Granted Patent B1

US 9,323,818 · App. 14/247,147 · Granted Apr 26, 2016

Abstract

Claims (102)

1. An anonymization system to anonymize data transmitted to a destination computing device, comprising:

an anonymization strategy module executed on a computing device to store anonymization strategy for data anonymization in a data store for a data including a plurality of data fields, to be stored in the destination computing device;

a logic to receive data to be stored in the destination computing device, from a user computer; and

an anonymization module executed on the computing device to selectively anonymize one or more data fields of the data to be stored in the destination computing device, based on the anonymization strategy for the data to be stored to generate anonymized data with one or more anonymized data fields and transmit the anonymized data with one or more anonymized data fields to the destination computing device for storage over a network,

wherein the anonymization strategy includes anonymization based on at least one or both of tokenization and encryption; and

wherein the anonymization based on tokenization includes at least one of random token anonymization, sortable token anonymization and case-insensitive searchable anonymization.

2. The system of claim 1 , further including storing anonymized data with one or more anonymized data fields at a data store in the destination computing device.

3. The system of claim 2 , wherein the destination computing device is configured to

receive a request for the stored anonymized data;

execute the request to selectively retrieve the stored anonymized data; and

return the selectively retrieved stored anonymized data in response to the request.

4. The system of claim 3 , wherein the system further including:

a de-anonymization module configured to

receive the selectively retrieved anonymized data in response to the request;

de-anonymize the retrieved stored anonymized data; and

return the de-anonymized data in response to the request.

5. The system of claim 1 further including a management console module executed on the computing device, configured to receive meta data for an application executed on the destination computing device, meta data indicative of one or more data fields of the application;

present at least one data field of the application along with a plurality of anonymization strategies for selection;

associate one of the anonymization strategy to the at least one data field of the application, based on the selection; and

store the associated anonymization strategy for the at least one data field of the application, using the anonymization strategy module.

6. The system of claim 5 , wherein the anonymization module retrieves stored anonymization strategy for one or more data fields of the data to be transmitted;

performs the anonymization of original data in one or more data fields based on the retrieved anonymization strategy for the one or more data fields; and

assemble data to be transmitted, using anonymized data fields.

7. The system of claim 6 , wherein the anonymized data is configured to preserve the order of the original data.

8. The system of claim 6 , wherein the anonymized data is configured to be searchable using anonymized keyword.

9. An anonymization system to anonymize data transmitted to a destination computing device, comprising:

an anonymization strategy module executed on a computing device to store anonymization strategy for data anonymization in a data store for a data including a plurality of data fields, to be stored in the destination computing device;

a logic to receive data to be stored in the destination computing device, from a user computer; and

an anonymization module executed on the computing device to selectively anonymize one or more data fields of the data to be stored in the destination computing device, based on the anonymization strategy for the data to be stored to generate anonymized data with one or more anonymized data fields and transmit the anonymized data with one or more anonymized data fields to the destination computing device for storage over a network,

wherein the anonymization strategy includes anonymization based on at least one or both of tokenization and encryption; and

wherein the anonymization based on encryption includes at least one of encryption that permits exact word matching search, encryption that permits search and encryption that permits partial string and wild card searches.

10. The system of claim 9 , further including storing anonymized data with one or more anonymized data fields at a data store in the destination computing device.

11. The system of claim 10 , wherein the destination computing device is configured to

receive a request for the stored anonymized data;

execute the request to selectively retrieve the stored anonymized data; and

return the selectively retrieved stored anonymized data in response to the request.

12. The system of claim 11 , wherein the system further including:

a de-anonymization module configured to receive the selectively retrieved anonymized data in response to the request;

de-anonymize the retrieved stored anonymized data; and

return the de-anonymized data in response to the request.

13. The system of claim 9 further including a management console module executed on the computing device, configured to

receive meta data for an application executed on the destination computing device, meta data indicative of one or more data fields of the application;

present at least one data field of the application along with a plurality of anonymization strategies for selection;

associate one of the anonymization strategy to the at least one data field of the application, based on the selection; and

store the associated anonymization strategy for the at least one data field of the application, using the anonymization strategy module.

14. The system of claim 13 , wherein the anonymization module retrieves stored anonymization strategy for one or more data fields of the data to be transmitted;

performs the anonymization of original data in one or more data fields based on the retrieved anonymization strategy for the one or more data fields; and

assemble data to be transmitted, using anonymized data fields.

15. The system of claim 14 , wherein the anonymized data is configured to preserve the order of the original data.

16. The system of claim 15 , wherein the anonymized data is configured to be searchable using anonymized keyword.

17. A method for anonymizing data to be transmitted to a destination computing device, comprising:

providing anonymization strategy for data anonymization for a data to be stored in the destination computing device, the data including a plurality of data fields, the anonymization strategy provided on a data store in a computing device;

receiving the data to be stored in the destination computing device, from a user computer;

performing selective anonymization of one or more data fields of the data to be stored in the destination computing device, based on the anonymization strategy for the data to be stored, using an anonymization module to generate anonymized data with one or more anonymized data fields; and

transmitting anonymized data with one or more anonymized data fields to the destination computing device for storage, over a network,

wherein the anonymization strategy includes anonymization based on at least one or both of tokenization and encryption; and

wherein the anonymization based on tokenization includes at least one of random token anonymization, sortable token anonymization and case-insensitive searchable anonymization.

18. The method of claim 17 , further including:

storing anonymized data with one or more anonymized data fields at a data store in the destination computing device.

19. The method of claim 18 , further including:

receiving a request at the destination computing device for the stored anonymized data;

executing the request at the destination computing device to selectively retrieve stored anonymized data; and

returning the selectively retrieved stored anonymized data, in response to the request.

20. The method of claim 19 , further including:

receiving selectively retrieved anonymized data in response to the request;

de-anonymizing the retrieved stored anonymized data using a de-anonymization module; and

returning the de-anonymized data in response to the request.

21. The method of claim 17 , wherein providing anonymization strategy for data anonymization in the computing device further including:

receiving meta data for an application executed on the destination computing device, meta data indicative of one or more data fields of the application;

presenting at least one data field of the application along with a plurality of anonymization strategies for selection;

associating one of the anonymization strategy to the at least one data field of the application, based on the selection; and

storing the associated anonymization strategy for the at least one data field of the application.

22. The method of claim 21 , wherein performing selective anonymization further including:

retrieving stored anonymization strategy for one or more data fields of the data to be transmitted;

performing the anonymization of one or more data fields based on the retrieved anonymization strategy for the one or more data fields; and

assembling data to be transmitted, using anonymized data fields.

23. A method for anonymizing data to be transmitted to a destination computing device, comprising:

providing anonymization strategy for data anonymization for a data to be stored in the destination computing device, the data including a plurality of data fields, the anonymization strategy provided on a data store in a computing device;

receiving the data to be stored in the destination computing device, from a user computer;

performing selective anonymization of one or more data fields of the data to be stored in the destination computing device, based on the anonymization strategy for the data to be stored, using an anonymization module to generate anonymized data with one or more anonymized data fields; and

transmitting anonymized data with one or more anonymized data fields to the destination computing device for storage, over a network,

wherein the anonymization strategy includes anonymization based on at least one or both of tokenization and encryption; and

wherein the anonymization based on encryption includes at least one of encryption that permits exact word matching search, encryption that permits search and encryption that permits partial string and wild card searches.

24. The method of claim 23 , further including:

storing anonymized data with one or more anonymized data fields at a data store in the destination computing device.

25. The method of claim 24 , further including:

receiving a request at the destination computing device for the stored anonymized data;

executing the request at the destination computing device to selectively retrieve stored anonymized data; and

returning the selectively retrieved stored anonymized data, in response to the request.

26. The method of claim 25 , further including:

receiving selectively retrieved anonymized data in response to the request;

de-anonymizing the retrieved stored anonymized data using a de-anonymization module; and

returning the de-anonymized data in response to the request.

27. The method of claim 23 , wherein providing anonymization strategy for data anonymization in the computing device further including:

receiving meta data for an application executed on the destination computing device, meta data indicative of one or more data fields of the application;

presenting at least one data field of the application along with a plurality of anonymization strategies for selection;

associating one of the anonymization strategy to the at least one data field of the application, based on the selection; and

storing the associated anonymization strategy for the at least one data field of the application.

28. The method of claim 27 , wherein performing selective anonymization further including:

retrieving stored anonymization strategy for one or more data fields of the data to be transmitted;

performing the anonymization of one or more data fields based on the retrieved anonymization strategy for the one or more data fields; and

assembling data to be transmitted, using anonymized data fields.

Assignments (14)