Homomorphic Web Query Processing Without Server Decryption
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current encryption methods for web browsing do not provide end-to-end secure execution of user queries over web content without exposing unencrypted data, as they require decryption keys to process queries and responses.
Innovation Solution
Implementing homomorphic encryption techniques that allow encrypted queries to be evaluated over web content without decrypting them, using a client-server system where the client encrypts queries with a public key and the server processes them without the decryption key, generating an encrypted response that the client can decrypt to retrieve the unencrypted result.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If current encryption methods are used for web browsing, then data can be decrypted and processed, but unencrypted data is exposed to servers and attackers
Solution Approach 1:
The patent introduces homomorphic encryption as an intermediary mechanism that allows the server to process encrypted queries without ever decrypting them. The encrypted query acts as a mediator between the user's private data and the server's processing capabilities, enabling secure computation while preventing data exposure. The server operates on ciphertext only, and the decryption key never leaves the client device.
Solution Approach 2:
The patent transforms the encryption parameter from traditional symmetric or asymmetric encryption (which requires decryption) to homomorphic encryption (which enables computation on ciphertext). This parameter change in the encryption scheme allows the fundamental property of being able to perform operations on encrypted data without decryption, thus maintaining security while enabling processing.
2Ease of operation
If decryption keys are provided to servers for processing queries, then query execution is enabled, but security is compromised
Solution Approach 1:
The patent extracts the decryption key from the server environment and keeps it exclusively on the client device. This separation removes the security vulnerability of having keys on the server while maintaining the server's ability to process queries. The server processes only ciphertext, and the key extraction principle ensures the key never resides on the server.
Solution Approach 2:
Homomorphic encryption serves as an intermediary that eliminates the need for the server to have decryption keys. The encrypted query mediates the interaction between client and server, allowing the server to perform operations without accessing the plaintext or requiring decryption capabilities.
3Reliability
If queries are encrypted before sending to server, then security is improved, but the server cannot process the encrypted queries with current methods
Solution Approach 1:
The patent changes the cryptographic parameter from standard encryption schemes to homomorphic encryption schemes. This parameter change enables the fundamental capability of performing computations on ciphertext, making the server adaptable to processing encrypted queries while maintaining strong security properties.
Solution Approach 2:
The homomorphic encryption system provides universality by enabling the server to handle both encrypted and unencrypted workflows through the same infrastructure. The server can process homomorphically encrypted queries using the same hardware and software environment, making the system versatile without requiring separate decryption capabilities.
4Reliability
If homomorphic encryption is implemented, then secure query execution is achieved, but computational complexity increases
Solution Approach 1:
The homomorphic encryption scheme is self-service in that it automatically enables secure computation without requiring additional security infrastructure or manual intervention. The encryption scheme itself provides the security mechanism, and the server processes encrypted queries using standard computational operations without requiring specialized security hardware or additional protocol layers.
Data Source
AI summary
Systems and methods for end-to-end encryption of a web browsing process are described herein. A web query is encrypted at a client using a homomorphic encryption scheme. The encrypted query is sent to a server where the encrypted query is evaluated over web content to generate an encrypted response without decrypting the encrypted query and without decrypting the response. The encrypted response is sent to the client where it is decrypted to obtain the results of the query without revealing the query or results to the owner of the web content, an observer, or an attacker.