Homomorphic Symmetric Key Generation via Intermediary Mediation

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing homomorphic encryption systems face challenges in securely creating symmetric keys without sharing secrets between parties, particularly in ensuring distributed security and multi-factor protection against attackers.

Innovation Solution

A method involving symmetric homomorphic encryption and decryption, where a device performs homomorphic encryption of a secret and sends it for mathematical combination with another secret, allowing the generation of a symmetric cryptographic key without direct access to either secret, using a tamper-resistant security system to secure data communication.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If homomorphic encryption is used to allow computations on ciphertext, then secure computation without plaintext exposure is improved, but system complexity increases

Engineering Contradiction:
ImprovesecurityVSAvoidsystem complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent introduces a trusted third party (TTP) as an intermediary to generate and distribute symmetric keys to participating parties. This mediator approach allows the system to leverage homomorphic encryption's security benefits while avoiding the need for each party to independently manage complex homomorphic key pairs, thus reducing individual device complexity while maintaining overall system security.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Reliability

If symmetric keys are created without central authority using homomorphic encryption, then distributed security is improved, but key generation complexity increases

Engineering Contradiction:
Improvedistributed securityVSAvoidkey generation complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent segments the key generation process into distinct phases: (1) TTP generates initial symmetric keys, (2) TTP distributes these keys to parties using homomorphic encryption, and (3) parties independently derive their own symmetric keys using the distributed encrypted data and local secrets. This segmentation allows distributed security to be achieved while reducing key generation complexity for individual parties, as they only need to perform local secret management rather than full homomorphic key generation.

Inventive Principle:
Principle #1Segmentation

3Reliability

If multiple secrets are combined for multi-factor protection, then security against attackers is improved, but communication overhead increases

Engineering Contradiction:
Improvemulti-factor protectionVSAvoidcommunication overhead
Core Design Contradiction:
ReliabilityVSQuantity of substance

Solution Approach 1:

The patent combines multiple secrets (party secrets and TTP secrets) into a single symmetric key through the homomorphic encryption process. The TTP encrypts the symmetric key using homomorphic encryption, allowing parties to contribute their secrets to the key derivation process while receiving only the final encrypted symmetric key. This merging approach achieves multi-factor protection without requiring separate communication channels for each secret, thus reducing communication overhead.

Inventive Principle:
Principle #5Merging (Combining)

Data Source

PatentUS9973334B2Homomorphically-created symmetric key
Publication Date: 2018.05.15 CISCO TECHNOLOGY INC
  • US9973334B2 patent drawing
  • US9973334B2 patent drawing
  • US9973334B2 patent drawing

AI summary

One embodiment of the invention includes a method, including performing, a symmetric homomorphic encryption of a secret SA with a cryptographic key H as input yielding a homomorphic encryption result SA*, sending SA* for mathematical combination by at least one device with at least one secret SB yielding G*, the device A not having access to SB, the at least one device not having access to SA and not having access to H, receiving G*, performing a symmetric homomorphic decryption of data based on G* with H as input yielding a first decrypted output, determining a symmetric cryptographic key KA based on the first decrypted output for secure communication with a first device which is operationally connected to, or includes, a tamper resistant security system including SA and SB therein, securing data using KA yielding secured data, and sending the secured data to the first device.