System of anonymous user creation based on oblivious transfer

Patent metadata

Field	Value
Publication number	US-10019709-B2
Application number	US-201514746371-A
Country	US
Kind code	B2
Filing date	Jun 22, 2015
Priority date	Jun 22, 2015
Publication date	Jul 10, 2018
Grant date	Jul 10, 2018

Abstract

Embodiments of the invention include systems, methods, and computer-program products for anonymizing a user utilizing oblivious transfer. In this way, the invention establishes a common index to identify members of a population sample, anonymizes the identities of sample members to each party, and exchanges statistics and characteristics of the sample population. The invention creates a common searchable index and anonymizes the sample members of the database via encryption of identification of individual customers in each sample. Each encryption provides for a strong encryption with a key and a homomorphic encryption. The homomorphic encryption allows for multiplication and/or addition on ciphertexts that, once decrypted, match the result that would have occurred had the operations been carried out on the plaintext. In some embodiments, the encryption may be either partially- or fully-homomorphic cryptosystems.

First claim

What is claimed is:

1. A system for providing anonymous user creation in response to a request for information, the system comprising:
a memory device with computer-readable program code stored thereon;
a communication device;
a processing device operatively coupled to the memory device and the communication device, wherein the processing device is configured to execute the computer-readable program code to:
generate a database with a searchable common index of customer data associated with customers, wherein the customer data comprises customer identifications and includes customer transaction data;
receive a request from a requestor for a population of data points within the database;
match the request for the population of data points to customer data associated with customer total spend on the database, wherein the match generates a sample population of customer data that represents a customer value for the requestor;
encrypt the matched data using a cryptosystem comprising homomorphic encryption, wherein the homomorphic encryption is a fully homomorphic encryption that allows multiplication and/or addition on ciphertexts that, once decrypted, match a result had operations been carried out on the plaintext;
send, via a distributive network, an aggregated encrypted matched data for the population of data points that includes an encrypted customer identification to the requestor;
compile a set of double encrypted customer value data for the population of data points by allowing the requestor to include additional requestor data with the aggregated encrypted matched data and allow double encryption by the requester using provided random number encryption; and
store compiled set of double encrypted customer value data for the population of data points at a financial institution and the requestor.

2. The system of claim 1 , wherein a request includes customer information of the requestor, such as a customer identification, wherein the requestor provides the system with information about one or more customers of the requestor to receive total spend data for the one or more customers.

3. The system of claim 1 , wherein the homomorphic encryption includes partially homomorphic encryption.

4. The system of claim 1 , wherein the requestor is a merchant and requestor data includes identifications of one or more customer transactions at the merchant.

5. The system of claim 1 , wherein the searchable common index of customer data associated with a customer is further compiled to create a customer total spend, wherein the customer total spend is a holistic view of customer spending over a time frame.

6. The system of claim 1 , wherein receiving the request from the requestor for the population of data points further comprises a request for customer data that matches one or more customer transactions at the requestor.

7. The system of claim 1 further comprising exchanging the double encrypted customer value data for statistics and characteristic analysis of the sample population.

8. A computer program product for providing anonymous user creation in response to a request for information, the computer program product comprising at least one non-transitory computer-readable medium having computer-readable program code portions embodied therein, the computer-readable program code portions comprising:
an executable portion configured for generating a database with a searchable common index of customer data associated with customers, wherein the customer data comprises customer identifications and includes customer transaction data;
an executable portion configured for receiving a request from a requestor for a population of data points within the database;
an executable portion configured for matching the request for the population of data points to customer data associated with customer total spend on the database, wherein the match generates a sample population of customer data that represents a customer value for the requestor;
an executable portion configured for encrypting the matched data using a cryptosystem comprising homomorphic encryption, wherein the homomorphic encryption is a fully homomorphic encryption that allows multiplication and/or addition on ciphertexts that, once decrypted, match a result had operations been carried out on the plaintext;
an executable portion configured for sending, via a distributive network, an aggregated encrypted matched data for the population of data points that includes an encrypted customer identification to the requestor;
an executable portion configured for compiling a set of double encrypted customer value data for the population of data points by allowing the requestor to include additional requestor data with the aggregated encrypted matched data and allow double encryption by the requester using provided random number encryption; and
an executable portion configured for storing compiled set of double encrypted customer value data for the population of data points at a financial institution and the requestor.

9. The computer program product of claim 8 , wherein a request includes customer information of the requestor, such as a customer identification, wherein the requestor provides the system with information about one or more customers of the requestor to receive total spend data for the one or more customers.

10. The computer program product of claim 8 , wherein the homomorphic encryption includes partially homomorphic encryption.

11. The computer program product of claim 8 , wherein the requestor is a merchant and requestor data includes identifications of one or more customer transactions at the merchant.

12. The computer program product of claim 8 , wherein the searchable common index of customer data associated with a customer is further compiled to create a customer total spend, wherein the customer total spend is a holistic view of customer spending over a time frame.

13. The computer program product of claim 8 , wherein receiving the request from the requestor for the population of data points further comprises a request for customer data that matches one or more customer transactions at the requestor.

14. The computer program product of claim 8 further comprising an executable portion configured for exchanging the double encrypted customer value data for statistics and characteristic analysis of the sample population.

15. A computer-implemented method for providing anonymous user creation in response to a request for information, the method comprising:
providing a computing system comprising a computer processing device and a non-transitory computer readable medium, where the computer readable medium comprises configured computer program instruction code, such that when said instruction code is operated by said computer processing device, said computer processing device performs the following operations:
generating a database with a searchable common index of customer data associated with customers, wherein the customer data comprises customer identifications and includes customer transaction data;
receiving a request from a requestor for a population of data points within the database;
matching the request for the population of data points to customer data associated with customer total spend on the database, wherein the match generates a sample population of customer data that represents a customer value for the requestor;
encrypting the matched data using a cryptosystem comprising homomorphic encryption, wherein the homomorphic encryption is a fully homomorphic encryption that allows multiplication and/or addition on ciphertexts that, once decrypted, m

Assignees

• Bank Of America

Inventors

• Abbott Robert L
• Shahda Frederick A
• Hamilton Alfred
• Blackhurst Jason P

Classifications

• H04L63/0428 Primary

  wherein the data content is protected, e.g. by encrypting or encapsulating the payload · CPC title

• H04L63/0421

  Anonymous communication, i.e. the party's identifiers are hidden from the other party or parties, e.g. using an anonymizer · CPC title

• H04L2463/102

  applying security measure for e-commerce · CPC title

• G06Q2220/00

  Business processing using cryptography · CPC title

• G06Q20/38215 Primary

  Use of certificates or encrypted proofs of transaction rights · CPC title