Homomorphic Encryption Storage Fragmentation Bandwidth
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing cloud compute devices equipped with Homomorphic Encryption (HE) processors face challenges in efficiently processing and storing large amounts of data due to high bus bandwidth requirements for data exchange with storage devices and memory.
Innovation Solution
The proposed solution involves an information storage device that divides and stores ciphertext fragments across multiple storage units, utilizing a distribution unit and temporary storage unit to manage the fragmentation and distribution process, thereby reducing the need for extensive bus bandwidth.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If homomorphic encryption processing is performed using HE processors with multiple compute engines, then processing efficiency is improved, but bus bandwidth consumption increases due to large data exchange requirements
Solution Approach 1:
The ciphertext is divided into multiple fragments and stored in different storage units. Each compute engine processes only its assigned fragment, reducing the amount of data that needs to be exchanged over the bus while maintaining parallel processing capabilities
Solution Approach 2:
The patent introduces a new dimension of data organization by distributing ciphertext fragments across multiple storage units rather than keeping them centralized. This spatial distribution reduces bus bandwidth requirements while enabling parallel compute engine operation
2Loss of energy
If ciphertext is divided into fragments and stored in multiple storage units, then bus bandwidth consumption is reduced, but system complexity increases due to distribution management requirements
Solution Approach 1:
Each storage unit is equipped with an encryption processing unit that can autonomously perform deformation processing on its stored ciphertext fragment using deformation commands from the distribution unit, eliminating the need for centralized data movement and reducing distribution management complexity
3Adaptability or versatility
If deformation processing is performed using a second key on ciphertext fragments, then processing flexibility is improved, but processing time increases due to additional cryptographic operations
Solution Approach 1:
The system pre-generates multiple deformation commands using the second key and stores them in the storage units. When processing is needed, these pre-computed deformation commands are directly applied to ciphertext fragments without requiring real-time cryptographic computation, thus maintaining flexibility while reducing processing time
Data Source
AI summary
According to one embodiment, a distribution unit generates a set of first ciphertext fragments based on a first identifier specifying a storage destination of the first ciphertext and a constitution information specifying a constitution of the first ciphertext, generates a deformation command using a second key used for deforming the first ciphertext for at least one fragment belonging to the set of the first ciphertext fragments, and allocates the deformation command to at least one of storage units. A temporary storage unit deforms the first ciphertext fragment by using the second key based on the deformation command, and stores a second ciphertext fragment as a result of the deformation in a non-volatile storage unit instead of the first ciphertext fragment.