Method and system for unifying de-identified data from multiple sources
A method and a system are disclosed for generating a global identifier for linking or unifying a plurality of de-identified customer data received from multiple source environments. The plurality of customer data is de-identified based on a master salt and a master token is generated. The master token is encrypted using a source-encryption key to generate a source token. The source token is also encrypted using a target-encryption key to generate a transfer token. At a central environment or a central storage unit, the transfer token is decrypted and the source token is obtained. Thereafter, source token is decrypted to obtain the master token. At the central storage unit, the master token is hashed with a target salt to generate the global identifier which is subsequently used to unify the plurality of de-identified customer data.
1. A method for unifying a plurality of de-identified customer data from one or more source storage units, the method comprising:
accessing, via the one or more source storage units over a communication network, a plurality of customer data;
configuring a source processing unit, the source processing unit being in communication to the one or more source storage units and a source server, the source processing unit configured for:
de-identifying the plurality of customer data based on a master salt to generate a master token;
encrypting the master token using a source-encryption key to generate a source token;
encrypting the source token using a target-encryption key to generate a transfer token; and
allowing an authorized access of the transfer token via a secured channel at a central storage unit; and
configuring a central processing unit, the central processing unit being in communication to the central storage unit and a central server, the central processing unit configured for:
decrypting the transfer token using a target decryption key to obtain the source token;
decrypting the source token using a source decryption key to obtain the master token;
hashing the master token with a target salt to generate a global identifier; and
unifying the plurality of de-identified customer data by using the global identifier.
2. The method as claimed in claim 1 , wherein each of the plurality of customer data is associated with a corresponding identifier containing person identity information (PII) and non-PII information of respective customers.
3. The method as claimed in claim 2 , wherein the master salt generates same master token at the one or more source storage units for any of the corresponding identifiers.
4. The method as claimed in claim 1 , wherein the master salt is a randomly generated multi-digit alphanumeric code.
5. The method as claimed in claim 1 , wherein the target salt is a randomly generated multi-digit alphanumeric code.
6. The method as claimed in claim 1 , wherein the source-encryption key is a private key to encrypt the master token.
7. The method as claimed in claim 1 , wherein the target encryption key is a public key to encrypt the source token.
8. The method as claimed in claim 1 , wherein the source token is used by an authorized user to link respective customer data by accessing the source decryption key.
9. A system for unifying a plurality of de-identified customer data from one or more source storage units, the system comprising:
one or more source storage units 104 storing a plurality of customer data;
a source processing unit connected in communication to the one or more source storage units and a source server in a communication network, the source processing unit configured for:
de-identifying the plurality of customer data based on a master salt to generate a master token;
encrypting the master token using a source-encryption key to generate a source token;
encrypting the source token using a target-encryption key to generate a transfer token; and
allowing an authorized access of the transfer token via a secured channel at a central storage unit; and
a central processing unit connected in communication to the central storage unit and a central server in the communication network, the central processing unit is configured for:
decrypting the transfer token using a target decryption key to obtain the source token;
decrypting the source token using a source decryption key to obtain the master token;
hashing the master token with a target salt to generate a global identifier; and
unifying the plurality of de-identified customer data by using the global identifier.
10. The system as claimed in claim 9 , wherein each of the plurality of customer data is associated with a corresponding identifier containing person identity information (PII) and non-PII information of respective customers.
11. The system as claimed in claim 10 , wherein the master salt generates same master token at the one or more source storage units for any of the corresponding identifiers.
12. The system as claimed in claim 1 , wherein the master salt is a randomly generated multi-digit alphanumeric code.
13. The system as claimed in claim 1 , wherein the target salt is a randomly generated multi-digit alphanumeric code.
14. The system as claimed in claim 1 , wherein the source-encryption key is a private key to encrypt the master token.
15. The system as claimed in claim 1 , wherein the target encryption key is a public key to encrypt the source token.
16. The system as claimed in claim 1 , wherein the source token is used by an authorized user to link respective customer data by accessing the source decryption key.