Homomorphic Encryption for Private Local Computation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Clients are hesitant to transmit private data over networks for remote computation services due to concerns about data visibility and security, leading to a need for a solution that enables local computation while maintaining data privacy from the remote service provider.
Innovation Solution
Employing homomorphic encryption to encrypt input data and generate signatures, allowing a remote service provider to authorize computation services locally without accessing the private data, using a homomorphic encryption public key and private key pair, and a defined function to verify authorization.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If clients transmit private data to remote service providers for computation services, then computation services can be provided remotely, but data privacy and security are compromised
Solution Approach 1:
Homomorphic encryption acts as an intermediary mechanism that allows the remote service provider to process encrypted data without being able to view or access the plaintext. The encryption scheme enables computations on ciphertext while preserving data privacy, effectively mediating between the need for remote computation and data security requirements
Solution Approach 2:
The patent transforms the data from plaintext to ciphertext form through homomorphic encryption, changing the state parameter of the data. This transformation allows the data to maintain its computational utility while becoming invisible to the remote service provider, thus resolving the contradiction between remote access and data privacy
2Object-affected harmful factors
If clients encrypt data before transmission to maintain privacy, then data security is improved, but computation service authorization and verification become more complex
Solution Approach 1:
The remote service provider performs preliminary actions by generating homomorphic signatures and authorization tokens before the client executes computations. These pre-computed cryptographic artifacts enable automated verification of computation authorization without requiring complex real-time interaction or decryption, thus reducing the complexity burden on the client side
Solution Approach 2:
The patent replaces traditional mechanical authorization verification mechanisms (which would require decrypting and checking data) with cryptographic substitution. Homomorphic signatures and zero-knowledge proofs enable verification of computation authorization purely through cryptographic operations on encrypted data, eliminating the need for complex decryption and inspection processes
3Object-affected harmful factors
If homomorphic encryption is used to encrypt input data, then data privacy is maintained, but processing efficiency may be reduced
Solution Approach 1:
The computation process is segmented into distinct phases: local preprocessing of data, remote execution of homomorphic operations on encrypted data, and local post-processing of results. This segmentation allows efficiency-optimized operations to be performed locally while only the necessary encrypted computations are performed remotely, thereby mitigating the overall efficiency impact
Solution Approach 2:
The patent applies partial homomorphic encryption, where only specific portions of the data or specific computation operations are performed in encrypted form, rather than encrypting all data and all operations. This selective approach minimizes the performance overhead while still providing adequate privacy protection for the critical portions of the computation
Data Source
AI summary
Techniques are provided for providing a local computation service on client device authorized by a remote service provider while keeping local data private from the remote service provider. In one example, a computer-implemented method comprises transmitting, by a device operatively coupled to a processor, a homomorphic encryption public key and homomorphically encrypted input data to a service provider. The computer-implemented method also comprises receiving, by the device from the service provider, a homomorphically encrypted signature generated based on the homomorphic encryption public key, the homomorphically encrypted input data, and a homomorphic encryption equivalent defined function. The computer-implemented method also comprises in response to a determination, based on a defined function corresponding to the homomorphic encryption equivalent defined function, that the homomorphically encrypted signature and input data corresponding to the homomorphically encrypted input data are valid for a computation service, performing, by the device, the computation service on the input data.


