Adaptively Secure Streaming Functional Encryption for Evolving Data
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing streaming functional encryption (sFE) schemes lack adaptive security, which is crucial for handling evolving data sets and multiple function key requests in a privacy-preserving manner, rendering them unsuitable for applications like medical research and privacy-focused computations.
Innovation Solution
Construct an adaptively secure sFE scheme using secure indistinguishability obfuscation and injective pseudorandom generators, combining message-selective and function-selective schemes through a novel gluing technique to achieve full adaptive security.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional functional encryption is used to protect private information, then privacy is preserved, but the system cannot handle evolving data sets efficiently and requires re-encryption of the entire database when new records are added
Solution Approach 1:
The patent segments the encryption system into two distinct components: (1) a traditional functional encryption layer that ensures privacy preservation for the core database, and (2) a streaming encryption layer that handles evolving data increments. This segmentation allows the system to maintain strong privacy guarantees while efficiently processing new data without re-encrypting the entire database, thus resolving the contradiction between reliability and productivity.
Solution Approach 2:
The patent implements preliminary action by pre-establishing functional encryption keys and structures for the initial database state. When new records are added, the system leverages these pre-configured encryption mechanisms to rapidly integrate new data through streaming encryption, avoiding the need to re-encrypt the entire database from scratch. This preliminary preparation enables efficient handling of evolving data while maintaining privacy.
2Reliability
If the entire data set is encrypted at once using functional encryption, then security is maintained, but decryption cannot be performed incrementally and the process must restart if the server goes offline
Solution Approach 1:
The patent segments the decryption process into incremental steps that correspond to the streaming encryption structure. Each segment can be decrypted independently and incrementally, allowing the system to process and retrieve data in manageable chunks. If the server goes offline during decryption, only the interrupted segment needs to be restarted, not the entire decryption process, thus reducing the duration of action while maintaining security.
Solution Approach 2:
The patent ensures continuity of useful action by designing the decryption mechanism to maintain state information and progress tracking. This allows decryption to resume from the point of interruption rather than restarting from the beginning. The system continuously processes decrypted data and maintains the ability to pause and resume operations, significantly reducing the total decryption time for large data sets while preserving security through the underlying functional encryption.
3Adaptability or versatility
If data is encrypted in batches to handle evolving data sets, then adaptability is improved, but computational overhead increases asymptotically
Solution Approach 1:
The patent implements a universal encryption framework that serves multiple functions: it provides traditional batch encryption capabilities for initial data sets while simultaneously supporting efficient streaming encryption for evolving data. This multi-functional system eliminates the need for separate encryption mechanisms for different data scenarios, reducing overall computational overhead while maintaining high adaptability to evolving data sets.
Solution Approach 2:
The patent introduces dynamic adaptability by allowing the system to automatically select between batch encryption and streaming encryption modes based on the data characteristics and operational requirements. For stable, static data sets, the system uses efficient batch encryption. For evolving data sets with frequent additions, it transitions to streaming encryption mode, which minimizes computational overhead by avoiding repeated encryption of existing data. This dynamic approach optimizes energy usage while maintaining versatility.
4Reliability
If function keys are generated for the complete data set, then functional encryption works correctly, but new function keys cannot be generated for data that emerges after key generation
Solution Approach 1:
The patent segments the function key generation process into two independent components: (1) traditional functional encryption keys generated for the initial data set using the master secret key, and (2) streaming encryption keys generated dynamically for new data increments. This segmentation allows the system to maintain the correctness of traditional functional encryption for existing data while simultaneously supporting the generation of new function keys for emerging data, thus resolving the contradiction between reliability and adaptability.
Solution Approach 2:
The patent introduces an intermediary streaming encryption layer that bridges the gap between traditional functional encryption and new data. This intermediary mechanism allows function keys to be generated for both the original data set and newly added data without compromising the security or correctness of either. The streaming encryption acts as a mediator that preserves the integrity of the original functional encryption scheme while extending its capabilities to handle evolving data and new function key requests.
Data Source
AI summary
The present disclosure provides a method and system for implementing a streaming functional encryption scheme with adaptive security. The method includes building a single-key, single-ciphertext, adaptively secure streaming functional encryption scheme and executing a bootstrap of this scheme into a full multi-key, multi-ciphertext, public-key adaptive streaming functional encryption scheme. The method further includes implementing setup, encryption, key generation, and decryption routines for both the single-key scheme and the bootstrapped scheme. The system comprises a processor and a memory storing instructions to execute these routines. The streaming functional encryption scheme enables secure processing of encrypted data streams, allowing for dynamic generation of functional keys and iterative application to ciphertext segments, including those generated prior to key generation.