Method and apparatus for managing data, and data management system using the same

• US 9,998,433 B2
• Filed: 04/14/2016
• Issued: 06/12/2018
• Est. Priority Date: 04/14/2015
• Status: Active Grant

• Current Assignee: Samsung SDS (China) Co., Ltd. (Samsung Group)
• Original Assignee: Samsung SDS (China) Co., Ltd. (Samsung Group)
• Inventors: Choe, Min Hyeok, Yoo, In Seon, Park, Yeong Seok, Chung, Jae Wook
• Primary Examiner(s): Giddins, Nelson
• Application Number:
  US15/098,646
• Publication Number:
  US 20160308842A1
• Time in Patent Office: 789 Days
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/0471 applying encryption by an intermediary, e.g. receiving clear information at the intermediary and encrypting the received information at the intermediary before forwarding

Abstract

A method for managing data, comprising: receiving data about information collected by a sensor, in which at least a part of the data is encrypted; and performing an analysis in a state where both non-encrypted section and encrypted section of the data are not decrypted.

Also, a method for managing data encryption, comprising: allowing a sensor or an intermediate network device to encrypt at least a part of data about collected information; allowing the sensor or the intermediate network device to transmit the at least partially encrypted data; allowing a data management apparatus to receive the at least partially encrypted transmitted data; allowing the data management apparatus to store the at least partially encrypted received data; and allowing the data management apparatus to perform an analysis in a state where both non-encrypted section and encrypted section of the at least partially encrypted data are not decrypted.

Claims

1. A method for managing data, comprising:

receiving data collected by a sensor, the data comprising an encrypted section and a non-encrypted section, the encrypted section comprising a first encrypted data entry and a second encrypted data entry;

using a mapping table to map the first encrypted data entry and the second encrypted data entry to a first matched information entry without decrypting the first encrypted data entry and the second encrypted data entry, wherein the first encrypted data entry corresponds to a first decrypted data value that is different from the first matched information entry, and wherein the second encrypted data entry corresponds to a second decrypted data value that is different from the first matched information entry and the first decrypted data value; and

based on at least the first matched information entry, performing, via a hardware processor, an analysis of the data without decrypting the encrypted section,

wherein the first decrypted data value and the second decrypted data value indicate measured values by a sensor, and

wherein the first matched information indicates processed information obtained by processing the measured values according to a predetermined criterion.

2. The method for managing data according to claim 1, wherein the performing the analysis comprises:

acquiring matched information that is matched with the encrypted section of the data by using the mapping table, which includes mapping relationships between the encrypted section and the matched information; and

performing the analysis further based on the matched information.

3. The method for managing data according to claim 2,

wherein the mapping relationships of the mapping table allow a plurality of different encrypted data entries of the encrypted section to be matched with a same matched information entry of the matched information.

4. The method for managing data according to claim 3, wherein the encrypted section further comprises a third encrypted data entry,

wherein the using the mapping table further comprises mapping the third encrypted data entry to a second matched information entry that is different from the first matched information entry, and

wherein the third encrypted data entry corresponds to a third decrypted data value that is different from the second matched information entry, the first decrypted data value, and the second decrypted data value.

5. The method for managing data according to claim 1, further comprising:

storing the encrypted section of the data without decrypting the encrypted section.

6. A method for managing data encryption, comprising:

encrypting, by one of a sensor and an intermediate network device connected between the sensor and a data management apparatus, at least a part of data collected by the sensor to yield partially encrypted data comprising an encrypted section and a non-encrypted section, the encrypted section comprising a first encrypted data entry and a second encrypted data entry;

transmitting, by the one of the sensor and the intermediate network device, the partially encrypted data;

receiving, by the data management apparatus, the partially encrypted transmitted data;

storing, by the data management apparatus, the partially encrypted received data;

using a mapping table to map the first encrypted data entry and the second encrypted data entry to a first matched information entry without decrypting the first encrypted data entry and the second encrypted data entry, wherein the first encrypted data entry corresponds to a first decrypted data value that is different from the first matched information entry, and wherein the second encrypted data entry corresponds to a second decrypted data value that is different from the first matched information entry and the first decrypted data value; and

based on at least the first matched information entry, performing, by the data management apparatus, an analysis of the partially encrypted data without decrypting the encrypted section,

wherein the first decrypted data value and the second decrypted data value indicate measured values by a sensor, and

wherein the first matched information indicates processed information obtained by processing the measured values according to a predetermined criterion.

7. The method for managing data encryption according to claim 6, wherein the encrypted section is selected from the data according to a predetermined method.

8. The method for managing data encryption according to claim 6, wherein the encrypted section represents measured values of the data collected by the sensor.

9. A data management apparatus, comprising:

a hardware processor; and

a non-transitory computer-readable storage medium storing instructions which, when executed by the hardware processor, cause the hardware processor to perform operations comprising;

receiving data collected by a sensor, the data comprising an encrypted section and a non-encrypted section, the encrypted section comprising a first encrypted data entry and a second encrypted data entry,

using a mapping table to map the first encrypted data entry and the second encrypted data entry to a first matched information entry without decrypting the first encrypted data entry and the second encrypted data entry, wherein the first encrypted data entry corresponds to a first decrypted data value that is different from the first matched information entry, and wherein the second encrypted data entry corresponds to a second decrypted data value that is different from the first matched information entry and the first decrypted data value, and

based on at least the first matched information entry, performing an analysis of the data without decrypting the encrypted section,

wherein the first decrypted data value and the second decrypted data value indicate measured values by a sensor, and

wherein the first matched information indicates processed information obtained by processing the measured values according to a predetermined criterion.

10. The data management apparatus according to claim 9, wherein the data management apparatus does not have a decryption key for decrypting the encrypted section of the data.

11. The data management apparatus according to claim 9, wherein the non-transitory computer-readable storage medium stores additional instructions which, when executed by the hardware processor, cause the hardware processor to perform further operations comprising acquiring matched information that is matched with the encrypted section of the data by using the mapping table, which includes mapping relationships between the encrypted section and the matched information, and perform the analysis further based on the matched information.

12. The data management apparatus according to claim 11, wherein the mapping relationships of the mapping table allow a plurality of different encrypted data entries of the encrypted section to be matched with a same matched information entry of the matched information.