Computation-Cluster Randomness Offloading for Low-End Device Encryption

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Low-end devices with limited computational resources face challenges in encrypting data due to high computational overhead and the need for generating randomness, which is computationally expensive, hindering secure data transmission to cloud providers.

Innovation Solution

A method that offloads the computation of randomness and computationally intensive encryption processes to a more powerful computation cluster, using probabilistic encryption schemes and pre-computing random bit strings, which are then combined in the device to reduce computational burden and ensure security.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If probabilistic encryption schemes are used to protect data confidentiality, then data security is improved, but computational overhead increases significantly

Engineering Contradiction:
Improvedata securityVSAvoidcomputational overhead
Core Design Contradiction:
ReliabilityVSUse of energy by moving object

Solution Approach 1:

The encryption process is divided into two segments: (1) pre-computation of random bit strings and encryption parameters in the cloud before data upload, and (2) local encryption operation using pre-computed materials. This segmentation allows resource-intensive operations to be performed in the cloud while minimizing local computational burden.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

Random bit strings and encryption parameters are pre-computed in the cloud before the actual encryption process. These pre-computed materials are then used during local encryption, eliminating the need for resource-constrained devices to perform complex randomness generation and parameter computation.

Inventive Principle:
Principle #10Preliminary action

2Reliability

If encryption is performed locally on low-end devices, then data confidentiality is maintained, but computational resources are insufficient

Engineering Contradiction:
Improvedata confidentialityVSAvoidcomputational power
Core Design Contradiction:
ReliabilityVSPower

Solution Approach 1:

Pre-computed random bit strings and parameters act as intermediaries between the cloud and local devices. The cloud generates these intermediary materials that enable local encryption without requiring full cryptographic computation capability at the device level.

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

All computationally intensive encryption setup operations are performed in advance in the cloud, delivering ready-to-use encryption materials to resource-constrained devices. This allows devices with limited power to perform encryption using only simple local operations.

Inventive Principle:
Principle #10Preliminary action

3Reliability

If randomness is generated locally for encryption, then encryption security is improved, but computational cost increases

Engineering Contradiction:
Improveencryption securityVSAvoidcomputational efficiency
Core Design Contradiction:
ReliabilityVSProductivity

Solution Approach 1:

The computationally expensive randomness generation process is extracted from the resource-constrained device and relocated to the cloud. The device receives pre-generated random bit strings, maintaining cryptographic security while eliminating local computational burden.

Inventive Principle:
Principle #2Taking out (Extraction)

Data Source

PatentEP3455997B1Encryption for low-end devices through computation offloading
Publication Date: 2025.07.02 ABB (SCHWEIZ) AG
  • EP3455997B1 patent drawingFigure 1
  • EP3455997B1 patent drawing
  • EP3455997B1 patent drawing

AI summary

The invention relates to a method computing a probabilistic encryption scheme for encrypting a data item in an electronic device comprising the steps of: computing a plurality of random bit strings in a computation cluster; sending the computed plurality of random strings to the electronic device; generating a random string (rE) for using in the encryption scheme in the electronic device using a subset of the plurality of the random strings computed in the computation cluster and encrypting the data item using the random string computed in the electronic device. The present invention also relates to a corresponding system and corresponding computer program product comprising one or more computer readable media having computer executable instructions for performing the steps of the method.