Automated Determination of Quasi-Identifiers Using Program Analysis

Abstract

A system and method for automated determination of quasi-identifiers for sensitive data fields in a dataset are provided. In one aspect, the system and method identifies quasi-identifier fields in the dataset based upon a static analysis of program statements in a computer program having access to - sensitive data fields in the dataset. In another aspect, the system and method identifies quasi-identifier fields based upon a dynamic analysis of program statements in a computer program having access to -sensitive data fields in the dataset. Once such quasi-identifiers have been identified, the data stored in such fields may be anonymized using techniques such as k-anonymity. As a result, the data in the anonymized quasi-identifiers fields cannot be used to infer a value stored in a sensitive data field in the dataset.

1 . A method for automatically identifying one or more quasi-identifier data fields in a dataset, the method comprising:
 identifying a program having access to the dataset, the program including one or more program statements for reading or writing a value in one or more fields in the dataset;   determining a first output program statement in the program, where the first program output statement is a program statement for writing a first value into a sensitive data field in the dataset;   determining, with a processor, a first set of program statements in the program, where the first set of program statements includes one or more program statements that contribute to the computation of the first value written into the sensitive data field; and,   analyzing, with the processor, the first set of program statements, and determining, based on the analysis of the first set of program statements, one or more quasi-identifier data fields associated with the sensitive data field in the dataset.   
     
     
         2 . The method of  claim 1 , further comprising:
 anonymizing, in the dataset, data stored in at least one of the quasi-identifier data fields.   
     
     
         3 . The method of  claim 1 , further comprising anonymizing, in the dataset, data stored in at least one of the quasi-identifier data fields using K-anonymity. 
     
     
         4 . The method of  claim 1 , wherein determining the first set of program statements includes determining the first set of program statements using static program analysis. 
     
     
         5 . The method of  claim 1 , wherein determining the first set of program statements includes determining the first set of program statements using dynamic program analysis. 
     
     
         6 .- 7 . (canceled) 
     
     
         8 . The method of  claim 1 , wherein analyzing, with the processor, the first set of program statements includes recursively analyzing, with the processor, the first set of program statements. 
     
     
         9 . A system for automatically identifying one or more data fields in a dataset, the system comprising:
 a memory storing instructions and data, the data comprising a set of programs and a dataset having one or more data fields;   a processor to execute the instructions and to process the data, wherein the instructions comprise:
 identifying a program in the set of programs, the program having one or more program statements for reading or writing a value in one or more fields in the dataset; 
 determining a first output program statement in the program, where the first program output statement is a program statement for writing a first value into a sensitive data field in the dataset; 
 determining a first set of program statements in the program, where the first set of program statements includes one or more program statements that contribute to the computation of the first value written into the sensitive data field; and, 
 analyzing the first set of program statements, and determining, based on the analysis of the first set of program statements, one or more data fields associated with the sensitive data field in the dataset. 
   
     
     
         10 . The system of  claim 9 , wherein the instructions further comprise:
 anonymizing, in the dataset, data stored in at least one of the data fields associated with the sensitive data field.   
     
     
         11 . The system of  claim 9 , wherein the instructions further comprise:
 anonymizing, in the dataset, data stored in at least one of the data fields associated with the sensitive data field using K-anonymity.   
     
     
         12 . The system of  claim 9 , wherein determining the first set of program statements includes determining the first set of program statements using static program analysis. 
     
     
         13 . The system of  claim 9 , wherein determining the first set of program statements includes determining the first set of program statements using dynamic program analysis. 
     
     
         14 .- 15 . (canceled) 
     
     
         16 . The system of  claim 9 , wherein analyzing the first set of program statements includes recursively analyzing the first set of program statements.