Re-identifying pseudonymized or de-identified data utilizing distributed ledger technology
A system, method, and computer-readable medium are disclosed for providing auditability of a distributed ledger technology (DLT) of de-identified data of entities, stored in the DLT. In certain embodiments, data related to an entity is de-identified. The de-identified data is stored in the DLT. Access to the de-identified data is determined. Instances of access to the de-identified data is recorded to the DLT. In certain embodiments, information used to re-identify the de-identified data is store on the DLT. Access to the information can also be determined and recorded to the DLT.
1. A computer-implementable method for managing re-identification of de-identified data utilizing a distributed ledger, comprising:
de-identifying an event stream of one or more events associated with an individual, wherein de-identified data includes a pseudonym and personal information of an individual;
extracting the de-identified data that includes the personal information of the individual from the event stream, and comprises using entity profiles to determine identified data that are included in the event stream that is de-identified using a pseudonym to protect the identified data;
storing the de-identified data that includes the personal information of the individual in the distributed ledger;
performing a re-identification operation on the de-identified data using entity identifier information that includes authentication factors, user profile attributes, user behavior factors, user mindset factors, information associated with various endpoint and edge devices, networks, resources;
storing a record of the re-identification operation in the distributed ledger that includes an adaptive trust profile (ATP) of the individual comprising context of user behavior and associated risk factors; and
performing risk analysis based on the ATP of the individual.
2. The method of claim 1 , wherein the distributed ledger is a block chain.
3. The method of claim 1 , wherein the record of the re-identification operation is associated with the pseudonym.
4. The method of claim 1 further comprising storing a re-identification key associated with the pseudonym in the distributed ledger.
5. The method of claim 4 , wherein the re-identification operation uses the re-identification key to re-identify the de-identified data.
6. The method of claim 1 , wherein the record of the re-identification operation comprises a purpose for performing the re-identification operation.
7. The method of claim 1 , wherein the record of the re-identification operation comprises a description of categories of data subjects of the de-identified data.
8. The method of claim 1 , wherein the record of the re-identification operation comprises a description of personal data contained in the de-identified data.
9. The method of claim 1 , wherein the record of the re-identification operation comprises a date and a time of the re-identification operation.
10. The method of claim 1 , wherein the step of performing the re-identification operation is initiated by a security administrator, and wherein the record of the re-identification operation comprises contact details of the security administrator.
11. The method of claim 1 further comprising storing a re-identification key associated with the entity in the distributed ledger.
12. The method of claim 11 , wherein the re-identification operation uses the re-identification key to re-identify the de-identified data.
13. The method of claim 1 , wherein the record includes a pointer to a second record in a database external to the distributed ledger, the second record containing details of the re-identification operation.
14. A computer-implementable method for managing privacy in a cybersecurity system comprising:
identification of de-identified data utilizing a distributed ledger, comprising:
de-identifying an event stream of one or more events associated with an individual, wherein de-identified data includes a pseudonym and personal information of an individual;
extracting the de-identified data that includes the personal information of the individual from the event stream, and comprises using entity profiles to determine identified data that are included in the event stream that is de-identified using a pseudonym to protect the identified data;
storing the de-identified data that includes the personal information of the individual in the distributed ledger;
performing a re-identification operation on the de-identified data using entity identifier information that includes authentication factors, user profile attributes, user behavior factors, user mindset factors, information associated with various endpoint and edge devices, networks, resources;
storing a record of the re-identification operation in the distributed ledger that includes an adaptive trust profile (ATP) of the individual comprising context of user behavior and associated risk factors; and
performing risk analysis based on the ATP of the individual.
15. The method of claim 14 wherein a trigger to the security analysis, the cybersecurity system further performs a re-identification operation, wherein the record of the re-identification operation is stored in the cloud using the distributed ledger.
16. A system comprising:
a processor;
a data bus coupled to the processor; and
a non-transitory, computer-readable storage medium embodying computer program code for managing re-identification of de-identified data utilizing a distributed ledger, the non-transitory, computer-readable storage medium being coupled to the data bus, the computer program code interacting with a plurality of computer operations and comprising instructions executable by the processor and configured for:
de-identifying an event stream of one or more events associated with an individual, wherein de-identified data includes a pseudonym and personal information of an individual;
extracting the de-identified data that includes the personal information of the individual from the event stream, and comprises using entity profiles to determine identified data that are included in the event stream that is de-identified using a pseudonym to protect the identified data;
storing the de-identified data that includes the personal information of the individual in the distributed ledger;
performing a re-identification operation on the de-identified data using entity identifier information that includes authentication factors, user profile attributes, user behavior factors, user mindset factors, information associated with various endpoint and edge devices, networks, resources;
storing a record of the re-identification operation in the distributed ledger that includes an adaptive trust profile (ATP) of the individual comprising context of user behavior and associated risk factors; and
performing risk analysis based on the ATP of the individual.
17. The system of claim 16 , wherein the distributed ledger is a block chain.
18. The system of claim 16 , wherein the de-identified data further comprises a pseudonym associated with the individual.
19. The system of claim 18 , wherein the record of the re-identification operation is associated with the pseudonym.
20. The system of claim 18 further comprising storing a re-identification key associated with the pseudonym in the distributed ledger.
21. The system of claim 20 , wherein the re-identification operation uses the re-identification key to re-identify the de-identified data.
22. The system of claim 16 , wherein the record of the re-identification operation comprises a purpose for performing the re-identification operation.
23. The system of claim 16 , wherein the record of the re-identification operation comprises a description of categories of data subjects of the de-identified data.
24. The system of claim 16 , wherein the record of the re-identification operation comprises a description of personal data contained in the de-identified data.
25. The system of claim 16 , wherein the record of the re-identification operation comprises a date and a time of the re-identification operation.
26. The system of claim 16 , wherein the step of performing the re-identification operation is initiated by a security administrator, and wherein the record of the re-identification operation comprises contact details of the security administrator.
27. The system of claim 16 further comprising storing a re-identification key associated with the entity in the distributed ledger.
28. The system of claim 27 , wherein the re-identification operation uses the re-identification key to re-identify the de-identified data.
29. The system of claim 16 , wherein the record includes a pointer to a second record in a database external to the distributed ledger, the second record containing details of the re-identification operation.