Homomorphic Encryption Key Switching Dimension Transformation

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing homomorphic encryption methods require significant resources and time for decryption and are vulnerable to leaks when temporary decryption occurs, necessitating a more efficient method for processing encrypted data without decryption.

Innovation Solution

An electronic device and key switching method that transform input encrypted messages with dimension N into encrypted messages with dimension N′, performing linear transformations while reducing the capacity of the switching key, using techniques like RLWE and MLWE key switching and rotate-sum operations to maintain encrypted state processing.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If homomorphic encryption is used to process encrypted data without decryption, then communication security is improved, but computational resources and time consumption increase significantly

Engineering Contradiction:
Improvecommunication securityVSAvoidcomputational efficiency
Core Design Contradiction:
ReliabilityVSProductivity

Solution Approach 1:

The patent transforms the encrypted message from dimension N to dimension N′ (where N < N′) to perform linear transformation more efficiently, then transforms it back to dimension N. This dimension transformation parameter change enables faster computation while maintaining security. The use of RLWE and MLWE key switching with optimized dimensions reduces computational overhead compared to traditional homomorphic encryption approaches.

Inventive Principle:
Principle #35Parameter changes

Solution Approach 2:

The patent introduces an intermediate dimension N′ as a mediator between the original dimension N and the transformation process. By transforming to a higher dimension N′ for the linear operation and then back to N, the system achieves efficient computation without exposing the plaintext, maintaining security while improving productivity.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Adaptability or versatility

If decryption is performed temporarily for calculation, then data processing flexibility is improved, but leakage risk increases

Engineering Contradiction:
Improvedata processing flexibilityVSAvoidleakage risk
Core Design Contradiction:
Adaptability or versatilityVSObject-affected harmful factors

Solution Approach 1:

The patent operates on encrypted messages directly without creating plaintext copies. By performing linear transformation on the encrypted message in dimension N′ and then transforming back to dimension N, the system maintains data flexibility while ensuring that no plaintext copy exists that could be leaked, thus eliminating the security risk associated with temporary decryption.

Inventive Principle:
Principle #26Copying

3Manufacturing precision

If switching key capacity is increased for linear transformation, then transformation accuracy is improved, but resource consumption increases

Engineering Contradiction:
Improvetransformation accuracyVSAvoidswitching key capacity
Core Design Contradiction:
Manufacturing precisionVSQuantity of substance

Solution Approach 1:

The patent optimizes the switching key capacity by using dimension transformation from N to N′ (where N < N′). This parameter change allows the system to achieve the required transformation accuracy with a reduced switching key capacity compared to performing the same linear transformation directly in dimension N, thus reducing resource consumption while maintaining accuracy.

Inventive Principle:
Principle #35Parameter changes

Data Source

PatentUS20250023715A1Electric device and key switching method thereof
Publication Date: 2025.01.16 CRYPTO LAB INC
  • US20250023715A1 patent drawing
  • US20250023715A1 patent drawing
  • US20250023715A1 patent drawing

AI summary

Disclosed is an electronic device. The electronic device includes: a memory in which an input encrypted message with dimension N is stored; and a processor configured to transform the input encrypted message with dimension N into an encrypted message with dimension N′, perform linear transformation on the encrypted message with dimension N′, and transform the encrypted message corresponding to a result value of the linear transformation into an output encrypted message with dimension N. The N is a value smaller than N′.