Abstract: A computer with data (the “source”) establishes communication channels to other computers with available computing resources (the “workers”). The computers exchange information to negotiate alternative sets of encryption techniques and security settings. The source calculates a response by negotiating a data reduction scheme that is applied to form heterogeneous data payloads. Some of the data are encrypted using a fully homomorphic encryption algorithm to form a multi-segment response, whereas other data are encrypted using an encryption algorithm other than fully homomorphic encryption. Security-relevant parameters of the invoked encryption schemes are varied to achieve a negotiated optimal data reduction scheme. Candidate reduction schemes to apply to the user data are negotiated based on then-current communication bandwidth availability and/or computer processing resources at the source and/or at the workers.

Abstract: Methods, systems and computer program products for health data protection. Embodiments commence upon receiving a data access request message from a participant in a health ecosystem. The data access request message comprises an indication of one or more health data sets that are held by or at least potentially of interest to the participant. System components are configured to receive the message and to identify the participant. Based on parameter values corresponding to a data protection policy of the participant, a data protection scheme is generated. The scheme includes parameter values derived from the data protection policy. The parameter values of the scheme are used to generate a variation of the health data set that is formed by applying one or more data anonymization, data obfuscation or other data protection techniques to the health data set. A balance among the parameters is calculated so as to achieve a desired outcome.