Homomorphic Evaluation of Real-Valued Functions With Univariate Decomposition

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing homomorphic encryption methods are impractical for evaluating functions with real-valued inputs due to high computational complexity and resource requirements, particularly in bootstrapping operations, limiting their applicability to binary inputs and simple Boolean circuits.

Innovation Solution

Transform multivariate functions into networks of univariate functions represented as sums and compositions, optimizing calculations by reusing intermediate values and employing homomorphic encryption schemes, such as LWE and RLWE, to reduce complexity and computation time.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If homomorphic encryption schemes are used to evaluate functions on encrypted data, then data confidentiality is preserved, but computational complexity and time increase significantly

Engineering Contradiction:
Improvedata confidentialityVSAvoidcomputational complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent segments multivariate functions into networks of univariate functions, where each function is represented as a composition of simpler univariate functions. This decomposition allows the evaluation to be performed through a series of manageable steps rather than as a single complex operation, reducing the overall computational burden while preserving homomorphic encryption properties

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The patent employs pre-computation of lookup tables for univariate functions during an offline phase. These tables store pre-evaluated results that can be directly applied during online evaluation, eliminating the need to perform complex homomorphic operations during actual data processing. This preliminary action significantly reduces computational complexity and time during runtime while maintaining data confidentiality

Inventive Principle:
Principle #10Preliminary action

2Measurement precision

If bootstrapping operations are performed to reduce noise in ciphertexts, then calculation accuracy is maintained, but computation time and memory usage become impractical

Engineering Contradiction:
Improvecalculation accuracyVSAvoidcomputation time
Core Design Contradiction:
Measurement precisionVSLoss of time

Solution Approach 1:

The patent breaks down the bootstrapping process into segmented operations on univariate functions. Instead of performing a single complex bootstrapping operation on multivariate functions, the system performs multiple simpler bootstrapping steps on individual univariate functions, each requiring less computational resources and time

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The patent pre-computes and stores lookup tables containing results of bootstrapped univariate function evaluations. During actual evaluation, these pre-computed values are retrieved and applied directly, avoiding the need to perform time-consuming bootstrapping operations in real-time while maintaining calculation accuracy

Inventive Principle:
Principle #10Preliminary action

3Adaptability or versatility

If multivariate functions are evaluated directly on encrypted data, then functionality is preserved, but resource requirements become excessive

Engineering Contradiction:
ImprovefunctionalityVSAvoidresource requirements
Core Design Contradiction:
Adaptability or versatilityVSQuantity of substance

Solution Approach 1:

The patent transforms multivariate functions into networks of univariate functions, decomposing complex multivariate operations into compositions of simpler univariate functions. This segmentation reduces the computational resources required for each individual operation while preserving the overall functionality of the original multivariate function through mathematical composition

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The patent performs pre-computation of univariate function networks and stores them as lookup tables. During evaluation, these pre-computed structures are utilized to minimize real-time computational resources required, allowing the system to handle complex multivariate functions with reduced memory and processing requirements

Inventive Principle:
Principle #10Preliminary action

Data Source

PatentEP4150853B1Cryptographic method, systems and services for evaluating univariate or multivariate real-valued functions on encrypted data
Publication Date: 2025.12.03 ZAMA SAS
  • EP4150853B1 patent drawingFigure 1
  • EP4150853B1 patent drawingFigure 2
  • EP4150853B1 patent drawingFigure 3

AI summary

The invention relates to a cryptographic method and variants thereof based on homomorphic encryption enabling the assessment of true value functions on encrypted data, in order to enable homomorphic processing to be performed more widely and efficiently on encrypted data.