Granted Patent B1

US 9,338,220 · App. 13/844,770 · Granted May 10, 2016

Abstract

Claims (60)

1. A method for anonymizing data to be stored in a destination computing device, comprising:

receiving data to be transmitted from a user computer to the destination computing device over a network for storage, the data including an object with a plurality of data fields;

selectively extracting one or more data fields of the object, to be transmitted to the destination computing device, by a record extractor;

computing a hash value using the extracted one or more data fields by a hash builder;

storing the computed hash value for the extracted one or more data fields of the object in a remote hash database;

anonymizing the received data using an anonymization module to derive an anomymized data, based on an anonymization strategy stored in an anonymization strategy module; and

transmitting anonymized received data to the destination computing device for storage, over a network;

generating a hash value of the one or more received anonymized data fields of the object retrieved from the destination computing device; and

verifying the generated hash value for each of the data fields of the object by comparing the generated hash value with corresponding stored hash value in the remote hash database, by a hash verifier.

2. The method of claim 1 , wherein selectively extracting further including:

analyzing the received data for a type of communication, wherein the type of communication includes at least one or more of creating, updating or deleting the object;

based on the type of communication, selecting one or more data fields of the object for extraction.

3. The method of claim 2 , further including:

computing a new hash value using the extracted one or more data fields of the object, if the type of communication indicates an update to the object; and

replacing the stored computed hash value with the computed new hash value.

4. The method of claim 1 , wherein generating a hash value further including:

retrieving the stored anonymized received data from the destination computing device;

de-anonymizing the anonymized received data to derive de-anonymized received data, de-anonymized received data including the object;

retrieving the selective one or more data fields from the object;

computing a hash value using the retrieved selective one or more data fields from the object.

5. The method of claim 4 , further including:

flagging a mismatch between computed hash for the retrieved selective one or more data fields and the corresponding stored hash for the selective one or more data fields.

6. The method of claim 5 , wherein the mismatch indicates a malicious modification of the selective one or more data fields at the destination computing device.

7. The method of claim 1 , wherein the anonymized data field is searchable using an anonymized keyword.

8. The method of claim 1 , further including:

flagging a mismatch between computed hash for the retrieved selective one or more data fields and the corresponding stored hash for the selective one or more data fields.

9. The method of claim 8 , wherein the mismatch indicates a malicious modification of the selective one or more data fields at the destination computing device.

10. An anonymization system to anonymize data stored in a destination computing device, comprising:

an anonymization strategy module to store anonymization strategy for data anonymization;

a logic to receive data to be stored in the destination computing device received over a network from a user computer, the data including an object with a plurality of data fields;

a record extractor configured to selectively extract one or more data fields of the object to be transmitted to the destination computing device;

a hash builder to compute a hash using the extracted one or more data fields of the object;

a remote hash database to store the computed hash for the extracted one or more data fields;

an anonymization module

to selectively anonymize received data based on the anonymization strategy to generate an anonymized received data; and

transmit the anonymized received data to the destination computing device for storage, over a network; and

a hash verifier to

generate a hash value of the one or more received anonymized data fields of the object retrieved from the destination computing device; and

verify the generated hash value of each of the data fields by comparing the generated hash value with corresponding stored hash value in the remote hash database.

11. The system of claim 10 , wherein,

the record extractor

analyzes the received data for a type of communication, wherein the type of communication includes at least one or more of creating, updating or deleting the object; and

based on the type of communication, selects one or more data fields for extraction.

12. The system of claim 11 , wherein

if the record extractor determines that the type of communication indicates an update to the object, the hash builder

computes a new hash value using the extracted one or more fields of data, based on the type of communication; and

replaces the stored computed hash value with the computed new hash.

13. The system of claim 10 , wherein:

the anonymization system is configured to

retrieve stored anonymized received data from the destination computing device;

de-anonymize the anonymized received data to derive the de-anonymized data, de-anonymized received data including the object;

the selective one or more data fields from the object are retrieved; and

the hash verifier

computes a hash value for the retrieved selective one or more data fields; and

compares the computed hash for the retrieved selective one or more data fields with corresponding stored hash for the selective one or more data fields for a match.

14. The system of claim 13 , wherein the hash verifier flags a mismatch between computed hash for the retrieved selective one or more data fields and the corresponding stored hash for the selective one or more data fields.

15. The system of claim 14 , wherein the mismatch indicates a malicious modification of the selective one or more data fields at the destination computing device.

16. The system of claim 10 , wherein the anonymized data field is searchable using an anonymized keyword.

17. The system of claim 10 , wherein the hash verifier flags a mismatch between computed hash value for the retrieved selective one or more data fields and the corresponding stored hash value for the selective one or more data fields.

18. The system of claim 17 , wherein the mismatch indicates a malicious modification of the selective one or more data fields at the destination computing device.

Assignments (14)