IP Library Granted Patent US 10,708,234
Granted Patent B2
US 10,708,234 · App. 15/079,203 · Granted Jul 7, 2020

System, method, and recording medium for preventing back propogation of data protection

Inventors: Samuel Scott Adams (Rutherfordton, NC); Susann Marie Keohane (Austin, TX); James R. Kraemer (Santa Fe, NM); Jeb R. Linton (Manassas, VA)
Assignee: INTERNATIONAL BUSINESS MACHINES CORPORATION
H04L63/0421G06F21/606G06F21/6263H04L9/3218G16H10/60
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 10,708,234
App. No.
15/079,203
Granted
Jul 7, 2020
Kind
B2
Abstract

A third party intermediary and a data protection method, system, and non-transitory computer readable medium, include a content request receiving circuit configured to receive a service request from a user, to communicate the service request to a provider, and to receive pre-approved versions of content from the provider, a content matching circuit configured to match a pre-approved version of content of the pre-approved versions of content to the user based on a condition of the user, a user data receiving circuit configured to receive user data to complete the pre-approved version of the content, and a zero-knowledge verifiable computing circuit configured to execute a program using zero-knowledge verifiable computing to remove private content from the pre-approved version of the content to ensure privacy of the condition of the user from the provider.

Claims (38)

1. A data protection system, comprising:

a content request receiving circuit configured to receive a service request from a user, to communicate the service request to a provider, and to receive pre-approved versions of content from the provider;

a content matching circuit configured to match a pre-approved version of content of the pre-approved versions of content to the user based on a condition of the user;

a user data receiving circuit configured to receive user data to complete the pre-approved version of the content; and

a zero-knowledge verifiable computing circuit configured to execute a program using zero-knowledge verifiable computing to remove private content from the pre-approved version of the content to ensure privacy of the condition of the user from the provider,

wherein the user data is received via a third party intermediary that exchanges data between the user and the provider and that is separate from the user and the provider,

wherein herein the zero-knowledge verifiable computing comprises a technique that is able to ensure the privacy of the user data from the party receiving it, and

wherein the zero-knowledge verifiable computing circuit carries out the zero-knowledge verifiable computing based on combinatorial logic with the completed pre-approved version of the content using a zero-knowledge protocol.

2. The system of claim 1 , further comprising a result providing circuit configured to provide the pre-approved version of the content with the private content removed, to the provider.

3. The system of claim 1 , wherein the zero-knowledge verifiable computing circuit performs the zero-knowledge verifiable computing using combinatorial logic with the pre-approved version of the content using a zero-knowledge protocol to ensure privacy of the condition of the user from the provider.

4. The system of claim 1 , further comprising a result providing circuit configured to provide an output of combinational logic used in the zero-knowledge verifiable computing along with proof from the zero-knowledge protocol that the combinational logic was executed without alteration.

5. The system of claim 1 , wherein the provider receives a completed version of content matched to the user devoid of the condition of the user.

6. The system of claim 1 , wherein the zero-knowledge verifiable computing comprises a succinct computational integrity and privacy (SCIP) technique.

7. The system of claim 1 , wherein the zero-knowledge verifiable computing comprises a zero-knowledge succinct non-interactive argument of knowledge (zk-snark) technique.

8. The system of claim 1 , wherein the zero-knowledge verifiable computing comprises a probabilistically checkable proof (PCP) technique.

9. The system of claim 4 , wherein the proof includes whether the program is using at least one of trusted computing, secure boot attestation, or a combination thereof.

10. The system of claim 1 , wherein the provider directly receives the service request, and

wherein the content request receiving circuit receives the pre-approved versions of content from the provider, from the provider.

11. A data protection method, comprising:

receiving a service request from a user and receiving pre-approved versions of content from a provider;

matching a pre-approved version of content of the pre-approved versions of content to the user based on a condition of the user;

receiving user data to complete the pre-approved version of the content; and

executing a program using zero-knowledge verifiable computing to remove private content from the pre-approved version of the content to ensure privacy of the condition of the user from the provider,

wherein the user data is received via a third party intermediary that exchanges data between the user and the provider and that is separate from the user and the provider,

wherein herein the zero-knowledge verifiable computing comprises a technique that is able to ensure the privacy of the user data from the party receiving it, and

wherein the zero-knowledge verifiable computing circuit carries out the zero-knowledge verifiable computing based on combinatorial logic with the completed pre-approved version of the content using a zero-knowledge protocol.

12. The method of claim 11 , further comprising providing the pre-approved version of the content with the private content removed, to the provider.

13. The method of claim 11 , wherein executing the program performs the zero-knowledge verifiable computing using combinatorial logic with the pre-approved version of the content using a zero-knowledge protocol to ensure privacy of the condition of the user from the provider.

14. The method of claim 11 , further comprising providing an output of combinational logic used in the zero-knowledge verifiable computing along with proof that the combinational logic was executed without alteration.

15. A data protection system for exchanging private data between a user and a provider, the system comprising:

a content matching circuit configured to match a pre-approved version of content of pre-approved versions of content to the user based on a condition of the user, and to send the matched pre-approved version of content to a first device for the user to complete the matched pre-approved version of content; and

a zero-knowledge verifiable computing circuit configured to execute a program using zero-knowledge verifiable computing to remove private content from the pre-approved version of the content completed by the user, to ensure privacy of the condition of the user from the provider,

wherein the user data is received via a third party intermediary that exchanges data between the user and the provider and that is separate from the user and the provider,

wherein herein the zero-knowledge verifiable computing comprises a technique that is able to ensure the privacy of the user data from the party receiving it, and

wherein the zero-knowledge verifiable computing circuit carries out the zero-knowledge verifiable computing based on combinatorial logic with the completed pre-approved version of the content using a zero-knowledge protocol.

16. The system of claim 15 , wherein the pre-approved versions of content are provided to the third party intermediary based on a service request by the user.

17. The system of claim 15 , wherein the third party intermediary provides an output of combinational logic used in the zero-knowledge verifiable computing along with proof from the zero-knowledge protocol that the combinational logic was executed without alteration to the first device and to the provider.

18. The system of claim 15 , wherein the third party intermediary communicates with the first device and the provider independently of each other such that the condition of the user is not accessed by the provider.

Assignments (4)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Jun 21, 2024
From: GREEN MARKET SQUARE LIMITED
To: WORKDAY, INC.
Reel/Frame 067801/0892 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded May 29, 2024
From: GREEN MARKET SQUARE LIMITED
To: WORKDAY, INC.
Reel/Frame 067556/0783 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Jan 22, 2021
From: INTERNATIONAL BUSINESS MACHINES CORPORATION
To: GREEN MARKET SQUARE LIMITED
Reel/Frame 055078/0982 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Mar 24, 2016
From: ADAMS, SAMUEL SCOTT; KEOHANE, SUSANN MARIE; KRAEMER, JAMES R.; LINTON, JEB R.
To: INTERNATIONAL BUSINESS MACHINES CORPORATION
Reel/Frame 038092/0401 →