Heterogeneous Processing Platform for Encrypted Database Cryptographic Offloading

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Conventional encrypted databases face performance limitations due to high computing overheads and time associated with cryptographic operations, which hinder efficient data processing.

Innovation Solution

A data processing method and system utilizing a heterogeneous processing platform with a general processing unit and a dedicated acceleration unit, where cryptographic operations are offloaded from the general processing unit to the dedicated acceleration unit, such as a GPU, to improve computational efficiency.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If cryptographic operations are performed on encrypted database using general processing unit, then data security is maintained, but processing speed and computational efficiency deteriorate due to high computing overheads

Engineering Contradiction:
Improvedata securityVSAvoidprocessing speed
Core Design Contradiction:
ReliabilityVSProductivity

Solution Approach 1:

The system segments the processing unit into a general processing unit (first computing unit) that handles data security and cryptographic operations, and a dedicated acceleration unit (second computing unit) that handles computational tasks. This segmentation allows cryptographic operations to be isolated on the general processing unit while computationally intensive tasks are offloaded to the acceleration unit, resolving the contradiction between maintaining security and improving processing speed.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The patent introduces a database management system as an intermediary that coordinates between the general processing unit and the dedicated acceleration unit. The DBMS manages the distribution of cryptographic operations and computational tasks, enabling the system to maintain security requirements while leveraging the acceleration unit for improved processing performance.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Reliability

If cryptographic operations are performed on encrypted database, then data protection is achieved, but computing time increases significantly

Engineering Contradiction:
Improvedata protectionVSAvoidcomputing time
Core Design Contradiction:
ReliabilityVSLoss of time

Solution Approach 1:

The patent extracts computationally intensive cryptographic operations from the general processing unit and relocates them to a dedicated acceleration unit. This extraction allows the general processing unit to focus on security-critical cryptographic functions while the acceleration unit handles time-consuming computational tasks, thereby reducing overall computing time without compromising data protection.

Inventive Principle:
Principle #2Taking out (Extraction)

Solution Approach 2:

The system dynamically assigns cryptographic operations between the general processing unit and the dedicated acceleration unit based on task requirements. The database management system dynamically determines which unit should execute specific cryptographic operations, enabling flexible resource allocation that optimizes both data protection and computing time efficiency.

Inventive Principle:
Principle #15Dynamics

Data Source

PatentUS20250167980A1Data processing methods and systems for encrypted database
Publication Date: 2025.05.22 ALIPAY (HANGZHOU) INFORMATION TECH CO LTD
  • US20250167980A1 patent drawing
  • US20250167980A1 patent drawing
  • US20250167980A1 patent drawing

AI summary

A data processing method for an encrypted database is performed by a heterogeneous processing platform including a first computing unit implemented by a general processing unit and a second computing unit implemented by a dedicated acceleration unit. The method includes: obtaining, by the first computing unit, a ciphertext parameter and a database instruction from a user end device, where the database instruction instructs to perform a target operation on the encrypted database; converting the database instruction into a computing instruction to be executed by the second computing unit, and transmitting the computing instruction to the second computing unit; performing, by the second computing unit according to the computing instruction, a cryptographic operation corresponding to the target operation on ciphertext data in the encrypted database and the ciphertext parameter, to obtain a ciphertext result; and transmitting, by the second computing unit, the ciphertext result to the first computing unit.