Apparatus and method for masking a real user controlling synthetic identities

• US 9,372,987 B1
• Filed: 12/19/2014
• Issued: 06/21/2016
• Est. Priority Date: 08/04/2014
• Status: Active Grant

• Current Assignee: Anonyome Labs, Inc.
• Original Assignee: Anonyome Labs, Inc.
• Inventors: Ashley, Paul, Shillingford, Steve, Clark, Greg, Bartley, Tim, Readshaw, Neil, Choi, Christopher
• Primary Examiner(s): Dinh, Minh
• Application Number:
  US14/578,284
• Time in Patent Office: 550 Days
• Field of Search: None
• US Class Current: 1/1
• CPC Class Codes: G06F 21/6254 by anonymising data, e.g. decorrelating personal data from the owner's identification

Abstract

A machine has a processor and a memory storing instructions executed by the processor to issue a challenge in response to a first request, evaluate a response to the challenge to establish confirmation that the first request originated from a human user, issue a user identification in response to the confirmation, store the user identification with encrypted identity data, receive a second request that includes the user identification, and return the encrypted identity data in response to the second request.

Claims

1. A machine, comprising:

a processor, and

a memory storing instructions executed by the processor to;

issue a challenge in response to a first request,

evaluate a response to the challenge to establish confirmation that the first request originated from a human user,

issue a user identification in response to the confirmation,

store the user identification with encrypted identity data, wherein the instructions executed by the processor to store the user identification with encrypted identity data further comprise instructions to store an encrypted synthetic identification, a corresponding public key and corresponding client device information,

receive a second request that includes the user identification, and

return the encrypted identity data in response to the second request.

2. The machine of claim 1 wherein the instructions executed by the processor to return the encrypted identity data include instructions to return the encrypted synthetic identification and the corresponding public key.

3. The machine of claim 1 wherein the instructions executed by the processor to store the user identification with encrypted identity data further comprise instructions to store a plurality of encrypted synthetic identifications, a corresponding plurality of public keys and a corresponding plurality of client device information.

4. The machine of claim 3 wherein the instructions executed by the processor to return the encrypted identity data include instructions to individually return encrypted synthetic identifications, corresponding public keys and corresponding client device information.

5. A non-transitory computer readable storage medium with instructions executed by a processor to:

coordinate a request for a user identification from a synthetic identity management service,

store the user identification and a symmetric key,

coordinate a request for a synthetic identification from the synthetic identity management service,

encrypt the synthetic identification using the symmetric key to form encrypted synthetic identification,

upload the encrypted synthetic identification to the synthetic identity management service,

coordinate a request for the encrypted synthetic identification from the synthetic identity management service using the user identification,

decrypt the encrypted synthetic identification to render a first synthetic identification,

combine the first synthetic identification with a second synthetic identification,

encrypt the first synthetic identification and the second synthetic identification using the symmetric key to form encrypted combined synthetic identification, and

upload the combined synthetic identification to the synthetic identity management service.

6. The non-transitory computer readable storage medium of claim 5 wherein the instructions executed by the processor to decrypt the encrypted synthetic identification utilize a first public key and a first private key.

7. The non-transitory computer readable storage medium of claim 5 further comprising instructions executed by the processor to

coordinate a request for the combined synthetic identification, and

decrypt the combined synthetic identification using a first public key, a first private key, a second public key and a second private key.