Patent US10333902

Data sanitization system for public host platform
[+] Show Details

US10333902

1. A computing system comprising: (6) (3)

a processor configured to receive a message transmitted from a client device, the message comprising a plurality of predefined fields for processing by a service providing computing system,

encrypt values of one or more personally-identifying fields among the plurality of predefined fields within the message based on an encryption key,

insert the encrypted values in place of the values inside the personally-identifying fields while leaving values of remaining non-identifying fields among the plurality of predefined fields within the message unchanged to generate an anonymized message with its service data payload intact, and

insert a key identifier of the encryption key into a personally-identifying field of the anonymized message having an encrypted value therein; and

a network interface configured to transmit the anonymized message with its service data payload intact to the service providing computing system and receive an anonymized response message including a processing result,

wherein the processor is further configured to decrypt an encrypted value in the response message using a decryption key identified based on the previously inserted key identifier, determine that the client device is associated with the processing result based on the decrypted value, and transmit the processing result to the client device.

2. The computing system of claim 1, wherein the processor is configured to detect one or more fields within a body of the message that contain personally identifiable information (PII) values and encrypt the PII values while leaving values of remaining fields within the body intact to generate the anonymized message. (0)

3. The computing system of claim 1, wherein the key identifier comprises an alphanumeric value and the processor is configured to sequentially append a first character of the alphanumeric value of the key identifier to a last character of an encrypted value inside a personally-identifying field of the anonymized message. (0)

4. The computing system of claim 1, wherein the processor is further configured to store a lookup table including key identifiers and corresponding encryption keys of each key identifier, in a storage device. (0)

5. The computing system of claim 1, wherein the response message includes a processing result generated by the service providing computing system and the one or more encrypted values inserted into the transmitted anonymized message. (0)

6. The computing system of claim 1, wherein the key identifier inserted within the anonymized message is configured to locate the decryption key for decrypting the one or more encrypted values in a look-up table. (0)

7. The computing system of claim 1, wherein the anonymous response message includes the one or more encrypted values, the key identifier, and processed information generated by processing non-sensitive data included in the anonymized message. (0)

8. A computer-implemented method, comprising: (6) (5)

receiving a message transmitted from a client device, the message comprising a plurality of predefined fields for processing by a service providing computing system;

encrypting values of one or more personally-identifying fields among the plurality of predefined fields within the message based on an encryption key and inserting the encrypted values in place of the values inside the personally-identifying fields while leaving values of remaining non-identifying fields among the plurality of predefined fields within the message unchanged to generate an anonymized message with its service data payload intact;

inserting a key identifier of the encryption key into a personally-identifying field of the anonymized message having an encrypted value therein; and

transmitting the anonymized message with its service data payload intact to the service providing computing system and receiving an anonymized response message including a processing result,

wherein the method further comprises decrypting an encrypted value from the response message using a decryption key identified based on the previously inserted key identifier, determining that the client device is associated with the processing result based on the decrypted value, and transmitting the processing result to the client device.

9. The computer-implemented method of claim 8, wherein the detecting comprises detecting, by a proxy system, one or more fields within a body of the message that contain personally identifiable information (PII) values, and encrypting, by the proxy system, the PII values while leaving values of remaining fields within the body intact to generate the anonymized message. (0)

10. The computer-implemented method of claim 8, wherein the key identifier comprises an alphanumeric value and the inserting comprises sequentially appending a first character of the alphanumeric value of the key identifier to a last character of an encrypted value inside a personally-identifying field of the anonymized message. (0)

11. The computer-implemented method of claim 8, wherein the method further comprises storing a lookup table including key identifiers and corresponding encryption keys of each key identifier, in a storage device. (0)

12. The computer-implemented method of claim 8, wherein the response message includes a processing result generated by the service providing computing system and the one or more encrypted values inserted into the transmitted anonymized message. (0)

13. The method of claim 8, wherein the key identifier inserted within the anonymized message is configured to locate the decryption key for decrypting the one or more encrypted values in a look-up table. (0)

14. The method of claim 8, wherein the anonymous response message includes the one or more encrypted values, the key identifier, and processed information generated by processing non-sensitive data included in the anonymized message. (0)

15. A non-transitory computer readable medium having stored therein program instructions that when executed cause a computer to perform a method comprising: (6) (5)

receiving a message transmitted from a client device, the message comprising a plurality of predefined fields for processing by a service providing computing system;

inserting a key identifier of the encryption key into a personally-identifying field of the anonymized message having an encrypted value therein; and

transmitting the anonymized message with its service data payload intact to the service providing computing system and receiving an anonymized response message including a processing result,

16. The non-transitory computer readable medium of claim 15, wherein the detecting comprises detecting, by a proxy system, one or more fields within a body of the message that contain personally identifiable information (PII) values, and encrypting, by the proxy system, the PII values while leaving values of remaining fields within the body intact to generate the anonymized message. (0)

17. The non-transitory computer readable medium of claim 15, wherein the key identifier comprises an alphanumeric value and the inserting comprises sequentially appending a first character of the alphanumeric value of the key identifier to a last character of an encrypted value inside a personally-identifying field of the anonymized message. (0)

18. The non-transitory computer readable medium of claim 15, wherein the method further comprises storing a lookup table including key identifiers and corresponding encryption keys of each key identifier, in a storage device. (0)

19. The non-transitory computer readable medium of claim 15, wherein the response message includes a processing result generated by the service providing computing system and the one or more encrypted values inserted into the transmitted anonymized message. (0)

20. The non-transitory computer readable medium of claim 15, wherein the key identifier inserted within the anonymized message is configured to locate the decryption key for decrypting the one or more encrypted values in a look-up table. (0)

21. The non-transitory computer readable medium of claim 15, wherein the anonymous response message includes the one or more encrypted values, the key identifier, and processed information generated by processing non-sensitive data included in the anonymized message. (0)

View Abstract and Specification Size

PDF with Images and Document Face >

Full Text Publication >

Patent US10333902

Data sanitization system for public host platform

Patent Matrix® Search