Orchestrated Entitled Execution of Encrypted Analytics
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing systems lack secure and orchestrated execution of analytics and their associated datasets, as they do not restrict access to owners and fail to provide timely, appropriate access, leading to unsecured execution and unauthorized data access.
Innovation Solution
Implementing mechanisms for orchestration and entitlement verification, which include encrypting analytics and datasets with owner keys, decrypting them for execution, and using directed acyclic graphs (DAGs) to verify vertex order and function, ensuring secure and entitled execution, and committing outcomes to a blockchain network.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If analytics and datasets are encrypted with owner keys for security, then data security and unauthorized access prevention are improved, but access timeliness and execution speed deteriorate
Solution Approach 1:
The system performs preliminary decryption of analytics and datasets before execution by verifying entitlement through DAG validation. By checking ownership credentials and decrypting data in advance of actual execution needs, the system ensures security requirements are met while minimizing delays during critical execution phases.
Solution Approach 2:
The patent introduces an intermediary entitlement verification mechanism that acts as a mediator between encrypted data and execution processes. This intermediary layer validates ownership credentials and manages decryption operations, separating security verification from execution timing concerns and resolving the contradiction between secure access and timely execution.
2Reliability
If entitlement verification and encryption mechanisms are implemented, then unauthorized access prevention is improved, but system complexity increases
Solution Approach 1:
The system implements self-service entitlement verification where the execution mechanism automatically validates ownership credentials and decrypts data without requiring external authorization intermediaries. Owners register their credentials once, and the system autonomously verifies and processes entitlement requests, reducing operational complexity while maintaining strong security.
Solution Approach 2:
The patent replaces complex manual entitlement verification processes with automated cryptographic validation using DAG-based ownership proofs. Instead of mechanical authentication workflows, the system uses mathematical cryptographic verification to establish entitlement, simplifying the verification mechanism while enhancing security.
3Reliability
If decryption operations are performed before execution, then data security is improved, but processing time and computational resources increase
Solution Approach 1:
The system performs partial decryption operations only on the portions of analytics and datasets that are actually needed for execution, rather than decrypting entire datasets in advance. This selective decryption approach maintains security for encrypted portions while minimizing unnecessary processing overhead and preserving execution efficiency.
Data Source
AI summary
A mechanism is provided to orchestrates entitled execution of a set of analytics. The mechanism retrieves an analytic entry from an immutable data record source and identifies an analytic associated with the analytic entry, and an associated dataset. The analytic and the dataset are encrypted using an owner's key. The mechanism decrypts the analytic using a decryption key and executes the analytic based on the decrypting.