US 11,816,116 B2
Facilitating queries of encrypted sensitive data via encrypted variant data objects
Yuvaraj Sankaran, Alpharetta, GA (US); and Vijay Nagarajan, Cumming, GA (US)
Assigned to Equifax, Inc., Atlanta, GA (US)
Appl. No. 16/982,898
Filed by EQUIFAX INC., Atlanta, GA (US)
PCT Filed Mar. 22, 2019, PCT No. PCT/US2019/023598
§ 371(c)(1), (2) Date Sep. 21, 2020,
PCT Pub. No. WO2019/183483, PCT Pub. Date Sep. 26, 2019.
Claims priority of provisional application 62/646,961, filed on Mar. 23, 2018.
Prior Publication US 2021/0004373 A1, Jan. 7, 2021
Int. Cl. G06F 16/2458 (2019.01); G06F 16/2453 (2019.01); G06F 16/2455 (2019.01); G06F 40/284 (2020.01); G06F 21/60 (2013.01); G06F 21/62 (2013.01)
CPC G06F 16/2468 (2019.01) [G06F 16/2455 (2019.01); G06F 16/24534 (2019.01); G06F 21/602 (2013.01); G06F 21/6245 (2013.01); G06F 40/284 (2020.01)] 20 Claims
OG exemplary drawing
 
1. A secure data processing system comprising:
a processing device;
an identity data repository;
a non-transitory computer-readable memory coupled to the processing device and storing instructions,
wherein the processing device is configured for executing the instructions and thereby performing operations comprising:
receiving sensitive data about an entity;
creating, in the identity data repository and from the sensitive data, a searchable secure entity data object for the entity, wherein creating the searchable secure entity data object comprises:
generating variant data by creating copies of the sensitive data and performing one or more natural language processing techniques on the copies of the sensitive data, the variant data comprising a modified version of the sensitive data,
tokenizing the sensitive data to generate a tokenized sensitive data object and tokenizing the variant data to generate a tokenized variant data object,
associating a common entity identifier with the tokenized sensitive data object and the tokenized variant data object, and
storing the tokenized sensitive data object in a first portion of the searchable secure entity data object, the tokenized variant data object in a second portion of the searchable secure entity data object, and the common entity identifier in a third portion of the searchable secure entity data object;
receiving a query regarding the entity;
generating a tokenized query parameter from a query parameter in the query; and
servicing the query by matching the tokenized query parameter to the tokenized variant data object in the second portion of the searchable secure entity data object and retrieving the tokenized sensitive data object from the first portion of the searchable secure entity data object.