Homomorphic Encryption Key Management via Isolated Execution Environment
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current encryption systems face challenges in balancing security and processing speed, with first-generation systems being insecure, second-generation systems having difficulty in key management, and third-generation systems requiring high capacity and being slow for decryption.
Innovation Solution
An electronic device employing homomorphic encryption with an isolated execution environment to generate and manage keys, performing encryption and computation on data without decrypting it, using a public key to accelerate processing and store encrypted data efficiently.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If homomorphic encryption is used to perform computation on encrypted data, then data security is improved and data leakage is prevented, but processing speed deteriorates
Solution Approach 1:
The system segments encryption operations into two types: standard encryption for data storage/transmission and homomorphic encryption for computation on encrypted data. This segmentation allows the system to use the more efficient standard encryption for operations where possible, while reserving homomorphic encryption only for cases where computation on encrypted data is required, thus balancing security and performance
Solution Approach 2:
The system dynamically changes encryption parameters based on operational requirements. When computation on encrypted data is needed, it switches to homomorphic encryption with appropriate parameters; when only storage or transmission is needed, it uses standard encryption parameters. This parameter adaptation optimizes the balance between security and processing speed
2Reliability
If asymmetric key encryption is used to provide high security, then security level is improved, but processing speed deteriorates
Solution Approach 1:
The system segments key usage into asymmetric keys for secure key exchange and setup, and symmetric keys for actual data encryption and processing. This segmentation allows the system to leverage the security of asymmetric encryption while achieving the speed of symmetric encryption for bulk operations
Solution Approach 2:
The system performs preliminary key setup using asymmetric encryption to establish secure communication channels and homomorphic encryption parameters before actual data processing. This preliminary action ensures high security for key management while allowing faster processing during the actual data operations
3Productivity
If symmetric key encryption is used to achieve fast processing speed, then processing speed is improved, but key management difficulty increases
Solution Approach 1:
The system introduces an intermediary key management module that automatically handles symmetric key generation, distribution, and rotation. This intermediary abstracts the complexity of key management from the main processing system, enabling fast symmetric encryption operations while centralizing and simplifying key management tasks
Data Source
AI summary
An electronic device includes a memory storing data from an external source, an application processing unit (APU) transmitting a secret key and public key generation command, an isolated execution environment (IEE) generating a secret key in response to the secret key generation command, generating a public key based on the secret key in response to the public key generation command, and storing the secret key, and a non-volatile memory performing write and read operations depending on a request of the APU. When the data are stored in the memory, the APU transmits a public key request to the IEE and in response the IEE transfers the public key to the APU through a mailbox protocol. The APU generates a ciphertext by performing homomorphic encryption on the data based on an encryption key in the public key, and classifies and stores the public key and the ciphertext in the non-volatile memory.