COMPUTER IMPLEMENTED METHOD FOR ANALYZING DATA OF A USER WITH THE DATA BEING STORED PSEUDONYMOUSLY IN A DATABASE

• US 20110185188A1
• Filed: 12/15/2010
• Published: 07/28/2011
• Est. Priority Date: 12/18/2009
• Status: Active Grant

• Current Assignee: Adrian Spalka, CompuGroup Medical SE
• Original Assignee: Compugroup Medical AG (CompuGroup Medical SE & Co. KGaA)
• Inventors: Spalka, Adrian, Lehnhardt, Jan
• Granted Patent: US 8,695,106 B2
• Time in Patent Office: Days
• US Class Current: 713/189
• CPC Class Codes: G06F 21/602 Providing cryptographic facilities or services
• CPC Class Codes: G06F 21/6254 by anonymising data, e.g. decorrelating personal data from the owner's identification
• CPC Class Codes: G06F 21/64 Protecting data integrity, e.g. using checksums, certificates or signatures
• CPC Class Codes: H04L 2209/42 Anonymization, e.g. involving pseudonyms
• CPC Class Codes: H04L 63/0421 Anonymous communication, i.e. the party's identifiers are hidden from the other party or parties, e.g. using an anonymizer
• CPC Class Codes: H04L 9/0825 using asymmetric-key encryption or public key infrastructure [PKI], e.g. key signature or public key certificates
• CPC Class Codes: H04L 9/0863 involving passwords or one-time passwords network architectures or network communication protocols for using one-time keys in a packet data network H04L63/067
• CPC Class Codes: H04L 9/0869 involving random numbers or seeds
• CPC Class Codes: H04L 9/30 Public key, i.e. encryption algorithm being computationally infeasible to invert or user's encryption keys not requiring secrecy

Abstract

The invention relates to a computer implemented method for analyzing data of a first user, wherein an asymmetric cryptographic key pair is associated with the first user, said asymmetric cryptographic key pair comprising a public key and a private key, the data being stored pseudonymously in a database with the data being assigned to an identifier, wherein the identifier comprises the public key, the method comprising:

receiving a set of rules, the set of rules describing data processing steps,

receiving the identifier,

retrieving the data assigned to the identifier from the database,

analyzing the retrieved data by applying the set of rules,

providing a result of the analysis.

Claims

1. A computer implemented method for analyzing data of a first user, wherein an asymmetric cryptographic key pair is associated with the first user, said asymmetric cryptographic key pair comprising a public key and a private key, the data being stored pseudonymously in a database, the data being assigned to an identifier, wherein the identifier comprises the public key, the method comprising:

receiving a set of rules, the set of rules describing data processing steps,

receiving the identifier,

retrieving the data assigned to the identifier from the database,

analyzing the retrieved data by applying the set of rules,

providing a result of the analysis.

2. The method of claim 1, wherein the identifier corresponds to the public key of the first user.

3. The method of claim 1, wherein the identifier is a pseudonym of the first user and/or wherein the identifier is an access key to the data in the database.

4. The method of claim 1, wherein analyzing the retrieved data is performed by an inference engine.

5. The method of claim 1, further comprising

retrieving a digital signature of the data stored in the database with the data,

verifying the digital signature using the public key of the first user.

6. The method of claim 1, wherein providing the result of the analysis comprises sending the result to said first user with the recipient address to which the result is sent comprising the public key.

7. The method of claim 6, wherein said result is sent encrypted with the public key to the first user.

8. The method of claim 6, wherein said result is sent from a second user, wherein a second user asymmetric cryptographic key pair is associated with the second user, said key pair comprising a public sender key and a private sender key, the method further comprising generating a signature of the result using the private sender key and sending the signature to said first user as well as the second user'"'"'s public key for signature verification.

9. The method of claim 6, wherein the result is sent as a synchronous or asynchronous conferencing message.

14. A computer implemented method for generating a public key and a private key for being used in the method according to claim 1, the public key being the public key of the first or the second user and the private key being the private key of the first or the second user, the method comprising:

entering a user-selected secret,

storing the user-selected secret in memory,

computing the private key by applying an embedding and randomizing function onto the secret,

storing the private key in memory,

computing the public key using the private key, the public key and the private key forming an asymmetric cryptographic key pair,

erasing the secret and the private key from the memory, as well as any intermediate computation result,

outputting the public key.

15. The method of claim 14, wherein the embedding and randomizing function comprises:

applying a first one-way function on the secret to provide a first value,

providing a random number,

embedding the random number and the first value by combining them to provide a combination,

applying a second one-way function on the combination to provide a second value, wherein the second value constitutes the private key.

16. The method of claim 14, wherein the computation of the public key is performed by ECC cryptography.

17. A computer program product comprising computer executable instructions to perform the method in claim 1.

10. A computer implemented method for receiving a result from a second user by a first user, wherein an asymmetric cryptographic key pair is associated with the first user, said key pair comprising a public key and a private key, the method comprising receiving the result by said first user with the recipient address at which the result is received comprising the public key.

11. A computer implemented method for storing data of a first user in a database, the first user having a private key, the method comprising:

calculating a set of public keys, wherein the private key and each public key of the set of public keys form an asymmetric cryptographic key pair,

storing the data pseudonymously in the database with the data being assigned to an identifier, wherein the identifier comprises one of the public keys.

12. The method of claim 11, further comprising generating a digital signature for the data using the private key, wherein the digital signature is stored into the database with the data.

13. The method of claim 11 further comprising directly receiving the private key or generating the private key, wherein generating the private key comprises receiving an input value and applying a cryptographic one-way function to the input value for generation of the private key, wherein the cryptographic one-way function is an injective function.

18. A computer system for analyzing data of a first user, wherein an asymmetric cryptographic key pair is associated with the first user, said asymmetric cryptographic key pair comprising a public key and a private key, the data being stored pseudonymously in a database with the data being assigned to an identifier, wherein the identifier comprises the public key, the system comprising:

a first interface for receiving a set of rules, the set of rules describing data processing steps,

a second interface for receiving the identifier,

a third interface for retrieving the data assigned to the identifier from the database,

an analyzing component for analyzing the retrieved data by applying the set of rules,

an output component for providing a result of the analysis.

19. A computer system for receiving a result from a second user by a first user, wherein an asymmetric cryptographic key pair is associated with the first user, said key pair comprising a public key and a private key, the system comprising means for receiving the result by said first user with the recipient address at which the result is received comprising the public key.

20. A computer system for storing data of a first user in a database, the first user having a private key, the system comprising:

processor means for calculating a set of public keys, wherein the private key and each public key of the set of public keys form an asymmetric cryptographic key pair,

means for storing the data pseudonymously in the database with the data being assigned to an identifier, wherein the identifier comprises one of the public keys.