Subscribe to our e-mail newsletters
For more info on a specific newsletter, click the title. Details will be displayed in a new window.
Computerworld Daily News (First Look and Wrap-Up)
Computerworld Blogs Newsletter
The Weekly Top 10
More E-Mail Newsletters 
Computerworld 2007Subscribe to Computerworld
40 years of the most authoritative source of news and information for IT leaders.

IBM Almaden Research Center's Sovereign Information Integration Privacy-Minded Security

Double-encrypted data allows for security checks, but without violating privacy rules.
 

Sign up to receive Security Resource Alerts

September 12, 2005 (Computerworld) -- Information sharing is a thorny subject these days. The whole idea of the Internet is to make anything available to anyone in real time. Instant access is the mantra of the modern world. Yet this philosophy collides solidly with privacy rights and the need for security.

Take the case of an airline working with the government on antiterrorist issues. The airline's passenger lists might have to be compared to a Homeland Security terrorism watch list, yet both sides have a vested interest in protecting their databases. The authorities really need to know only that Johnny Dangerous is on Flight 450 and should never find out the names of the other passengers (thereby protecting their privacy and the airline from privacy violation complaints), and the airline should never get to see who else is on the government watch list. Problems like this make security a real challenge today.

"Security vs. privacy is a false choice," says Rakesh Agrawal, IBM fellow at the IBM Almaden Research Center in San Jose. "By making technological advances, we can have both without impeding the flow of information."

IBM's Sovereign Information Integration (SII) technology is an attempt to solve this dilemma. It enables companies to gain value from their data while complying with privacy policies and legislation. Current approaches to information integration -- centralized data warehouses and federations - are based on the assumption that all of the information in each database can be revealed to the other databases. This may not actually be desired, however, in cases such as those involving medical information, national security, law enforcement, intellectual property law, and business networks and partnerships.

"IBM's solution is for each party to encrypt its own data and then send it to the other party to encrypt again," says David Rabb, a consultant at Rabb Associates Inc., a Chappaqua, N.Y.-based company that evaluates database technologies. "If the encryption methods are commutative, meaning you get the same result whichever encryption is applied first, then a name or ID number appearing in both files would have the same double-encrypted value and be recognized as a match."

Thus, double-encrypted data can be compared without violating disclosure rules. Nonmatching values, on the other hand, would be unreadable by either party, because they would be protected by the other party's encryption. Furthermore, this innovative encryption technique also enables information sharing via a Web-based query interface.

The system was developed by Agrawal along with a team consisting of Ramakrishnan Srikant, Alexandre Evfimievski and Dmitri Asonov. It was funded out of the $5 billion that IBM invests in research and development annually. SII is the functional component of IBM's Hippocratic Database, which ties into health care applications to let users indicate who should have access to certain patient data.

Agrawal says his team is now exploring the use of commercially available hardware to speed up the query execution of SII, as well as identifying additional application areas for the technology.

"We are validating technology with our customers and would like to make the technology available through customer partnerships as well as product and service offerings," he says. "We expect that SII will facilitate innovative new methods of business collaboration sensitive to privacy and regulatory issues."

Robb is a Computerworld contributing writer in Los Angeles.

Special Report


Computerworld Horizon Awards
Stories in this report:



Print this Story Send Us Feedback E-mail this Story Digg! Digg this Story Slashdot this Story
IBM Almaden Research Center's Sovereign Information Integration Privacy-Minded Security
"Apple yesterday dropped the price of the 64Gb MacBook Air by a whopping $500 ($400 less for the SSD and..." Read more...
"It's a cheaper IT Blogwatch: in which Apple cuts the price of the top-end MacBook Air. Not to mention dan..." Read more...
Read more Software posts or See all Blogs
Microsoft promises four patches next week
Google gives away home-cooked Web application security scanner
Storm botnet stages Fourth of July attacks
More top stories...
Microsoft trumpets security additions in upcoming IE8
Apple cuts price of high-end SSD MacBook Air by $500
Ultrathin showdown: Apple MacBook Air vs. Lenovo ThinkPad X300 vs. Toshiba Portege R500
All it takes is a couple hours and about $125 to breathe new life into an old laptop. Here's how.
Is Microsoft's Golden Age over? What are Gates' most memorable quotes? Find out in Computerworld's complete coverage of the end of the Bill Gates era at Microsoft.
There are some things your CIO definitely doesn't want to hear. Also don't miss the flipside, Five things you should always tell your boss.
With its latest version, Mozilla's browser continues to raise the bar for what Web browsers should be.
Reviews, analyses, how-tos, visual tours, hot issues and predictions about Microsoft's new OS.
Four years from now, the IT field will be a vastly different place. Will you be ready?
All Zones
Application Performance Zone
Business Continuity Zone
Data Center Management Zone
Enterprise-Class Security Zone
The File Data Management Zone
Grid Computing on Windows Zone
Security Management Zone
ITIL Best Practices Zone
The SAS Zone
Storage Virtualization Zone
Business Intelligence and Analytics Zone

Ads by TechWords

See your link here
Computerworld Technology Briefing: An open-source path to optimal virtualization
Download this Technology Briefing now!
(Source: Novell/IBM/Intel) Virtualization is about a lot more than just lowering total cost of ownership. In fact users that have taken an open source path to virtualization have realized the additional, mission-critical benefit of markedly reduced IT complexity, as well as a more flexible infrastructure that is easier to change to meet shifting, often unpredictable business requirements.
Download this executive briefing download
Advance your BlackBerry(R) solution management know-how this July
Advance your BlackBerry(R) solution management know-how this July
BlackBerry Technical Seminar, register today!
Go to the webcast 
Rapid application development, rapid results
Download this special report now!
(Source: Intersystems) All too many businesses suffer from IT infrastructures that are a hodge-podge of disconnected databases and applications. What's needed is the ability rapidly develop connected applications under a unified service-oriented architecture. InterSystems Ensemble integration environment and Cache database are effective tools in answering this need, delivering a rapid ROI.
Download this white paper go
White Papers
Read up on the latest ideas and technologies from companies that sell hardware, software and services.
Deploying Virtualized NetWare on Linux Whitepaper
Toward More Flexible, Next-Generation Collaboration Solutions
Driving Business Success Through Workgroup Choice and Flexibility
View more whitepapers