![[Help]](United%20States%20Patent%205,614,927_files/help.gif){kind=small}
![[Boolean Search]](United%20States%20Patent%205,614,927_files/boolean.gif){kind=small}
![[Advanced]](United%20States%20Patent%205,614,927_files/advanced.gif){kind=small}
![[Number Search]](United%20States%20Patent%205,614,927_files/number.gif){kind=small}
![[Order Copy]](United%20States%20Patent%205,614,927_files/copy.gif){kind=small}
![[PTDLs]](United%20States%20Patent%205,614,927_files/ptdl.gif){kind=small}
![[Back to List]](United%20States%20Patent%205,614,927_files/list.gif){kind=small}
|
|||
| (1 of 1) | |||
| United States Patent | 5,614,927 |
| Gifford, et. al. | Mar. 25, 1997 |
Abstract
A system and method are disclosed for protecting a database against deduction of confidential attribute values therein. A memory 160 is provided for storing the database and a processor 155 is provided for processing the database. Using the processor, the database is electronically partitioning into public attributes, containing nonconfidential attribute values, and private attributes, containing private attribute values. The processor is then used to electronically process the private attribute values to reduce any high correlation between public attribute values and private attribute values. Specifically, the processor can partition the database into safe tuples and unsafe tuples, which unsafe tuples have highly correlative public attribute values. The processor can then selectively combine the public attribute values of the tuples to camouflage such tuples from deduction of their private attribute values beyond a threshold level of uncertainty or remove such tuples from the database.
| Inventors: | Gifford; Warren S. (Holmdel, NJ); Griffeth; Nancy D. (Westfield, NJ); Katz; James E. (Morristown, NJ). |
| Assignee: | Bell Communications Research, Inc. (Morristown, NJ). |
| Appl. No.: | 490,001 |
| Filed: | Jun. 12, 1995 |
| Continuation-in-part of Ser No. 372,759, Jan. 13, 1995, abandoned. |
| Intl. Cl. : | G06F 17/30 |
| Current U.S. Cl.: | 707/531; 713/182; 713/193 |
| Field of Search: | 395/600, 51; 380/25; 364/419.13 |
| 4,962,533 | Oct., 1990 | Krueger et al. | 380/25 |
| 5,191,638 | Mar., 1993 | Wakami et al. | 395/51 |
| 5,355,474 | Oct., 1994 | Thuraisingham | 395/600 |
| 5,481,700 | Jan., 1996 | Thuraisingham | 395/600 |
S. Loeb & Y. Yacobi, Private Information Filters in a Public Network, - Proc. of the Con. on High Perf. Info Filtering, pp. 1-3, 1991.
Dobkin, Jones & Lipton, Secure Databases: Protection Against User Influence, ACM Trans. on Database Sys., vol. 4, No. 1, pp. 97-106, Mar., 1979.
Warner, Randomized Response: A Survey Technique for Eliminating Evasive Answer Bias, 60 J. of the Am. Stat. Assoc. pp. 63-69, 1965.
Denning, Secure Statistical Databases With Random Sample Queries, ACM Trans. on Database Sys., vol. 5, No. 3, pp. 291-315, Sep., 1980.
Yu & Chin, A Study on the Protection of Statistical Databases, Proc. ACM-SIGMOD Int'l Conf. on the Mgmt. of Data, pp. 169-181, 1977.
Chin & Ozsoyoglu, Security in Partitioned Dynamic Statistical Databases, Proc. IEEE COMPSAC Conf., pp. 594-601, 1979.
Pernul et al., "A Multilevel Secure Relational Data Model Based on Views", Proceedings. Seventh Annual Computer Security Applications Conference, San Antonio, Texas, 2-6 Dec. 1991, pp. 166-177 Dec. 1991.
|
|
|||
| (1 of 1) | |||