Homomorphic Encryption for Secure Cloud Data Processing
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional cloud services lack secure data processing capabilities, as they often require decryption and re-encryption of data, which is inefficient and insecure, especially for sensitive information like personal or corporate data that needs to be processed in the cloud without exposing the encryption keys.
Innovation Solution
The implementation of fully homomorphic encryption allows for encrypted data to be processed within the cloud without decryption, using a system where encrypted data is transformed into a form that enables operations on encrypted elements to produce results identical to operations on unencrypted data, utilizing techniques such as polynomial transformations and Galois fields to maintain security and functionality.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If data is encrypted and stored in the cloud, then data security is improved, but data processing capability deteriorates because the cloud cannot process encrypted data without decryption
Solution Approach 1:
The patent transforms the encryption scheme from conventional encryption to homomorphic encryption, changing the mathematical parameters and structure of the encryption system to enable processing of encrypted data while maintaining security
Solution Approach 2:
The patent introduces homomorphic encryption as an intermediary mechanism that allows the cloud server to operate on encrypted data without decrypting it, acting as a mediator between security requirements and processing needs
2Productivity
If data is decrypted for processing in the cloud, then data processing capability is improved, but data security deteriorates because the encryption key must be shared with the cloud
Solution Approach 1:
The patent changes the encryption parameters to use homomorphic properties, allowing the cloud to process data in encrypted form without requiring the decryption key, thus maintaining security while enabling processing
Solution Approach 2:
The patent extracts the decryption capability from the cloud server and keeps it solely with the client, allowing the cloud to process encrypted data without having access to the decryption key
3Reliability
If data is sent back to the client for decryption and re-encryption after each operation, then data security is maintained, but processing efficiency deteriorates
Solution Approach 1:
The patent enables continuous processing of encrypted data in the cloud without interrupting the data to send it back to the client for decryption and re-encryption, maintaining the encrypted state throughout the entire processing chain
4Ease of operation
If conventional encryption is used with key storage in the cloud, then ease of operation is improved, but data security deteriorates because the key is vulnerable to theft
Solution Approach 1:
The patent extracts the encryption key from the cloud environment entirely and keeps it exclusively on the client side, eliminating the security vulnerability of cloud-stored keys while maintaining encryption management functionality
Data Source
AI summary
A method for protection of cloud computing includes homomorphic encryption of data. Partially or fully homomorphic encryption allows for data within the cloud to be processed without decryption. A partially or fully homomorphic encryption is provided. The proposed scheme can be used with both an algebraic and analytical approaches. A cloud service is implemented on a server. A client encrypts data using fully homomorphic encryption and sends it to the server. The cloud server performs computations without decryption of the data and returns the encrypted calculation result to the client. The client decrypts the result, and the result coincides with the result of the same calculation performed on the initial plaintext data.