of one of the parties in the plurality are transformed in a manner that does not allow analysis with the remaining records in the plurality.

22. The system of claim 21 wherein the portion of the records transformed in the manner that does not allow analysis with the remaining records in the plurality are transformed to allow analysis with a plurality of records of a different party.

23. The system of claim 14, wherein at least a portion of each of the records in the plurality are transformed by encryption with a first key to produce a result, and encryption of the result with at least one second key, different from the first key.

24. The system of claim 14, wherein the analysis is performed to provide a reward.

25. The system of claim 14, wherein the analysis is performed to detect fraud.

26. The system of claim 25, wherein the fraud comprises financial fraud.

27. A computer program product comprising a computer useable medium having computer readable program code embodied therein for analyzing data from a plurality of parties, the computer program product comprising computer readable program code devices configured to cause a computer system to:

receive a plurality of records from each of the plurality of parties, each of the records comprising transformed data that at least obscures a value of the transformed data when decoded by a computer system; and

perform an analysis on at least a portion of at least one of the plurality of records received from each of the plurality of parties, in which the analysis comprises an analysis other than matching at least a portion of said at least the portion of at least one of the plurality of records from each of the plurality of parties.

28. The computer program product of claim 27:

additionally comprising computer readable program code devices configured to cause the computer system to receive at least one permission from at least one of the plurality of parties; and

wherein the performing the analysis step is responsive to the at least one permission received.

29. The computer program product of claim 28, additionally comprising computer readable program code devices configured to cause the computer system to:

receive at least one request for analysis; and

refuse to comply with the at least one request for analysis request received, responsive to the at least one permission received.

30. The computer program product of claim 27, wherein the computer readable program code devices configured to cause the computer system to perform the analysis additionally comprise computer readable program code devices configured to cause the computer system to match at least a second portion of said at least one of the plurality of records from each of the plurality of parties, said second portion being selected from the group comprising the first portion and a portion different from the first portion.

31. The computer program product of claim 27, additionally comprising computer readable program code devices configured to cause the computer system to release information responsive to the analysis responsive to instructions agreed upon by each of the plurality of the parties.

32. The computer program product of claim 31, wherein the computer readable program code devices configured to cause the computer system to release the information comprise computer readable program code devices configured to cause the computer system to:

release, responsive to instructions received before the analysis, summary information regarding the analysis to all of the plurality of parties;

receive additional instructions responsive to the releasing of the summary information; and

release data from at least one of the plurality of parties to at least one other of the plurality of parties responsive to the additional instructions.

33. The computer program product of claim 27, wherein each of the records in the plurality comprises at least one field transformed in a consistent manner by each of the plurality of the parties.

34. The computer program product of claim 33, wherein a portion of the records in the plurality of one of the parties in the plurality are transformed in a manner that does not allow analysis with the remaining records in the plurality.

35. The computer program product of claim 34 wherein the portion of the records transformed in the manner that does not allow analysis with the remaining records in the plurality are transformed to allow analysis with a plurality of records of a different party.

36. The computer program product of claim 27, wherein at least a portion of each of the records in the plurality are transformed by encryption with a first key to produce a result, and encryption of the result with at least one second key, different from the first key.

37. The computer program product of claim 27, wherein the analysis is performed as part of providing a reward.

38. The computer program product of claim 27, wherein the analysis is performed to detect fraud.

39. The computer program product of claim 38, wherein the fraud comprises financial fraud.

40. A method of providing data for analysis while controlling its release, the method comprising:

receiving from one party information regarding a transformation of the data, said information also used to transform data from another party;

transforming the data in a manner that facilitates analysis of the data without disclosing all of the data transformed; and

providing the transformed data for purpose of analysis with data transformed by said another party.

41. A computer program product comprising a computer useable medium having computer readable program code embodied therein for providing data for analysis while controlling its release, the computer program product comprising computer readable program code devices configured to cause a computer system to:

receive from one party information regarding a transformation of the data, said information also used to transform data from another party;

transform the data in a manner that facilitates analysis of the data without disclosing all of the data transformed; and

provide the transformed data for purpose of analysis with data transformed by said another party.