Data sharing method

Patent metadata

Field	Value
Publication number	US-11599655-B1
Application number	US-201816138875-A
Country	US
Kind code	B1
Filing date	Sep 21, 2018
Priority date	Sep 21, 2018
Publication date	Mar 7, 2023
Grant date	Mar 7, 2023

Abstract

A first entity having a first set of tagged data and a second entity having a second set of tagged data share data that is selected based on a set of common tags present in both the first and second sets of tagged data. The set of common tags is determined using a private set intersection protocol that, in many examples, preserves the privacy of the two entities. In an embodiment, each entity identifies a set of data objects associated with the set of common tags, and another private set intersection protocol is performed to identify a set of common data objects available to both entities. Each entity provides, to the other entity, those data objects associated with the set of common tags that are not in the set of common data objects available to both entities thereby providing a matching set of data objects to both entities.

First claim

What is claimed is:

1. A computer-implemented method, comprising:
performing a key-exchange process to determine a shared key between a first entity and a second entity, the first entity including a first digital media data set including a first set of tags of attributes of first digital media items of the first digital media data set, and the second entity including a second digital media data set including a second set of tags of attributes of second digital media items of the second digital media data set, the first and second sets of tags of attributes include one or more of:
a modification time,
resolution data,
encoding parameters, or
author information;

using a private-set intersection protocol directly between the first and second entities to determine an intersection of the first set of tags and the second set of tags of attributes based at least in part on an intersection of the first and second sets of tags of attributes including an intersection of one or more of:
the modification time,
the resolution data,
the encoding parameters, or
the author information;

determining a third digital media data set comprising data items including tags in the intersection of one or more of:
the modification time,
the resolution data,
the encoding parameters, or
the author information;

using the shared key to determine a set of authentication codes for the third digital media data set;
using the private-set intersection protocol and the set of authentication codes to determine a refined third digital media data set from the third digital media data set by removing from the third digital media data set items that are in both the first digital media data set and the second digital media data set; and
transmitting the refined third digital media data set to the second entity including transmitting a plurality of digital media data items determined to have matching tags in the intersection of one or more of:
the modification time,
the resolution data,
the encoding parameters, or
the author information.

2. The computer-implemented method of claim 1 , further comprising:
obtaining a fourth data set from the second entity; and
adding the fourth data set to the first data set.

3. The computer-implemented method of claim 1 , wherein each authentication code in the set of authentication codes is based at least in part on a cryptographic hash of contents of a data element and the shared key.

4. The computer-implemented method of claim 1 , wherein the first data set and the second data set are sets of image data objects, digital photos, video data objects, or audio data objects.

5. A system, comprising:
one or more processors; and
memory that stores computer-executable instructions that, if executed, cause the system to:
use a first peer-to-peer private-set-intersection protocol to identify a set of tags associated with attributes of both a first set of tagged data on a first computer system and a second set of tagged data on a second computer system, the attributes including one or more of:
a geographic location,
a creation time,
encoding parameters, or
author information;

use a second private-set-intersection protocol to identify an intersection of the first set of tagged data and the second set of tagged data, including identifying an intersection of one or more of:
the geographic location,
the creation time,
the encoding parameters, or
the author information; and

transmit, from the first computer system to the second computer system, data that is in the first set of tagged data and not in the intersection, including transmitting data determined to be in the intersection of one or more of:
the geographic location,
the creation time,
the encoding parameters, or
the author information.

6. The system of claim 5 , wherein the computer-executable instructions, if executed, further cause the system to:
obtain information that identifies a. logical combination of tags; and
identify the first set of tagged data based on the logical combination of tags.

7. The system of claim 5 , wherein the computer-executable instructions, if executed, further cause the system to:
generate a set of authentication codes for one or more pieces of tagged data in the first set of tagged data; and
perform the second private-set-intersection protocol using the set of authentication codes.

8. The system of claim 7 , wherein the set of authentication codes are based at least in part on a shared secret generated as a result of a key-exchange process performed by the first computer system and the second computer system.

9. The system of claim 5 , wherein the computer-executable instructions, if executed, further cause the system to:
obtain, from the second computer system, data that is in the second set of tagged data and not in the intersection; and
store the data obtained from the second computer system.

10. The system of claim 5 , wherein the first private-set-intersection protocol and the second private-set-intersection protocol are performed between the first computer system and the second computer system without involvement of a third trusted entity.

11. The system of claim 5 , wherein the first private-set-intersection protocol and the second private-set-intersection protocol are the same protocol.

12. The system of claim 5 , wherein:
the first set of tagged data and the second set of tagged data are posts to a social media service; and
each individual post in the first set of tagged data and the second set of tagged data includes a tag that identifies a subject of the individual post.

13. A non-transitory computer-readable storage medium comprising stored thereon executable instructions that, as a result of being executed by one or more processors of a computer system, cause the computer system to at least:
use a first private-set-intersection protocol to identify a set of tags associated with both a first set of tagged digital image data on a first computer system and a second set of tagged digital image data on a second computer system, the first private-set-intersection protocol implemented as a two-party protocol and the tags associated with one or more of:
a geographic location,
a creation time,
a modification time, or
resolution data;

use a second private-set-intersection protocol to identify an intersection of the first set of tagged digital image data and the second set of tagged digital image data, including identifying an intersection of one or more of:
the geographic location,
the creation time,
the modification time, or
the resolution data; and

transmit, from the first computer system to the second computer system, digital image data that is in the first set of tagged digital image data and not in the intersection of one or more of:
the geographic location,
the creation time,
the modification time, or
the resolution data.

14. The non-transitory computer-readable storage medium of claim 13 , wherein the executable instructions further comprise instructions that, as a result of being executed by the one or more processors, cause the computer system to obtain, from the second computer system, digital image data that is in the second set of tagged digital image data and not in the intersection.

15. The non-transitory computer-readable storage medium of claim 14 , wherein the executable instructions further comprise instructions that, as a result of being executed by the one or more processors, cause the computer system to add the digital image data obtained from the second computer system to the first set of tagged digital image data.

Assignees

• Amazon Tech Inc

Inventors

• Meng Xianrui Jeri
• Campagna Matthew John

Classifications

• G06Q10/40

  Business processes related to social networking or social networking services · CPC title

• G06F16/907

  Retrieval characterised by using metadata, e.g. metadata not derived from the content or metadata generated manually · CPC title

• G06F21/64

  Protecting data integrity, e.g. using checksums, certificates or signatures · CPC title

• G06F21/6245

  Protecting personal data, e.g. for financial or medical purposes · CPC title

• G06F21/445 Primary

  by mutual authentication, e.g. between devices or programs · CPC title