Computer implemented method for analyzing data of a user with the data being stored pseudonymously in a database

• US 8,695,106 B2
• Filed: 12/15/2010
• Issued: 04/08/2014
• Est. Priority Date: 12/18/2009
• Status: Active Grant

• Current Assignee: Adrian Spalka, CompuGroup Medical SE
• Original Assignee: Compugroup Medical AG (CompuGroup Medical SE & Co. KGaA)
• Inventors: Spalka, Adrian, Lehnhardt, Jan
• Primary Examiner(s): HOLDER, BRADLEY W
• Application Number:
  US12/968,520
• Publication Number:
  US 20110185188A1
• Time in Patent Office: 1,210 Days
• Field of Search: 726/30, 726/26, 726/27, 726/28, 713/189, 713/193
• US Class Current: 726/30
• CPC Class Codes: G06F 21/602 Providing cryptographic facilities or services
• CPC Class Codes: G06F 21/6254 by anonymising data, e.g. decorrelating personal data from the owner's identification
• CPC Class Codes: G06F 21/64 Protecting data integrity, e.g. using checksums, certificates or signatures
• CPC Class Codes: H04L 2209/42 Anonymization, e.g. involving pseudonyms
• CPC Class Codes: H04L 63/0421 Anonymous communication, i.e. the party's identifiers are hidden from the other party or parties, e.g. using an anonymizer
• CPC Class Codes: H04L 9/0825 using asymmetric-key encryption or public key infrastructure [PKI], e.g. key signature or public key certificates
• CPC Class Codes: H04L 9/0863 involving passwords or one-time passwords network architectures or network communication protocols for using one-time keys in a packet data network H04L63/067
• CPC Class Codes: H04L 9/0869 involving random numbers or seeds
• CPC Class Codes: H04L 9/30 Public key, i.e. encryption algorithm being computationally infeasible to invert or user's encryption keys not requiring secrecy

Abstract

The invention relates to a computer implemented method for analyzing data of a first user, wherein an asymmetric cryptographic key pair is associated with the first user, said asymmetric cryptographic key pair comprising a public key and a private key, the data being stored pseudonymously in a database with the data being assigned to an identifier, wherein the identifier comprises the public key, the method comprising:

• • receiving a set of rules, the set of rules describing data processing steps,
  • receiving the identifier,
  • retrieving the data assigned to the identifier from the database,
  • analyzing the retrieved data by applying the set of rules,
  • providing a result of the analysis.

Claims

1. A computer implemented method for analyzing data of a first user, wherein an asymmetric cryptographic key pair is associated with the first user, said asymmetric cryptographic key pair comprising a public key and a private key, the data being stored pseudonymously in a database, the data being assigned to an identifier, wherein the identifier comprises the public key, the method for analyzing data of a first user comprising performing the following steps on a processor:

generating the public key and the private key according to the following method;

entering a user-selected secret,

storing the user-selected secret in memory,

computing the private key by applying an embedding and randomizing function onto the secret,

storing the private key in memory,

computing the public key using the private key, the public key and the private key forming the asymmetric cryptographic key pair,

erasing the secret and the private key from the memory, as well as any intermediate computation result, and

outputting the public key,

receiving a set of rules, the set of rules describing data processing steps,

receiving the identifier,

retrieving the data assigned to the identifier from the database,

analyzing the retrieved data by applying the set of rules, and

providing a result of the analysis;

the public key being the public key of the first or a second user and the private key being the private key of the first or the second user.

2. The method for analyzing data of a first user of claim 1, wherein the embedding and randomizing function comprises:

applying a first one-way function on the secret to provide a first value,

providing a random number,

embedding the random number and the first value by combining them to provide a combination,

applying a second one-way function on the combination to provide a second value, wherein the second value constitutes the private key.

3. The method for analyzing data of a first user of claim 1, wherein the computation of the public key is performed by elliptic curve cryptography (ECC).