September 12, 2005 (Computerworld) -- Information sharing is a thorny subject these days. The whole idea of the Internet is to make anything available to anyone in real time. Instant access is the mantra of the modern world. Yet this philosophy collides solidly with privacy rights and the need for security.
Take the case of an airline working with the government on antiterrorist issues. The airline's passenger lists might have to be compared to a Homeland Security terrorism watch list, yet both sides have a vested interest in protecting their databases. The authorities really need to know only that Johnny Dangerous is on Flight 450 and should never find out the names of the other passengers (thereby protecting their privacy and the airline from privacy violation complaints), and the airline should never get to see who else is on the government watch list. Problems like this make security a real challenge today.
"Security vs. privacy is a false choice," says Rakesh Agrawal, IBM fellow at the IBM Almaden Research Center in San Jose. "By making technological advances, we can have both without impeding the flow of information."
IBM's Sovereign Information Integration (SII) technology is an attempt to solve this dilemma. It enables companies to gain value from their data while complying with privacy policies and legislation. Current approaches to information integration -- centralized data warehouses and federations - are based on the assumption that all of the information in each database can be revealed to the other databases. This may not actually be desired, however, in cases such as those involving medical information, national security, law enforcement, intellectual property law, and business networks and partnerships.
"IBM's solution is for each party to encrypt its own data and then send it to the other party to encrypt again," says David Rabb, a consultant at Rabb Associates Inc., a Chappaqua, N.Y.-based company that evaluates database technologies. "If the encryption methods are commutative, meaning you get the same result whichever encryption is applied first, then a name or ID number appearing in both files would have the same double-encrypted value and be recognized as a match."
Thus, double-encrypted data can be compared without violating disclosure rules. Nonmatching values, on the other hand, would be unreadable by either party, because they would be protected by the other party's encryption. Furthermore, this innovative encryption technique also enables information sharing via a Web-based query interface.
The system was developed by Agrawal along with a team consisting of Ramakrishnan Srikant, Alexandre Evfimievski and Dmitri Asonov. It was funded out of the $5 billion that IBM invests in research and development annually. SII is the functional component of IBM's Hippocratic Database, which ties into health care applications to let users indicate who should have access to certain patient data.
Agrawal says his team is now exploring the use of commercially available hardware to speed up the query execution of SII, as well as identifying additional application areas for the technology.
"We are validating technology with our customers and would like to make the technology available through customer partnerships as well as product and service offerings," he says. "We expect that SII will facilitate innovative new methods of business collaboration sensitive to privacy and regulatory issues."
Robb is a Computerworld contributing writer in Los Angeles.
IBM Almaden Research Center's Sovereign Information Integration
Privacy-Minded Security
"Apple yesterday dropped the price of the 64Gb MacBook Air by a whopping $500 ($400 less for the SSD and..."
Read more...
"It's a cheaper IT Blogwatch: in which Apple cuts the price of the top-end MacBook Air. Not to mention dan..."
Read more... Read more Software posts or See all Blogs
Is Microsoft's Golden Age over? What are Gates' most memorable quotes? Find out in Computerworld's complete coverage of the end of the Bill Gates era at Microsoft.
Computerworld Technology Briefing: An open-source path to optimal virtualization
Download this Technology Briefing now! (Source: Novell/IBM/Intel) Virtualization is about a lot more than just lowering total cost of ownership. In fact users that have taken an open source path to virtualization have realized the additional, mission-critical benefit of markedly reduced IT complexity, as well as a more flexible infrastructure that is easier to change to meet shifting, often unpredictable business requirements.
Download this executive briefing
Advance your BlackBerry(R) solution management know-how this July
Advance your BlackBerry(R) solution management know-how this July
BlackBerry Technical Seminar, register today!
Go to the webcast
Rapid application development, rapid results
Download this special report now! (Source: Intersystems) All too many businesses suffer from IT infrastructures that are a hodge-podge of disconnected databases and applications. What's needed is the ability rapidly develop connected applications under a unified service-oriented architecture. InterSystems Ensemble integration environment and Cache database are effective tools in answering this need, delivering a rapid ROI.
Download this white paper
White Papers
Read up on the latest ideas and technologies from companies that sell hardware, software and services.
Computerworld Technology Briefing: Meetings @ the Speed of Business For large organizations, Web conferencing gives a major boost to collaboration among far-flung offices. For smaller companies, experts say Web conferencing is no longer a luxury but a necessity for everything from webinars to customer presentations. But the real value lies in saving soft costs and in increases in productivity. Download this briefing