Homomorphic Encryption Decryption Device for Secure Standard Hardware

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing cryptographic methods face limitations in providing secure computing environments, especially when implemented on standard components, as they are cost-ineffective and resource-intensive, particularly in protecting against side-channel attacks and ensuring the secrecy of cryptographic processes.

Innovation Solution

A device utilizing homomorphic encryption functions to encrypt and decrypt data on standard components, allowing computations to be performed on unsecured systems without revealing intermediate results, leveraging a secure decryption device for final decryption using a private key, thus ensuring security without the need for specialized hardware.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Device complexity

If standard components are used for cryptographic processing, then device complexity and cost are reduced, but security against side-channel attacks deteriorates

Engineering Contradiction:
Improvedevice complexityVSAvoidsecurity
Core Design Contradiction:
Device complexityVSReliability

Solution Approach 1:

The patent introduces homomorphic encryption as an intermediary layer that enables secure computation on unsecured hardware. The encryption scheme acts as a mediator between the unsecured standard components and the security requirements, allowing cryptographic operations to be performed on encrypted data without exposing sensitive information to the hardware.

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The patent transforms the cryptographic approach by changing the parameter of data representation from plaintext to homomorphically encrypted ciphertext. This parameter change allows standard components to process data securely because the data remains encrypted during processing, eliminating the need for protected environments while maintaining security.

Inventive Principle:
Principle #35Parameter changes

2Reliability

If homomorphic encryption is used to enable secure computation on unsecured systems, then security is improved, but computational performance deteriorates

Engineering Contradiction:
ImprovesecurityVSAvoidcomputational performance
Core Design Contradiction:
ReliabilityVSProductivity

Solution Approach 1:

The patent segments the computational workload into two parts: homomorphic encryption/decryption operations that require security, and intermediate computational steps that can be performed on encrypted data using standard components. This segmentation allows the system to leverage both the security of homomorphic encryption and the performance of standard hardware for non-critical operations.

Inventive Principle:
Principle #1Segmentation

3Reliability

If security tokens are used to provide protected environment, then security is improved, but memory size and computing capacity are limited

Engineering Contradiction:
ImprovesecurityVSAvoidmemory size
Core Design Contradiction:
ReliabilityVSQuantity of substance

Solution Approach 1:

The patent uses homomorphic encryption to create a virtual copy of a secure environment that runs on unsecured hardware. Instead of physically copying security token hardware, the encryption scheme creates a mathematical abstraction that replicates the security properties of a protected environment, allowing full-capacity standard components to be used without physical security constraints.

Inventive Principle:
Principle #26Copying

Data Source

PatentEP2742643B1Device and method for decrypting data
Publication Date: 2018.03.07 SIEMENS AG
  • EP2742643B1 patent drawingFigure 1~2
  • EP2742643B1 patent drawingFigure 3~4
  • EP2742643B1 patent drawingFigure 5

AI summary

The invention relates to a device (1) for decrypting data, said device having a number of means (3-5) secured by at least one security device (2). The secured means (3-5) comprise receiving means (3) for receiving calculation data (B) encrypted using a homomorphic encryption function (f) and a decrypting means (4) for decrypting the encrypted calculation data (B) by carrying out the inverse (I) of the homomorphic encryption function (f) on the encrypted calculation data using a private key (k1) assigned to the homomorphic encryption function (f). In this manner, a secured computing environment with a high degree of security is implemented in an inexpensive manner from available standard components. The invention further relates to a method and to a computer program product for decrypting data.