IP Library Granted Patent US 11,240,243
Granted Patent B2
US 11,240,243 · App. 15/703,331 · Granted Feb 1, 2022

Preventing statistical inference attacks on data that is shared among multiple stakeholders with disjoint access privileges

Inventors: Nathalie Baracaldo Angel (San Jose, CA); Robert Engel (San Francisco, CA); Heiko H. Ludwig (San Francisco, CA)
Assignee: INTERNATIONAL BUSINESS MACHINES CORPORATION
H04L63/10G06F21/6245G06F21/64H04L9/088H04L9/0894H04L9/3226H04L9/3239H04L9/3247H04L9/3297H04L63/0407H04L63/123H04L63/0428H04L2209/20H04L2209/38H04L2209/42H04L2209/88
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 11,240,243
App. No.
15/703,331
Granted
Feb 1, 2022
Kind
B2
Abstract

According to one embodiment, a method, computer system, and computer program product for preventing statistical inference attacks is provided. The present invention may include splitting records into items, and classifying these items into shared items and private items; grouping the private items according to privacy and confidentiality requirements; restricting access of the private items to stakeholders based on the confidentiality requirements using cryptographic keys; generating and encrypting one or more placeholders for both existent and non-existent stakeholders; storing private items in private storage as indicated by links; creating shared records comprising links, placeholders, and shared items; adding integrity signatures to the shared records; and publishing the shared records to a shared medium.

Claims (70)

1. A processor-implemented method for updating a shared medium comprising:

determining a uniform size of a data structure for all entries in the shared medium;

updating an entry to the shared medium comprising:

creating a first data structure of the size of the data structure for entries;

adding content to the first data structure; and

adding dummy content to the first data structure until the size of the content and the size of the dummy content are the uniform size of the data structure for entries; and

storing the entry in the shared medium.

2. The method of claim 1 , wherein adding content to the first data structure comprises:

determining the content is private;

creating a link to the private content, wherein the link points to a location outside of the shared medium;

encrypting the link; and

adding the encrypted link to the first data structure.

3. The method of claim 2 , wherein adding dummy content to the first data structure comprises:

creating a dummy link;

encrypting the dummy link; and

adding the encrypted dummy link to the first data structure.

4. The method of claim 3 , wherein creating a link to the private content and creating a dummy link create placeholders having a same size.

5. The method of claim 4 , wherein the shared medium comprises a distributed ledger.

6. The method of claim 4 , wherein the shared medium comprises blockchain.

7. The method of claim 1 , wherein adding dummy content to the first data structure comprises:

creating a dummy link;

encrypting the dummy link; and

adding the encrypted dummy link to the first data structure.

8. A computer system for updating a shared medium, the computer system comprising:

one or more processors, one or more computer-readable memories, one or more computer-readable tangible storage medium, and program instructions stored on at least one of the one or more tangible storage medium for execution by at least one of the one or more processors via at least one of the one or more memories, wherein the computer method is capable of performing a computer system comprising:

determining a uniform size of a data structure for all entries in the shared medium;

updating an entry to the shared medium comprising:

creating a first data structure of the size of the data structure for entries;

adding content to the first data structure; and

adding dummy content to the first data structure until the size of the content and the size of the dummy content are the uniform size of the data structure for entries; and

storing the entry in the shared medium.

9. The computer system of claim 8 , wherein adding content to the first data structure comprises:

determining the content is private;

creating a link to the private content, wherein the link points to a location outside of the shared medium;

encrypting the link; and

adding the encrypted link to the first data structure.

10. The computer system of claim 9 , wherein adding dummy content to the first data structure comprises:

creating a dummy link;

encrypting the dummy link; and

adding the encrypted dummy link to the first data structure.

11. The computer system of claim 10 , wherein creating a link to the private content and creating a dummy link create placeholders having a same size.

12. The computer system of claim 11 , wherein the shared medium comprises a distributed ledger.

13. The computer system of claim 11 , wherein the shared medium comprises blockchain.

14. The computer system of claim 8 , wherein adding dummy content to the first data structure comprises:

creating a dummy link;

encrypting the dummy link; and

adding the encrypted dummy link to the first data structure.

15. A computer program product for updating a shared medium, the computer program product comprising:

one or more computer-readable tangible storage medium and program instructions stored on at least one of the one or more tangible storage medium, the program instructions executable by a processor to cause the processor to perform a method comprising:

determining a uniform size of a data structure for all entries in the shared medium;

updating an entry to the shared medium comprising:

creating a first data structure of the size of the data structure for entries;

adding content to the first data structure; and

adding dummy content to the first data structure until the size of the content and the size of the dummy content are the uniform size of the data structure for entries; and

storing the entry in the shared medium.

16. The computer program product of claim 15 , wherein adding content to the first data structure comprises:

determining the content is private;

creating a link to the private content, wherein the link points to a location outside of the shared medium;

encrypting the link; and

adding the encrypted link to the first data structure.

17. The computer program product of claim 16 , wherein adding dummy content to the first data structure comprises:

creating a dummy link;

encrypting the dummy link; and

adding the encrypted dummy link to the first data structure.

18. The computer program product of claim 17 , wherein creating a link to the private content and creating a dummy link create placeholders having a same size.

19. The computer program product of claim 18 , wherein the shared medium comprises blockchain.

20. The computer program product of claim 15 , wherein adding dummy content to the first data structure comprises:

creating a dummy link;

encrypting the dummy link; and

adding the encrypted dummy link to the first data structure.

Assignments (1)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Sep 13, 2017
From: BARACALDO ANGEL, NATHALIE; ENGEL, ROBERT; LUDWIG, HEIKO H.
To: INTERNATIONAL BUSINESS MACHINES CORPORATION
Reel/Frame 043575/0928 →
Continuity (1)
Related Publication 20190081950A1 · Mar 14, 2019