Homomorphic Encryption Cloud Processing
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Cloud computing systems face security vulnerabilities due to the risk of data breaches and key leakage during processing, as traditional encryption schemes require decryption and re-encryption, exposing data to attackers through the processor's data pipeline.
Innovation Solution
The HEROIC cloud computing system employs a homomorphic encryption scheme that allows for direct manipulation of encrypted data within the encrypted domain, eliminating the need for decryption and keeping both private and public encryption keys private, using a processor capable of Turing-complete computation with architectures like OISC, RISC, or CISC, and utilizing encryption schemes like Paillier for secure data processing.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional encryption schemes are used in cloud computing systems, then data confidentiality is protected during storage, but data is exposed to attackers during processing through decryption and re-encryption operations
Solution Approach 1:
The patent changes the fundamental parameter of encryption operation mode from decrypt-then-encrypt to operate-on-encrypted-data. By using homomorphic encryption properties, the system performs computations directly on ciphertexts, transforming the processing paradigm to eliminate the vulnerability window where data is exposed in plaintext form during processor operations.
Solution Approach 2:
The patent introduces homomorphic encryption as an intermediary mechanism that allows computations to be performed on encrypted data without decryption. This intermediary layer acts as a mediator between the need for data processing and the requirement for data confidentiality, enabling secure cloud computing by processing data in its encrypted state through specially designed homomorphic circuits.
2Ease of operation
If cryptographic keys are stored in cloud computing processors to enable processing, then data can be decrypted and processed, but the keys become vulnerable to sub-transistor level attacks such as Trojan viruses
Solution Approach 1:
The patent extracts the cryptographic keys from the cloud computing processor environment entirely. By using homomorphic encryption, the system eliminates the need to store or input keys into the processor, removing the vulnerable component (keys) from the system while preserving the essential function (secure data processing) through alternative mathematical operations on ciphertexts.
3Productivity
If data is decrypted for processing in cloud computing systems, then computation can be performed, but the decrypted data passes through the processor's data pipeline where it is vulnerable to eavesdropping
Solution Approach 1:
The patent changes the state parameter of data during processing from plaintext to encrypted form. By leveraging homomorphic encryption properties, the system maintains data in its encrypted state throughout the entire computation process, allowing productive computation while eliminating the vulnerability of plaintext data passing through the processor's data pipeline.
Data Source
AI summary
A homomorphically encrypted one instruction computation (“HEROIC”) computing system is described. The described HEROIC cloud computing system utilizes a homomorphic encryption scheme. The homomorphic encryption scheme allows for meaningful manipulation of encrypted data directly within the encrypted domain (i.e., without the need to first decrypt the data and then re-encrypt the data after processing). The HEROIC cloud computing system eliminates the need for the cloud computing processor to first decrypt data prior to processing thereby eliminating the need for the cryptographic keys to be provided to the provider of the cloud computing system.