Anonymity measuring device

• US 8,407,246 B2
• Filed: 01/25/2008
• Issued: 03/26/2013
• Est. Priority Date: 01/29/2007
• Status: Active Grant

• Current Assignee: Accenture Global Services Limited (Accenture PLC)
• Original Assignee: Accenture Global Services Limited (Accenture PLC)
• Inventors: Bezzi, Michele
• Primary Examiner(s): REYES, MARIELA D
• Application Number:
  US12/524,912
• Publication Number:
  US 20100169332A1
• Time in Patent Office: 1,887 Days
• Field of Search: 707/781, 707/785, 707/783
• US Class Current: 707/781
• CPC Class Codes: G06F 16/24 Querying
• CPC Class Codes: G06F 21/6245 Protecting personal data, e.g. for financial or medical purposes

Abstract

The invention concerns a data anonymity measuring device for selectively transmitting an anonymised database to a third party comprising: calculation means (402) coupled to at least one memory, the memory storing an original database (204) and said anonymized database (206), said calculation means arranged to calculate the conditional entropy for each entry in said anonymized database based on entries in said original database; comparing means (406) arranged to compare at least one of said conditional entropies with a threshold value; and output means (410) arranged to transmit said anonymized database based on the result of said comparison.

Claims

1. A data anonymity measuring device for selectively transmitting an anonymized database to a third party comprising:

a calculation unit (402), implemented by a processor and coupled to at least one memory (204, 206), the memory storing an original database and said anonymized database separate and distinct from the original database, said calculation unit arranged to calculate conditional entropy (h(s)) for each entry in said anonymized database according to;

2. The anonymity measuring device of claim 1, further comprising a minimum entropy determination unit (404) arranged to determine a minimum entropy of said conditional entropies, and wherein said comparator is arranged to compare said minimum conditional entropy with said threshold value.

3. A selective transmission device for selectively transmitting an anonymized database to a third party comprising the anonymity measuring device of claim 1.

4. The selective transmission device of claim 3, comprising circuitry for erasing said anonymized database from said memory under the control of said anonymity measuring device if one or more of said conditional entropies is lower than said threshold value.

5. A method for selectively transmitting an anonymized database to a third party, the method comprising:

for each entry in said anonymized database, determining conditional entropy by calculating cumulative entropy (h) according to;

h=h−

P(r_a|S_b)log₂ P(r_a|S_b)

wherein r_a is a currently processed entry in the original database, s_b is the currently processed entry in the anonymized database,

wherein the anonymized database is separate and distinct from an original database;

comparing at least one of said conditional entropies with a threshold entropy value; and

selectively transmitting said database to said third party based on the result of said comparison.

6. The method of claim 5, wherein in said comparison step said at least one conditional entropies is a minimum conditional entropy of said condition entropy values, and wherein said anonymized database is transmitted to said third party if said minimum conditional entropy is greater than said threshold entropy value.

7. The method of claim 6, wherein, if said minimum entropy is less than said threshold value, further anonymizing said anonymized database.

8. A processor-readable, non-transitory storage medium having stored thereon executable instructions that, when executed by processor, cause the processor to:

for each entry in an anonymized database, determine conditional entropy by calculating cumulative entropy (h) according to;

h=h−

P(r_a|S_b)log₂ P(r_a|S_b)

wherein r_a is a currently processed entry in the original database, s_b is the currently processed entry in the anonymized database,

wherein the anonymized database is separate and distinct from the original database;

comparing at least one of said conditional entropies with a threshold entropy value; and

selectively transmitting said database to a third party based on the result of said comparison.