Using secure coprocessors for privacy preserving collaborative data mining and analysis

ABSTRACT

Secure coprocessors have traditionally been used as a keystone of a security subsystem, eliminating the need to protect the rest of the subsystem with physical security measures. With technological advances and hardware miniaturization they have become increasingly powerful. This opens up the possibility of using them for non traditional use. This paper describes a solution for privacy preserving data sharing and mining using cryptographically secure but resource limited coprocessors. It uses memory light data mining methodologies along with a light weight database engine with federation capability, running on a coprocessor. The data to be shared resides with the enterprises that want to collaborate. This system will allow multiple enterprises, which are generally not allowed to share data, to do so solely for the purpose of detecting particular types of anomalies and for generating alerts. We also present results from experiments which demonstrate the value of such collaborations.

REFERENCES

• 1: Patriot Act, http://thomas.loc.gov/cgi-bin/bdquery/z?d107:h.r.03162.
• 2: Graham-Leach-Bailey Act, http://www.ftc.gov/privacy/glbact.
• 3: T. W. Arnold , L. P. Van Doom, The IBM PCIXCC: a new cryptographic coprocessor for the IBM eServer, IBM Journal of Research and Development, v.48 n.3-4, p.475-487, May 2004
• 4: Cloudscape, http://www306.ibm.com/software/data/cloudscape.
• 5: D. P. Hansen, C. Daly, K. Harrap, J. Jacquet, M. O'Dwyer, C. Pang, J. Ryan-Brown, "Health Data Integration (HDI): Research Software to Commercial Product", Australian Software Engineering Conference, 2005
• 6: Entity Analytics Solutions, http://www.ibm.com/software/data/db2/eas
• 7: Rakesh Agrawal , Dmitri Asonov , Ramakrishnan Srikant, Enabling sovereign information sharing using Web Services, Proceedings of the 2004 ACM SIGMOD international conference on Management of data, June 13-18, 2004, Paris, France [doi>10.1145/1007568.1007673]
• 8: M. Kantarcioglu, C. Clifton, "Security issues in querying encrypted data", Technical Report TR-04-013, Purdue University, 2004
• 9: Privacy Preserving Analytics, CSIRO Annual Report 2004-5 and CSIRO "PPA for Health Data" brochure
• 10: C. Clifton, W. Du, M. Atallah, "ITR: Distributed Data Mining to Protect Information Privacy", Purdue University
• 11: Kenneth Goldman , Enriquillo Valdez, Matchbox: Secure Data Sharing, IEEE Internet Computing, v.8 n.6, p.18-24, November 2004 [doi>10.1109/MIC.2004.68]
• 12: FIPS Standards, http://csrc.nist.gov/cryptval/140-2.htm
• 13: IBM 4758, http://www-.ibm.com/security/cryptocards/pcicc/overview.shtml
• 14: T. Agerwala , J. L. Martin , J. H. Mirza , D. C. Sadler , D. M. Dias, SP2 system architecture, IBM Systems Journal, v.34 n.2, p.152-184, 1995
• 15: C. K. Baru , G. Fecteau , A. Goyal , H. Hsiao , A. Jhingran , S. Padmanabhan , G. P. Copeland , W. G. Wilson, DB2 parallel edition, IBM Systems Journal, v.34 n.2, p.292-322, 1995
• 16: N. Abe, C. Apte, B. Bhattacharjee, K. Goldman, J. Langford, B. Zadrozny, "Sampling Approach to Resource Light Data Mining", SIAM Workshop on Data Mining in Resource Constrained Environments 2004
• 17: Bianca Zadrozny , Charles Elkan, Learning and making decisions when costs and probabilities are both unknown, Proceedings of the seventh ACM SIGKDD international conference on Knowledge discovery and data mining, p.204-213, August 26-29, 2001, San Francisco, California [doi>10.1145/502512.502540]
• 18: Bianca Zadrozny , John Langford , Naoki Abe, Cost-Sensitive Learning by Cost-Proportionate Example Weighting, Proceedings of the Third IEEE International Conference on Data Mining, p.435, November 19-22, 2003
• 19: J. von Neumann, "Various techniques used in connection with random digits", Applied Mathematics Series, 12, pp 36--38, National Bureau of Standards, 1951.
• 20: S. S. Bay, "UCI KDD Archive", Department of Information and Computer Sciences, University of California, Irvine, http://kdd.ics.uci.edu/, 2000.
• 21: J. Ross Quinlan, C4.5: programs for machine learning, Morgan Kaufmann Publishers Inc., San Francisco, CA, 1993
• 22: KDD-cup-98 Results, http://www.kdnuggets.com/meetings/kdd98/kdd-cup-98-results.html.
• 23: PKDD'99 Discovery Challenge: A collaborative effort in knowledge discovery from databases, http://lisp.vse.cz/pkdd99/chall.htm.
• 24: Leo Breiman, Bagging predictors, Machine Learning, v.24 n.2, p.123-140, Aug. 1996 [doi>10.1023/A:1018054314350]
• 25: PPC 405GPr Embedded Processor Data Sheet, AMCC, 2005
• 26: A. Freier, P. Karlton, P. Kocher, "The SSL Protocol, Version 3.0", Transport layer Security Working Group, 1996, http://wp.netscape.com/eng/ssl3
• 27: ANSI X3.106, "American National Standard for Information Systems-Data Link Encryption", American National Standards Institute, 1983
• 28: R. Rivest, "The MD5 Message Digest Algorithm", April 1992
• 29: FIPS Standards, http://www.itl.nist.gov/fipspubs/fip1801.htm

INDEX TERMS

Primary Classification:
  H. Information Systems
  H.2 DATABASE MANAGEMENT
      H.2.8 Database applications
          Subjects: Data mining

General Terms:
Algorithms, Design, Legal Aspects, Security

Keywords:
collaboration, data mining, federation, privacy