IP Library Granted Patent US 10,700,864
Granted Patent B2
US 10,700,864 · App. 15/648,179 · Granted Jun 30, 2020

Anonymous encrypted data

Inventors: Spyridon Antonatos (Dublin, IE); Stefano Braghin (Blanchardstown, IE); Akshar Kaul (Bangalore, IN); Manish Kesarwani (Bangalore, IN); Sameep Mehta (New Delhi, IN)
Assignee: INTERNATIONAL BUSINESS MACHINES CORPORATION
H04L9/32G06F12/1408G06F21/6245G06F21/64G06N20/00H04L9/0894H04L63/0421H04L63/0428H04L63/107G06F2212/1052G06F2221/034
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 10,700,864
App. No.
15/648,179
Granted
Jun 30, 2020
Kind
B2
Abstract

Techniques facilitating autonomously rendering an encrypted data anonymous in a non-trusted environment are provided. In one example, a computer-implemented method can comprise generating, by a system operatively coupled to a processor, a plurality of clusters of encrypted data from an encrypted dataset using a machine learning algorithm. The computer-implemented method can also comprise modifying, by the system, the plurality of clusters based on a defined criterion that can facilitate anonymity of the encrypted data.

Claims (25)

1. A system, comprising:

a memory that stores computer executable components;

a processor, operably coupled to the memory, and that executes the computer executable components stored in the memory, wherein the computer executable components comprise:

a clustering component that generates a plurality of clusters of encrypted data from an encrypted dataset using a machine learning algorithm, wherein the machine learning algorithm is a distance based clustering algorithm based on a location identifier of geographical coordinates;

a modifying component that modifies the plurality of clusters based on a defined security requirements that facilitates anonymity of the encrypted data, wherein the modification comprises re-assigning one or more members of a non-compliant cluster of the plurality of clusters to a nearest cluster with respect to the one or more members, and wherein the re-assigning the one or more members comprises:

sorting, by size, clusters of the plurality of clusters that fail to meet the defined security requirements, wherein the sorting is, sorting from a cluster with the fewest members to a cluster with the most members, the clusters that fail to meet the defined security requirements;

re-assigning members of the cluster with the fewest members that is a non-compliant cluster to the nearest cluster;

after the re-assigning, removing the cluster with the fewest members from the plurality of clusters and re-analyzing the plurality of clusters for other non-compliant clusters; and

performing the re-assigning the one or more members iteratively until all non-compliant clusters of the plurality of clusters have been removed; and

wherein the modification renders the encrypted data anonymous on a non-trusted environment.

2. The system of claim 1 , wherein the clustering component and the modification component operate in a federated cloud environment.

3. The system of claim 1 , wherein the clustering component further generates a cluster representative for a cluster from the plurality of clusters.

4. The system of claim 1 , wherein the defined security requirements is a minimum number of encrypted data records per cluster.

5. The system of claim 4 , wherein in response to a cluster having less than the defined criterion, the modifying component modifies the plurality of clusters using an operation selected from a group consisting of suppression of the cluster and re-assignment of the encrypted data of the cluster.

6. The system of claim 5 , wherein the suppression of the cluster comprises removing a portion of the encrypted data from the plurality of clusters based on a suppression threshold.

7. A computer program product facilitating rendering an encrypted dataset anonymous, the computer program product comprising a computer readable storage medium having program instructions embodied therewith, the program instructions executable by a processor to cause the processor to:

generate a plurality of clusters of encrypted data from the encrypted dataset using a machine learning algorithm, wherein the machine learning algorithm is a distance based clustering algorithm based on a location identifier of geographical coordinates;

modify the plurality of clusters based on a defined security requirements that facilitates anonymity of the encrypted data, wherein modification comprises re-assigning one or more members of a non-compliant cluster of the plurality of clusters to a nearest cluster with respect to the one or more members, and wherein the re-assigning the one or more members comprises:

a sorting, by size, of clusters of the plurality of clusters that fail to meet the defined security requirements, wherein the sorting is sorting from a cluster with the fewest members to a cluster with the most members, the clusters that fail to meet the defined security requirements;

a re-assigning of members of the cluster with the fewest members that is a non-compliant cluster to the nearest cluster;

after the re-assigning, removal of the cluster with the fewest members from the plurality of clusters and re-analysis of the plurality of clusters for other non-compliant clusters; and

performance of the re-assigning of the one or more members iteratively until all non-compliant clusters of the plurality of clusters have been removed; and

wherein the modification renders the encrypted data anonymous on a non-trusted environment.

8. The computer program product of claim 7 , wherein the program instructions further cause the processor to encrypt a dataset via a plurality of encryption schemes to generate a plurality of encrypted datasets, and the encrypted dataset is from the plurality of encrypted datasets.

9. The computer program product of claim 8 , wherein the program instructions further cause the processor to share the plurality of encrypted datasets with a federated cloud environment.

Assignments (2)
CHANGE OF NAME Recorded Nov 25, 2025
From: ZENPAYROLL, INC.
To: GUSTO, INC.
Reel/Frame 073705/0640 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Jul 12, 2017
From: ANTONATOS, SPYRIDON; BRAGHIN, STEFANO; KAUL, AKSHAR; KESARWANI, MANISH; MEHTA, SAMEEP
To: INTERNATIONAL BUSINESS MACHINES CORPORATION
Reel/Frame 042990/0274 →
Continuity (1)
Related Publication 20190020475A1 · Jan 17, 2019