Data obfuscation system, method, and computer implementation of data obfuscation for secret databases

Abstract

A data obfuscation system, method, and computer implementation via software or hardware that allows a legitimate user to gain access via a query to data of sufficient granularity to be useful while maintaining the confidentiality of sensitive information about individual records. Output values of a data request are obfuscated in a repeatable manner, via the use of an Obfuscating Function (OF), whilst maintaining the amount of obfuscation within a range so that the transformed values provide to a user information of a prescribed level of granularity. The data obfuscating system and method is particularly applicable to databases. The data obfuscation engine may be implemented in hardware and/or software within a stand alone or distributed environment.

1 . A method of obfuscating data retrieved from a database so that output values of a database request are obfuscated in a repeatable manner, via the use of an Obfuscating Function (OF) whilst maintaining the amount of obfuscation within a range so that the transformed values provide to a user information of a prescribed level of granularity, the repeatable manner comprising generating a same value of obfuscated data for each database request having a same value of input data, wherein the database request is filtered before obfuscation to ensure that the granularity of the database request is within the prescribed level of granularity. 
     
     
         2 - 35 . (canceled) 
     
     
         36 . The method of obfuscating data as claimed in  claim 1 , wherein the obfuscated data is precalculated or cached. 
     
     
         37 . The method of obfuscating data as claimed in  claim 1  wherein the filter is configured to hamper attempts to determine the true values from the obfuscated values. 
     
     
         38 - 44 . (canceled) 
     
     
         45 . The method of obfuscating data as claimed in  claim 1  in which restrictions are applied to the data relating to the granularity of the frequency data. 
     
     
         46 . The method of obfuscating data as claimed in  claim 1  in which the amount of obfuscation is altered in response to an algorithm. 
     
     
         47 . The method as claimed in  claim 46  where the alteration of the amount of obfuscation is made in response to different use access rights. 
     
     
         48 . The method as claimed in  claim 47  where the alteration of the amount of obfuscation is made in response to different levels of frequency of output aggregation allowing the data to be of sufficient quality to make business decisions. 
     
     
         49 - 52 . (canceled) 
     
     
         53 . The method as claimed in C lim  22   claim 1  where the original data is stored in a database where the access to the data is restricted. 
     
     
         54 - 80 . (canceled) 
     
     
         81 . An obfuscation circuit adapted to interface between a database and a user interface which obfuscates data values returned from a database in response to a database request from the user interface so that output values of a database request are obfuscated in a repeatable manner, via the use of an Obfuscating Function (OF) whilst maintaining the amount of obfuscation within a range so that the transformed values provide to a user information of a prescribed level of granularity, the repeatable manner comprising generating a same value of obfuscated data for each database request having a same value of input data, wherein the database request is filtered before obfuscation to ensure that the granularity of the database request is within the prescribed level of granularity. 
     
     
         82 - 83 . (canceled) 
     
     
         84 . An obfuscation system implemented on an electronic computing device, comprising:
 an input interface;   a query engine for receiving input data from the input interface;   memory interfaced to the query engine for storing data in a database and supplying data to the query engine in response to a database request;   an output interface configured to receive output data from the query engine; and   an obfuscation engine for obfuscating data retrieved from memory and obfuscating the data in a repeatable manner prior to supplying the data to the output interface so that output values of the database request are obfuscated in a repeatable manner, via the use of an Obfuscating Function (OF) whilst maintaining the amount of obfuscation within a range so that the transformed values provide to a user information of a prescribed level of granularity, the repeatable manner comprising generating a same value of obfuscated data for each database request having a same value of input data, wherein the database request is filtered by a request filer before obfuscation to ensure that the granularity of the database request is within the prescribed level of granularity.   
     
     
         85 - 86 . (canceled) 
     
     
         87 . The obfuscation system as claimed in  claim 84  wherein the request filter is configured to hamper attempts to determine the true values from the obfuscated values. 
     
     
         88 - 94 . (canceled) 
     
     
         95 . The obfuscation circuit as claimed in  claim 81 , wherein the obfuscated data is precalculated or cached. 
     
     
         96 . The obfuscation circuit as claimed in  claim 81 , wherein the filter is configured to hamper attempts to determine the true values from the obfuscated values. 
     
     
         97 . The obfuscation circuit as claimed in  claim 81 , in which restrictions are applied to the data relating to the granularity of the frequency data. 
     
     
         98 . The obfuscation circuit as claimed in  claim 81 , in which the amount of obfuscation is altered in response to an algorithm. 
     
     
         99 . The obfuscation circuit as claimed in  claim 98 , wherein the alteration of the amount of obfuscation is made in response to different use access rights. 
     
     
         100 . The obfuscation circuit as claimed in  claim 99 , wherein the alteration of the amount of obfuscation is made in response to different levels of frequency of output aggregation allowing the data to be of sufficient quality to make business decisions. 
     
     
         101 . The obfuscation circuit as claimed in  claim 81 , wherein the original data is stored in a database where the access to the data is restricted. 
     
     
         102 . The obfuscation system as claimed in  claim 84 , wherein the obfuscated data is precalculated or cached. 
     
     
         103 . The obfuscation system as claimed in  claim 84 , in which restrictions are applied to the data relating to the granularity of the frequency data. 
     
     
         104 . The obfuscation system as claimed in  claim 84 , in which the amount of obfuscation is altered in response to an algorithm. 
     
     
         105 . The obfuscation system as claimed in  claim 104 , wherein the alteration of the amount of obfuscation is made in response to different use access rights. 
     
     
         106 . The obfuscation system as claimed in  claim 105 , wherein the alteration of the amount of obfuscation is made in response to different levels of frequency of output aggregation allowing the data to be of sufficient quality to make business decisions. 
     
     
         107 . The obfuscation system as claimed in  claim 84 , wherein access to the original data is restricted.