Privacy Preserving Centralized Evaluation of Sensitive User Features for Anomaly Detection

Patent metadata

Field	Value
Publication number	US-2021133357-A1
Application number	US-201916668705-A
Country	US
Kind code	A1
Filing date	Oct 30, 2019
Priority date	Oct 30, 2019
Publication date	May 6, 2021
Grant date	—

Abstract

Techniques are provided for centralized processing of sensitive user data. One method comprises obtaining, by a service provider, values of predefined features based at least in part on personal information of a user, wherein the values of the predefined features are computed by the user; and processing, by the service provider, the values of the predefined features based on the personal information to detect one or more predefined anomalies associated with the user and/or a device of the user. The predefined anomalies comprise, for example, a risk anomaly, a security level anomaly, a fraud likelihood anomaly, an identity assurance anomaly, and/or a behavior anomaly. The predefined features relate to, for example, a location of the user and/or device-specific information for a device of the user.

First claim

What is claimed is:

1 . A method, comprising:
obtaining, by at least one processing device of a service provider, values of one or more predefined features based at least in part on personal information of a given remote user, wherein the values of the one or more predefined features are computed by at least one processing device of the given remote user; and processing, by the at least one processing device of the service provider, the values of the one or more predefined features based at least in part on personal information to detect one or more predefined anomalies associated with one or more of the given remote user and the at least one processing device of the given remote user, wherein the service provider cannot access the personal information.

2 . The method of claim 1 , wherein the one or more predefined anomalies associated with one or more of the given remote user and the at least one processing device of the given remote user comprise one or more of a risk anomaly, a security level anomaly, a fraud likelihood anomaly, an identity assurance anomaly, and a behavior anomaly.

3 . The method of claim 1 , wherein the at least one processing device of the service provider communicates with the at least one processing device associated with the given remote user to provide one or more of an updated data transformation configuration and external data needed for calculation of the one or more predefined feature.

4 . The method of claim 1 , wherein the at least one processing device associated with the given remote user performs a data normalization comprising one or more of setting one or more missing values, performing one or more predefined numerical transformations and performing one or more predefined pre-processing operations.

5 . The method of claim 1 , wherein the at least one processing device associated with the given remote user performs one or more of a data enrichment and a discretization to improve a quality of one or more of user data and the one or more predefined features.

6 . The method of claim 1 , wherein the one or more predefined features associated with personal information of the given remote user relate to one or more of a location of the given remote user and device-specific information for a device of the user.

7 . The method of claim 1 , wherein the obtaining comprises the at least one processing device of the given remote user sending the values of the one or more predefined features based at least in part on personal information to the service provider over an encrypted channel.

8 . The method of claim 1 , wherein the at least one processing device of the service provider computes one or more additional features not associated with personal information of the given remote user.

9 . The method of claim 1 , wherein the at least one processing device of the service provider initiates one or more of predefined remedial steps and predefined mitigation steps to address the detected predefined anomalies.

10 . An apparatus comprising:
at least one processing device comprising a processor coupled to a memory; the at least one processing device corresponding to a service provider and being configured to perform the following steps: obtaining, by the at least one processing device of the service provider, values of one or more predefined features based at least in part on personal information of a given remote user, wherein the values of the one or more predefined features are computed by at least one second processing device of the given remote user; and processing, by the at least one processing device of the service provider, the values of the one or more predefined features based at least in part on personal information to detect one or more predefined anomalies associated with one or more of the given remote user and the at least one second processing device of the given remote user, wherein the service provider cannot access the personal information.

11 . The apparatus of claim 10 , wherein the one or more predefined anomalies associated with one or more of the given remote user and the at least one second processing device of the given remote user comprise one or more of a risk anomaly, a security level anomaly, a fraud likelihood anomaly, an identity assurance anomaly, and a behavior anomaly.

12 . The apparatus of claim 10 , wherein the at least one processing device of the service provider communicates with the at least one second processing device of the given remote user to provide one or more of an updated data transformation configuration and external data needed for calculation of the one or more predefined feature.

13 . The apparatus of claim 10 , wherein the one or more predefined features associated with personal information of the given remote user relate to one or more of a location of the given remote user and device-specific information for a device of the user.

14 . The apparatus of claim 10 , wherein the obtaining comprises the at least one second processing device of the given remote user sending the values of the one or more predefined features based at least in part on personal information to the service provider over an encrypted channel.

15 . The apparatus of claim 10 , wherein the at least one processing device of the service provider initiates one or more of predefined remedial steps and predefined mitigation steps to address the detected predefined anomalies.

16 . A non-transitory processor-readable storage medium having stored therein program code of one or more software programs, wherein the program code when executed by at least one processing device of a service provider causes the at least one processing device of the service provider to perform the following steps:
obtaining, by the at least one processing device of the service provider, values of one or more predefined features based at least in part on personal information of a given remote user, wherein the values of the one or more predefined features are computed by at least one second processing device of the given remote user; and processing, by the at least one processing device of the service provider, the values of the one or more predefined features based at least in part on personal information to detect one or more predefined anomalies associated with one or more of the given remote user and the at least one second processing device of the given remote user, wherein the service provider cannot access the personal information.

17 . The non-transitory processor-readable storage medium of claim 16 , wherein the one or more predefined anomalies associated with one or more of the given remote user and the at least one second processing device of the given remote user comprise one or more of a risk anomaly, a security level anomaly, a fraud likelihood anomaly, an identity assurance anomaly, and a behavior anomaly.

18 . The non-transitory processor-readable storage medium of claim 16 , wherein the at least one processing device of the service provider communicates with the at least one second processing device of the given remote user to provide one or more of an updated data transformation configuration and external data needed for calculation of the one or more predefined feature.

19 . The non-transitory processor-readable storage medium of claim 16 , wherein the one or more predefined features associated with personal information of the given remote user relate to one or more of a location of the given remote user and device-specific information for a device of the user.

Assignees

• Emc Ip Holding Co Llc

Inventors

• Machani Salah E
• Zaslavsky Alex

Classifications

• G06F21/31 Primary

  User authentication · CPC title

• G06F21/606

  by securing the transmission between two devices or processes · CPC title

• G06F21/6254

  by anonymising data, e.g. decorrelating personal data from the owner's identification · CPC title

• G06F21/6263 Primary

  during internet communication, e.g. revealing personal data from cookies · CPC title

• G06F21/602

  Providing cryptographic facilities or services · CPC title