Granted Patent B1

US 11,228,566 · App. 13/929,784 · Granted Jan 18, 2022

Inventors: Pravin Kothari (San Jose, CA); Debabrata Dash (San Jose, CA)

Assignee: Ciphercloud, Inc.

H04L63/0421

Abstract

Claims (63)

1. A method for anonymizing data to be transmitted to a destination computing device, comprising:

receiving data to be transmitted to the destination from a user computer, the data including a plurality of characters defining a clear data in a first base encoding scheme;

anonymizing the data using an anonymization module to derive an interim anonymized data in a different second base encoding scheme by at least using an initialization vector;

generating an order indicator data indicative of the order of the received clear data that corresponds to the anonymized data by using one or more order preserving anonymization functions such that the order indicator data preserves the order of the clear data after de-anonymizing the anonymized data using a regenerated initialization vector to derive the clear data; and

transmitting the order indicator data along with the anonymized data to the destination computing device over a network.

2. The method of claim 1 , wherein generating an order indicator data further including:

providing an order preserving hash function;

generating a hash value by hashing the received data and the order preserving hash function, wherein the hash value is indicative of the order of the received data; and

designating the hash value as the order indicator data.

3. The method of claim 1 , wherein generating an order indicator data further including:

generating an order preserving token that corresponds to the received data; and

designating the order preserving token as the order indicator data.

4. The method of claim 1 , wherein generating an order indicator data further including:

anonymizing the received data using an order preserving anonymization system to generate an anonymized data that is indicative of the order of the received data; and

designating the generated anonymized data that is indicative of the order of the received data as the order indicator data.

5. The method of claim 1 , further including:

receiving a request to sort the anonymized data stored at the destination computing device; and

sorting the anonymized data based on the corresponding order indicator data.

6. The method of claim 1 , further including:

selecting a portion of the anonymized data as a search ID;

storing in a data store, a cross reference between a search key indicative of a portion of the received data and the corresponding search ID.

7. The method of claim 6 , further including:

receiving a request to search the anonymized data stored at the destination computing device, using a search term;

retrieving search ID that corresponds to the search key matching the search term;

sending a search request to the destination computing device to retrieve selective anonymized data wherein the search ID matches with the portion of the anonymized data;

receiving selective anonymized data;

deanonymizing the received anonymized data; and

returning the deanonymized data that matches the search term as a response to the search request.

8. The method of claim 6 , further including:

providing a search ID field marker to indicate the beginning of the selected portion of the anonymized data; and

transmitting the search ID field marker along with the anonymized data to the destination computing device.

9. An anonymization system to anonymize data transmitted to a destination computing device, comprising:

an anonymization strategy module of the anonymization system executed on a computing device, the anonymization strategy module configured to store anonymization strategy for data anonymization in a memory storage;

a logic to receive data to be transmitted to the destination computing device from a user computer, wherein the received data including a plurality of characters defining a clear data in a first base encoding scheme;

an anonymization module to anonymize the data based on an anonymization strategy to derive an interim anonymized data in a different second base encoding scheme by at least using an initialization vector;

an order indicator generator to generate an order indicator data indicative of the order of the received data that corresponds to the anonymized data by using one or more order preserving anonymization functions such that the order indicator data preserves the order of the clear data after de-anonymizing the anonymized data using a regenerated initialization vector to derive the clear data; and

transmit the order indicator data along with the anonymized data to the destination computing device over a network.

10. The system of claim 9 , wherein the order indicator generator

receives an order preserving hash function;

generates a hash value by hashing the received data and an order preserving hash function; and

designates the generated hash value as the order indicator data for the received data.

11. The system of claim 9 , wherein the order indicator generator

generates an order preserving token that corresponds to the received data; and

designates the order preserving token as the order indicator data.

12. The system of claim 9 , wherein the order indicator generator

generates an order preserved anonymized data of the received data, wherein the generated order preserved anonymized data preserves the order of the received data; and

designates the order preserved anonymized data as the order indicator data.

13. The system of claim 9 , further including:

a request to sort the anonymized data stored at the destination computing device is received; and

the anonymized data is sorted based on the corresponding order indicator data.

14. The system of claim 9 , further including:

select a portion of the anonymized data as a search ID;

store in a data store, a cross reference between a search key indicative of a portion of the received data and the corresponding search ID.

15. The system of claim 14 , further configured to:

receive a request to search the anonymized data stored at the destination computing device, using a search term;

retrieve search ID that corresponds to the search key matching the search term;

send a search request to the destination computing device to retrieve selective anonymized data wherein the search ID matches with the portion of the anonymized data;

receive selective anonymized data;

deanonymize the received anonymized data; and

return the deanonymized data that matches the search term as a response to the search request.

16. The system of claim 14 , further configured to:

provide a search ID field marker to indicate the beginning of the selected portion of the anonymized data; and

transmit the search ID field marker along with the anonymized data to the destination computing device.

Assignments (12)