Systems and methods for secure data aggregation and computation

Patent metadata

Field	Value
Publication number	US-11620403-B2
Application number	US-202016738942-A
Country	US
Kind code	B2
Filing date	Jan 9, 2020
Priority date	Jan 11, 2019
Publication date	Apr 4, 2023
Grant date	Apr 4, 2023

Abstract

Systems and methods for data aggregation and processing are provided in manner that is decentralized and preserves privacy. A data aggregation and computation system may include an interface, a controller, and one or more clusters of computation nodes. The interface may receive an inquiry from a requesting entity for computing information regarding an individual based on pieces of information held by a plurality of entities. The controller may communicate an identifier for the individual to a processor system associated with each of the entities based on the inquiry. The clusters of computation nodes may each receive encrypted data fragments from each of the processor systems, the data fragments comprising unrecognizable fragments that no individual processor system can re-assemble to recover the information, perform secure, multi-party computations based on the data fragments, and generate a result based on the secure, multi-party computations for the individual.

First claim

What is claimed is:

1. A data aggregation and computation system, comprising:
an interface configured to receive an inquiry from a requesting entity system for computing information regarding an individual based on pieces of protected information held by a plurality of data provider systems wherein the computing information is generated based on at least a first analytic process and a second analytic process;
a controller configured to communicate an identifier corresponding to the individual to a plurality of local processor systems wherein each of the plurality of local processor systems is associated with a respective one of the data provider systems based on the inquiry, wherein each of the local processor systems is configured to perform the first analytic process comprising processing one or more of the pieces of protected information held by the respective data provider associated with the respective local processor system to generate processed local data and generating encrypted data fragments based on the processed local data, wherein the encrypted data fragments comprise unrecognizable fragments that no other local processor system can re-assemble to recover the one or more pieces of the protected information; and
one or more clusters of computation nodes, each of the one or more clusters comprising instructions that when executed cause the respective cluster to perform the second analytic process, the instructions comprising:
receiving the encrypted data fragments from each of the plurality of local processor systems without access to the protected information;
performing secure, multi-party computations based on the data fragments received from each of the plurality of local processor systems;
generating a result based on the secure, multi-party computations for the individual; and
communicating the result to the controller;

wherein the controller is further configured to generate a response and provide the response to the interface for providing to the requesting entity system.

2. The system of claim 1 , wherein the plurality of data provider systems comprises one or more of: a financial institution, a healthcare institution, or a consumer data institution.

3. The system of claim 1 , further comprising an identifier database, wherein the controller is further configured to:
identify respective identifiers of the individual for each of the plurality of data provider systems based on the inquiry, and
communicate the respective identifiers to the respective local processor system associated with each of the data provider systems.

4. The system of claim 1 , wherein each of the one or more clusters of computation nodes further comprises instructions that when executed cause the respective cluster to receive the data fragments for further processing in aggregate from the local processor systems associated with each of the data provider systems, and wherein each local processor system is further configured to perform initial computations on individual pieces of the one or more of the pieces of protected information before generating the data fragments.

5. The system of claim 4 , wherein the controller is further configured to identify the initial computations performed by the respective local processor system associated with each of the data provider systems and the secure, multi-party computations performed by the one or more clusters of computation nodes.

6. The system of claim 1 , wherein the controller is further configured to identify a quantity of computation nodes in the one or more clusters that perform the secure, multi-party computations, wherein the quantity is based on a desired security level.

7. The system of claim 1 , wherein the inquiry comprises an information verification request comprising verification information to be verified, and wherein the response is an affirmative or negative response.

8. The system of claim 7 , wherein the interface is further configured to provide the affirmative response to the requesting entity system in response to the inquiry when the result verifies the verification information and provide the negative response in response to the inquiry when the result does not verify the verification information.

9. The system of claim 8 , wherein each of the one or more clusters of computation nodes further comprises instructions that when executed cause the respective cluster to compute an income value for the individual based on the data fragments received from each of the local processor systems, and wherein the result verifies the verification information when a difference between the verification information and the income value is less than or equal to a threshold value and wherein the result does not verify the verification information when the difference is greater than the threshold value.

10. The system of claim 1 , wherein the inquiry comprises a request to compute a credit score for the individual, and wherein the response comprises the credit score for the individual.

11. A method of aggregating and processing data, comprising:
receiving an inquiry from a requesting entity system for computing information regarding an individual based on pieces of protected information held by a plurality of data provider systems;
communicating an identifier corresponding to the individual to a plurality of local processor systems wherein each of the plurality of local processor systems is associated with a respective one of the data provider systems based on the inquiry and are configured to process one or more of the pieces of protected information held by the respective data provider associated with the respective local processor system to generate processed local data and generate encrypted data fragments based on the processed local data, wherein the encrypted data fragments comprise unrecognizable fragments that no other local processor system can re-assemble to recover the one or more pieces of the protected information;
receiving the encrypted data fragments from each of the plurality of local processor systems without access to the protected information
performing secure, multi-party computations based on the data fragments received from each of the plurality of local processor systems;
generating a result based on the secure multi-party computations for the individual;
communicating the result to a controller; and
generating a response and provide the response to an interface for providing to the requesting entity system.

12. The method of claim 11 , wherein the plurality of data provider systems comprises one or more of a financial institution, a healthcare institution, or a consumer data institution.

13. The method of claim 11 , further comprising:
identifying respective identifiers of the individual for each of the plurality of data provider systems based on the inquiry, and
communicating the respective identifiers to the respective local processor system associated with each of the data provider systems.

14. The method of claim 11 , further comprising receiving the data fragments for further processing in aggregate from the local processor systems associated with each of the data provider systems, wherein each processor system is further configured to perform initial computations on individual pieces of the one or more pieces of protected information before generating the data fragments.

15. The method of claim 14 , further comprising identifying the initial computations performed by the respective local processor system associated with each of the data provider systems and the secure, multi-party computations performed by the one or more clusters of co

Assignees

• Experian Inf Solutions Inc

Inventors

• Chen Kevin
• Li Hua
• Liu Juncheng
• Wang Zhixuan
• Guo Shumin
• Haller Eric
• Yin Steve

Classifications

• G06Q40/03

  Credit; Loans; Processing thereof · CPC title

• G06Q50/265 Primary

  Personal security, identity or safety · CPC title

• G06F16/9535

  Search customisation based on user profiles and personalisation · CPC title

• G06F21/6245 Primary

  Protecting personal data, e.g. for financial or medical purposes · CPC title

• G06F21/602

  Providing cryptographic facilities or services · CPC title