Clean room
Embodiments of the present disclosure may provide a data clean room allowing secure data analysis across multiple accounts, without the use of third parties. Each account may be associated with a different company or party. The data clean room may provide security functions to safeguard sensitive information. For example, the data clean room may restrict access to data in other accounts. The data clean room may also restrict which data may be used in the analysis and may restrict the output. The overlap data may be anonymized to prevent sensitive information from being revealed.
1. A method, comprising:
providing a first party data in a first account in a network-based data system;
providing a second party data in a second account in the network-based data system;
executing, by a processor, a secure function using the first party data to generate a first result, including creating links to the first party data and anonymizing identification information in the first party data;
sharing the secure function with the second account, the secure function being executed using the second party data to generate a second result;
generating an anonymized correlation with the first result and the second result;
receiving a query request related to the first party data and the second party data;
based on the anonymized correlation, executing the query request on the first party data; and
identifying a query result of the query request, the query request having been run on the first party data and on the second party data.
2. The method of claim 1 , further comprising: restricting the second account from accessing at least one of: an aspect of the secure function, or the first party data.
3. The method of claim 1 , further comprising: restricting access to the result when a number of search results is below a minimum bin aggregation rule.
4. The method of claim 1 , further comprising: restricting the second account from accessing one or more of: the first party data, the secure function, the first result, the second result, or any query result.
5. The method of claim 1 , wherein access restriction is handled using encryption.
6. The method of claim 1 , wherein executing the query request includes executing the query request on the first party data and the second party data.
7. The method of claim 1 , wherein the query request includes a first query portion to request a search of the first party data, and a second query portion to request a search of the second party data.
8. The method of claim 1 , wherein identifying the query result includes combining search results related to the first party data and the second party data.
9. The method of claim 1 , wherein identifying the query result includes identifying first search results related to the first party data and second search results related to the second party data.
10. A non-transitory machine-storage medium embodying instructions that, when executed by a machine, cause the machine to perform operations comprising:
provide a first party data in a first account in a network-based data system;
provide a second party data in a second account in the network-based data system;
execute a secure function using the first party data to generate a first result, including creating links to the first party data and anonymizing identification information in the first party data;
share the secure function with the second account, the secure function being executed using the second party data to generate a second result;
generate an anonymized correlation with the first result and the second result;
receive a query request related to the first party data and the second party data;
based on the anonymized correlation and the first party data, execute a first portion of the query request to generate results of the first portion of the query request; and
identify results of the query request having been run on the first party data and on the second party data.
11. The non-transitory machine-storage medium of claim 10 , the operations further comprising to restrict the second account from accessing a code of the secure function.
12. The non-transitory machine-storage medium of claim 10 , the operations further comprising to restrict access to the result when a number of search results is below a minimum threshold.
13. The non-transitory machine-storage medium of claim 10 , the operations further comprising to restrict
access to search results when a number of search results is below a minimum threshold.
14. The non-transitory machine-storage medium of claim 10 , wherein the operation to execute the query request includes to execute the query request on the first party data and the second party data.
15. The non-transitory machine-storage medium of claim 10 , wherein the query request includes a first query portion to request a search of the first party data, and a second query portion to request a search of the second party data.
16. The non-transitory machine-storage medium of claim 10 , wherein the operation to identify the query result includes to combine search results related to the first party data and the second party data.
17. A system comprising: one or more processors of a machine; and a memory storing instructions that, when executed by the one or more processors, cause the machine to perform operations comprising:
provide a first party data in a first account in a network-based data system;
provide a second party data in a second account in the network-based data system;
executing a secure function using the first party data to generate a first result, including creating links to the first party data and anonymizing identification information in the first party data; sharing the secure function with the second account, the secure function being executed using the second party data to generate a second result;
generate an anonymized correlation with the first result and the second result;
receive a query request related to the first party data and the second party data;
based on the anonymized correlation, execute executing a first portion of the query request on the first party data; and
identify a query result of the query request.
18. The system of claim 17 , the operations further comprising to restrict the second account from accessing a code of the secure function.
19. The system of claim 17 , the operations further comprising to restrict access to the results when a number of search results is below a minimum bin aggregation rule.
20. The system of claim 17 , the operations further comprising to restrict
access to search results when number of matches is below a minimum threshold.
21. The non-transitory machine-storage medium of claim 10 , wherein the operation to identify the query result includes to identify first search results related to the first party data and second search results related to the second party data.
22. The system of claim 17 , wherein the operation to execute the query request includes to execute the query request on the first party data and the second party data.
23. The system of claim 17 , wherein the query request includes a first query portion to request a search of the first party data, and a second query portion to request a search of the second party data.
24. The system of claim 17 , wherein the operation to identify the query result includes to combine search results related to the first party data and the second party data.
25. The system of claim 17 , wherein the operation to identify the query result includes to identify first search results related to the first party data and second search results related to the second party data.