Homomorphic Encryption Offload for Lightweight Device Privacy
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Lightweight computing devices lack the processing power and memory capacity to perform homomorphic encryption (HE) operations, making them incapable of securing data during processing and vulnerable to data leaks or attacks.
Innovation Solution
Offload HE operations from lightweight devices to edge or cloud computing platforms using edge nodes that manage keys and perform cryptographic operations, ensuring data security by encrypting data before transmission and processing it remotely.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If homomorphic encryption operations are performed on lightweight devices, then data security during processing is improved, but device resource constraints are violated
Solution Approach 1:
The patent introduces a cloud-based homomorphic encryption service as an intermediary between the lightweight device and the data processing task. The lightweight device encrypts data using homomorphic encryption algorithms provided by the cloud service, then transmits the encrypted data to the cloud for processing. This mediator approach allows lightweight devices to achieve secure data processing without requiring substantial computational resources locally.
Solution Approach 2:
The patent extracts the computationally intensive homomorphic encryption operations from the lightweight device and relocates them to the cloud computing platform. By taking out these resource-demanding functions, the lightweight device can maintain its simplicity and limited resources while still benefiting from secure encrypted data processing through cloud-based services.
2Reliability
If homomorphic encryption algorithms are implemented on lightweight devices, then data privacy is improved, but device complexity increases
Solution Approach 1:
The cloud-based homomorphic encryption service acts as an intermediary that handles the complex algorithm implementation. The lightweight device only needs to perform simple data encryption and transmission operations, while the cloud service manages the sophisticated homomorphic encryption algorithms, key management, and data processing. This separation reduces device complexity while maintaining strong data privacy.
Solution Approach 2:
The patent extracts the complex homomorphic encryption algorithm implementation from the lightweight device and relocates it to the cloud platform. This extraction allows the device to remain simple and easy to implement while still achieving enhanced data privacy through the cloud-based cryptographic services.
3Reliability
If homomorphic encryption operations are performed on lightweight devices, then data security during processing is improved, but storage capacity requirements are violated
Solution Approach 1:
The cloud-based homomorphic encryption service serves as an intermediary that manages storage requirements. The lightweight device only stores small encrypted data and keys locally, while the cloud platform handles the storage of large ciphertext data and processing results. This mediator approach enables secure data processing without requiring lightweight devices to have substantial storage capacity.
Solution Approach 2:
The patent extracts the storage-intensive homomorphic encryption operations and ciphertext data management from the lightweight device to the cloud computing platform. By taking out these resource-demanding functions, the lightweight device can maintain its limited storage capacity while still achieving secure data processing through cloud-based services.
Data Source
AI summary
Disclosed are systems, methods, devices, and computer-readable media for offloading lattice-based cryptographic operations to hybrid cloud computing system. In one embodiment, a method is disclosed comprising receiving a first network request from a client device via a secure application programming interface (API), the request including unencrypted data; encrypting the unencrypted data using an algorithm that generates homomorphically encrypted data; issuing a second network request to a second API of a cloud platform, the second network request including the encrypted data; receiving a response from the cloud platform in response to the second network request; and transmitting, in response to the first network request, a result to the client device based on the response, the result obtained by decrypting an encrypted output returned by the cloud platform.