Data clean room
Embodiments of the present disclosure may provide a data clean room allowing secure data analysis across multiple accounts, without the use of third parties. Each account may be associated with a different company or party. The data clean room may provide security functions to safeguard sensitive information. For example, the data clean room may restrict access to data in other accounts. The data clean room may also restrict which data may be used in the analysis and may restrict the output. The overlap data may be anonymized to prevent sensitive information from being revealed.
1. A method comprising:
providing a first party data associated with a first account in a network-based data system;
providing a second party data associated with a second account in the network-based data system;
providing a network-accessible shared data space to the first account via a first device and to the second account via a second device, the first party data including a first set of rules that apply as to access of the first party data by the second account within the shared data space, the first set of rules including an anonymity rule that dictates one or more of: a removal of user identifiable information from the first party data, or an aggregation of data for later analysis;
executing, by a processor, a function in view of the first party data and the second party data to generate a first result, the first result based on the first party data and the second party data; and
verifying that the first result is in conformance with at least one of: an access rule, or a data management requirement, the first result being accessible in the shared data space by the second party using an access key and via the network-based data system for performing analysis of overlapping first party and second party data.
2. The method of claim 1 , further comprising restricting the second account from accessing the first result.
3. The method of claim 1 , wherein the first party data includes a first data corpus, wherein the second party data includes a second data corpus, wherein the function is executed using the first data corpus and the second data corpus.
4. The method of claim 1 , wherein the function includes a search query.
5. The method of claim 4 , wherein a search result of the search query includes anonymized data.
6. The method of claim 5 further comprising restricting access to the anonymized data.
7. The method of claim 1 , wherein the network-based data system includes a distributed data clean room system.
8. The method of claim 1 , further comprising receiving a request to join the first party data and the second party data.
9. The method of claim 8 , wherein the request to join the first party data and the second party data includes a parameter to influence how the first party data and the second party data are to be joined.
10. The method of claim 1 , wherein the first result is transformed to a second result that includes anonymized data.
11. The method of claim 1 , wherein the first party data and the second party data includes at least one of: advertising campaign data, or content data.
12. A non-transitory machine-storage medium embodying instructions that, when executed by a machine, cause the machine to perform operations comprising:
identify a first party data associated with a first account in a network-based data system;
identify a second party content data associated with a second account in the network-based data system;
provide a secured shared data space to the first account and the second account, the first party data including a first set of rules that apply as to access of the first party data by the second account within the shared data space, the first set of rules including an anonymity rule, the first set of rules including a rule that data in the shared data space is to be accessed using an encryption key;
execute a function in view of the first party data and the second party data to generate a first result, the first result including a predictive data model related to content data, the first result being based on the first party data and the second party content data; and
verify that the first result is in conformance with at least one of: an access rule, or a data management requirement, the first result being accessible by the first account and the second account via a network using the encryption key for the shared data space via the network-based data system.
13. The non-transitory machine-storage medium of claim 12 , the operations further comprising: restricting the second account from accessing the first result.
14. The non-transitory machine-storage medium of claim 12 , wherein the first party data includes a first data corpus, wherein the second party content data includes a second data corpus, wherein the function is executed using the first content data corpus and the second content data corpus.
15. The non-transitory machine-storage medium of claim 12 , the operations further comprising: restricting access to the secured shared data space.
16. The non-transitory machine-storage medium of claim 12 , wherein the network-based data system includes a distributed data clean room system.
17. The non-transitory machine-storage medium of claim 12 , the operations further comprising receiving a request to join the first party data and the second party content data.
18. The non-transitory machine-storage medium of claim 17 , wherein the request to join the first party data and the second party content data includes a parameter to influence how the first party data and the second party content data are to be joined.
19. The non-transitory machine-storage medium of claim 12 , wherein the first result includes anonymized data.
20. The non-transitory machine-storage medium of claim 12 , wherein the first party data and the second party data includes at least one of: advertising campaign data, or content data.
21. A system comprising: one or more processors; and a memory storing instructions that, when executed by the one or more processors, cause the system to perform operations comprising:
identify a first party data associated with a first account in a network-based data system;
identify a second party data associated with a second account in the network-based data system;
execute a function in view of the first party data and the second party data to generate a search result based on the first party data and the second party data;
verify that the search result is in conformance with at least one of: an anonymity rule, an aggregation rule, or a data management requirement; and
provide access to the search result in a network-accessible secure shared data space based on verifying that the search result is in conformance with at least one of: the anonymity rule, the aggregation rule, or the data management requirement, the shared data space being accessible with an access key.
22. The system of claim 21 , the operations further comprising: restricting the second account from accessing the data aggregation using the access key.
23. The system of claim 21 , wherein the first party data includes a first data corpus, wherein the second party data includes a second data corpus, wherein the function is executed using the first data corpus and the second data corpus.
24. The system of claim 21 , wherein the network-based data system includes a distributed data clean room system.
25. The system of claim 21 , the operations further comprising receiving a request to join the first party data and the second party data.
26. The system of claim 25 , wherein the request to join the first party data and the second party data includes a parameter to influence how the first party data and the second party data are to be joined.
27. The system of claim 25 , wherein the first party data and the second party data includes at least one of: advertising campaign data, or content data.
28. The system of claim 21 , wherein a predictive data model is generated using the data aggregation.