Obfuscated 3-Bit Gate Modules for Secure Encrypted Computing
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing methods for processing large volumes of encrypted data on unsecured public resources face efficiency losses and risk of decryption key exposure, limiting the ability to leverage powerful computational resources effectively.
Innovation Solution
Implementing a two-stage encryption process using linear 3-bit gates and non-linear k-bit gates, where k≥3, to create obfuscated modules that operate on encrypted data without revealing the decryption key, allowing secure processing on unsecured devices.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If encrypted data is processed on unsecured public resources, then computational efficiency and processing power are improved, but data security and confidentiality are compromised
Solution Approach 1:
The patent introduces an intermediary encryption layer that mediates between the unsecured public computing resources and the confidential data. The data is encrypted using a specific cryptographic scheme before being sent to public cloud processors, and the encryption keys are managed separately. This intermediary mechanism allows the public resources to process the data efficiently while the encryption layer protects the confidentiality, resolving the contradiction between computational efficiency and data security.
2Reliability
If large volumes of encrypted data are returned to local secure processors, then data confidentiality is maintained, but processing efficiency and resource utilization are reduced
Solution Approach 1:
The patent segments the processing workflow into two distinct parts: encryption/decryption operations are performed locally on secure processors to maintain confidentiality, while the actual data processing computations are segmented and offloaded to unsecured public cloud resources. This segmentation allows each component to operate in its optimal environment - secure local processing for key-sensitive operations and efficient public processing for computational tasks - thereby resolving the contradiction between maintaining confidentiality and achieving processing efficiency.
3Power
If decryption keys are exposed to public processors, then processing capability is maximized, but encryption method and underlying data are revealed
Solution Approach 1:
The patent extracts the decryption keys and encryption methods from the public processing environment, keeping them exclusively in the secure local environment. Only the encrypted data is transmitted to public processors for computation. The public processors operate on ciphertext without access to decryption keys, thereby maximizing their processing capability while preventing any exposure of the encryption method or underlying data. This extraction principle effectively resolves the contradiction between processing power and information confidentiality.
Data Source
AI summary
Data is encrypted using only first and second stages of only 3-bit gates, that are linear, and non-linear, respectively. Each 3-bit gate for a function is conjugated by the first stage, i.e., straddled with the first stage and its inverse, to form a set of gates that are replaced using a finite set of substitution rules to form an ordered set of daughter gates. The daughter gates are conjugated by the second stage to form for each output bit of each layer of a daughter gate, a binary decision diagram (BDD). A module chip is formed by combining all BDDs for each daughter gate. The obfuscated module is configured by combining the module chips. The obfuscated module is sent to an unsecured device for execution thereon.