Search All Patents in Cryptocurrency: Security
Patent US10333902
Issued 2019-06-25
Data Sanitization System For Public Host Platform
The example embodiments are directed to a system and method for managing blockchain transaction processing. In an example, the method includes one or more of receiving a message transmitted from a client device, the message including a predefined structural format for processing by a service providing computing system, determining a type of the message and detecting one or more sensitive fields within the message based on the determined type of the message, anonymizing values of the one or more sensitive fields within the message while leaving the predefined structural format intact, and transmitting the anonymized message including the one or more anonymized values with the predefined structural format remaining intact to the service providing computing system. The system can anonymize data from a private network before it is transmitted to a public service.
Much More than Average Length Specification
View the Patent Matrix® Diagram to Explore the Claim Relationships
USPTO Full Text Publication >
- 1. A computing system comprising:
a processor configured to
receive a message transmitted from a client device, the message comprising a plurality of predefined fields for processing by a service providing computing system,
encrypt values of one or more personally-identifying fields among the plurality of predefined fields within the message based on an encryption key,
insert the encrypted values in place of the values inside the personally-identifying fields while leaving values of remaining non-identifying fields among the plurality of predefined fields within the message unchanged to generate an anonymized message with its service data payload intact, and
insert a key identifier of the encryption key into a personally-identifying field of the anonymized message having an encrypted value therein; and
a network interface configured to transmit the anonymized message with its service data payload intact to the service providing computing system and receive an anonymized response message including a processing result, wherein the processor is further configured to decrypt an encrypted value in the response message using a decryption key identified based on the previously inserted key identifier, determine that the client device is associated with the processing result based on the decrypted value, and transmit the processing result to the client device.
- 8. A computer-implemented method, comprising:
receiving a message transmitted from a client device, the message comprising a plurality of predefined fields for processing by a service providing computing system; encrypting values of one or more personally-identifying fields among the plurality of predefined fields within the message based on an encryption key and inserting the encrypted values in place of the values inside the personally-identifying fields while leaving values of remaining non-identifying fields among the plurality of predefined fields within the message unchanged to generate an anonymized message with its service data payload intact; inserting a key identifier of the encryption key into a personally-identifying field of the anonymized message having an encrypted value therein; and transmitting the anonymized message with its service data payload intact to the service providing computing system and receiving an anonymized response message including a processing result, wherein the method further comprises decrypting an encrypted value from the response message using a decryption key identified based on the previously inserted key identifier, determining that the client device is associated with the processing result based on the decrypted value, and transmitting the processing result to the client device.
- 15. A non-transitory computer readable medium having stored therein program instructions that when executed cause a computer to perform a method comprising:
receiving a message transmitted from a client device, the message comprising a plurality of predefined fields for processing by a service providing computing system; encrypting values of one or more personally-identifying fields among the plurality of predefined fields within the message based on an encryption key and inserting the encrypted values in place of the values inside the personally-identifying fields while leaving values of remaining non-identifying fields among the plurality of predefined fields within the message unchanged to generate an anonymized message with its service data payload intact; inserting a key identifier of the encryption key into a personally-identifying field of the anonymized message having an encrypted value therein; and transmitting the anonymized message with its service data payload intact to the service providing computing system and receiving an anonymized response message including a processing result, wherein the method further comprises decrypting an encrypted value from the response message using a decryption key identified based on the previously inserted key identifier, determining that the client device is associated with the processing result based on the decrypted value, and transmitting the processing result to the client device.
