Method for outsourcing data for secure processing by untrusted third parties

• US 8,750,508 B2
• Filed: 06/15/2012
• Issued: 06/10/2014
• Est. Priority Date: 06/15/2012
• Status: Active Grant

• Current Assignee: Mitsubishi Electric Research Laboratories, Inc. (Mitsubishi Electric Corporation)
• Original Assignee: Mitsubishi Electric Research Laboratories, Inc. (Mitsubishi Electric Corporation)
• Inventors: Rane, Shantanu, Sun, Wei
• Primary Examiner(s): Zand, Kambiz
• Assistant Examiner(s): GUIRGUIS, MICHAEL M
• Application Number:
  US13/525,218
• Publication Number:
  US 20130340098A1
• Time in Patent Office: 725 Days
• Field of Search: 380/265, 705/75
• US Class Current: 380/265
• CPC Class Codes: H04L 41/069 using logs of notifications; Post-processing of notifications
• CPC Class Codes: H04L 63/0407 wherein the identity of one or more communicating identities is hidden cryptographic mechanisms or cryptographic arrangements for anonymous credentials or for identity based cryptographic systems H04L9/00
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload

Abstract

Data is generated in a client based on events at a client, wherein each event is associated with a first dimension, a second dimension and a quantity. A random value is generated for each interval of the first dimension and each instance of the second dimension. The quantity of each event is modified using the random value to determine a modified quantity. A running total for each interval of the first dimension and each instance of the second dimension is determined using the modified quantities and transmitted to an untrusted third party. An exact result of processing the modified quantities and the running totals by the untrusted third party can then be received and decoded by the client.

Claims

1. A method for processing data generated based on events having a first dimension, a second dimension and a quantity, comprising:

generating a random value for each interval of the first dimension and each instance of the second dimension;

adding the random value to the quantity of each event to determine a modified quantity;

determining a running total for each interval of the first dimension and each instance of the second dimension using the modified quantities;

transmitting the modified quantities and the running totals to an untrusted third party; and

receiving an exact result of processing the modified quantities and the running totals by the untrusted third party, wherein the steps are performed in real time by a client.

2. The method of claim 1, wherein the result includes aggregate statistics on the data.

3. The method of claim 1, wherein the result includes an audit report on the data.

4. The method of claim 1, wherein the untrusted third party is a server connected to the client by a network.

5. The method of claim 1, where in the random value is generated by a cryptographically secure pseudo-random number generator.

6. The method of claim 1, wherein data in the second dimension are encrypted.

7. The method of claim 1, wherein the aggregate statistics are weighted.