PRIVATE ANALYTICS WITH CONTROLLED INFORMATION DISCLOSURE

摘要

A cloak server is used to analyze and control disclosure of user data by authenticating at least one of a user, an at least one client associated with the user, a source, a sink, and a third party. The cloak server receives user data transmitted by at least one of the at least one client and a source and associates the received user data with the user. The cloak server stores, seals, and unseals the received user data and is hardened such that the stored user data is not readable from outside the cloak server. The cloak server further generates, based at least in part on a first permissions indicator, a result by executing a computation on the stored user data, and transmits, based at least in part on a second permissions indicator, the result to at least one of the at least one client, and a sink.