Method and System for Metadata Analysis and Collection with Privacy

• US 20150229617A1
• Filed: 02/11/2015
• Published: 08/13/2015
• Est. Priority Date: 02/11/2014
• Status: Active Grant

• Current Assignee: Yaana Technologies, LLC
• Original Assignee: Yaana Technologies, LLC
• Inventors: Hammer, Michael P., Puri, Rajesh, Grootwassink, David
• Granted Patent: US 10,439,996 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: G06F 21/6272 by registering files or documents with a third party
• CPC Class Codes: H04L 63/0407 wherein the identity of one or more communicating identities is hidden cryptographic mechanisms or cryptographic arrangements for anonymous credentials or for identity based cryptographic systems H04L9/00
• CPC Class Codes: H04L 63/0435 wherein the sending and receiving network entities apply symmetric encryption, i.e. same key used for encryption and decryption cryptographic mechanisms or cryptographic arrangements for symmetric key encryption H04L9/06
• CPC Class Codes: H04L 63/062 for key distribution, e.g. centrally by trusted party cryptographic mechanisms or cryptographic arrangements for key distribution involving a central third party H04L9/0819
• CPC Class Codes: H04L 63/302 gathering intelligence information for situation awareness or reconnaissance
• CPC Class Codes: H04L 63/308 retaining data, e.g. retaining successful, unsuccessful communication attempts, internet access, or e-mail, internet telephony, intercept related information or call content

Abstract

A system and method for metadata analysis and collection with privacy is disclosed. According to one embodiment, a trusted third party (TTP) system generates and transmits authorization keys to a government agency (GA) system and a communication service provider (CSP) system. The TTP system receives index records referencing records of subscribers from the CSP system and ingests the index records received from the CSP system. The TTP system receives a target index request from the GA system and sends a metadata record request to the CSP system based on the target index request. The CSP system sends metadata records to the TTP system, and the TTP system delivers the metadata records to the GA system. The metadata records are encrypted with encryption keys shared between the GA system and the CSP system such that the TTP system cannot decrypt the metadata records.

Claims

1. A method comprising:

generating and transmitting authorization keys to a government agency (GA) system and a communication service provider (CSP) system;

receiving index records from the CSP system, wherein the index records reference records of subscribers of the CSP system;

ingesting and storing the index records received from the CSP system;

receiving a target index request from the GA system;

sending a metadata record request to the CSP system based on the target index request;

receiving metadata records from the CSP system and sending the metadata records to the GA system,

wherein the metadata records are encrypted with encryption keys shared between the GA system and the CSP system.

2. The method of claim 1, wherein the encryption keys are symmetric encryption keys shared between the GA system and the CSP system.

3. The method of claim 1, wherein the stream of index records includes a constant flow of data packets.

4. The method of claim 1, further comprising storing the index records in a data center.

5. The method of claim 1, further comprising performing analysis on the index records in response to the target index request.

6. The method of claim 1, wherein the target index request includes a target index that transforms the target ID using indexing keys.

7. The method of claim 6, wherein the target ID is a telephone number, an IP address, an email address, a media access control (MAC) address, an international mobile subscriber identity (IMSI), an international mobile station equipment identity (IMEI), a credit card number, or a user name.

8. The method of claim 1, further comprising searching a target index on the index records and gathering a metadata record identifier list.

9. The method of claim 8, wherein the metadata record identifier list includes an initial match hit of call records in which the target index acts as a caller or a callee, forwards a call to another party, or plays a role in the communication.

10. The method of claim 9, wherein the metadata record identifier list includes a second match hit of call records in which parties of the initial match hit are used as target indexes.

11. The method of claim 7, further comprising sending the metadata record request based on the metadata record identifier list.

12. The method of claim 1, further comprising determining that the metadata records received from the CSP system are partial or incomplete;

and re-sending the metadata record request to the CSP system.

13. The method of claim 1, wherein the index records include identifiers from multiple parties.

14. The method of claim 13, wherein the identifiers from the multiple parties include telephone numbers.

15. The method of claim 1, wherein the index records include a reference to a full record.

16. A method comprising:

receiving an authorization keys shared with a CSP system;

generating queries for a target ID;

transforming the target ID to a target index;

sending a target index request to a TTP system;

receiving encrypted metadata records from the TTP system; and

decrypting the encrypted metadata records using the authorization key,

wherein the TTP system keeps track of a volume of the encrypted metadata records, and is incapable of decrypting the encrypted metadata records.

17. The method of claim 16, wherein the receiving encrypted metadata records further comprises receiving the encrypted metadata records in a batch.

18. The method of claim 16, wherein the receiving encrypted metadata records further comprises receiving the encrypted metadata records in a streams of data packets.

19. The method of claim 16, further comprising:

receiving a transport crypto key from the TTP system; and

encrypting the target index request using the transport crypto key.

20. A method comprising:

receiving an authorization keys shared with a GA system;

receiving a metadata record request from a TTP system, wherein the metadata record request includes a metadata record ID;

retrieving metadata records that are associated with the metadata record ID from a metadata store;

generating encrypted metadata records by encrypting the metadata records using the authorization key; and

sending the encrypted metadata records to the TTP system.

21. The method of claim 20, wherein the sending the encrypted metadata records to the TTP system further comprises sending the encrypted metadata records in a streams of data packets.

22. The method of claim 20, further comprising:

receiving a transport crypto key from the TTP system, wherein the metadata record request is encrypted using the transport crypto key; and

decrypting the metadata record request using the transport crypto key.

23. The method of claim 20, further comprising storing the encrypted metadata records in a data center.