Privacy Computing Data Encryption Without Key Transmission
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current methods for securely transferring privacy-sensitive data across domains are limited, particularly in single-machine intranet or network-free environments, as they require network connections for key transmission and risk key leakage during transmission or memory importation.
Innovation Solution
A method using trusted sealing technology to deploy a base key on a user host, generating a data key for encryption, and deriving it within a privacy computing environment, allowing for secure encryption and decryption without transmitting the encryption key, using standard encryption algorithms and exclusive OR operations.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If encrypted data is transmitted with decryption key sent over network, then data can be decrypted and used, but key leakage risk increases during transmission and memory importation
Solution Approach 1:
The patent extracts the decryption key from the data transmission process entirely. Instead of sending the key with encrypted data, the system uses homomorphic encryption to perform computations directly on encrypted data, eliminating the need for key transmission and importation, thus removing the key leakage vulnerability
Solution Approach 2:
The patent introduces homomorphic encryption as an intermediary mechanism that enables computation on encrypted data without decryption. This mediator allows the data user to process encrypted data and obtain encrypted results, which can then be decrypted locally without ever exposing the decryption key during transmission or memory operations
2Ease of operation
If network connection is used for key transmission, then data decryption is enabled, but deployment in single-machine intranet or network-free environment is limited
Solution Approach 1:
The patent performs preliminary encryption of data before transmission, using homomorphic encryption properties that allow future computations to be performed on the encrypted data itself. This preliminary action enables the data to be fully processed in encrypted form, eliminating the need for network-based key transmission during operation and enabling deployment in isolated environments
Solution Approach 2:
The encrypted data becomes self-sufficient for computation purposes. The data user can perform computations directly on the encrypted data without needing to contact the data provider or receive additional key material over the network, enabling autonomous operation in network-free environments
3Ease of manufacture
If standard encryption key is used instead of customized key generation, then practicality and compatibility improve, but key management complexity increases
Solution Approach 1:
The patent extracts the key management complexity from the standard encryption process by using homomorphic encryption keys that are generated once and then used for all subsequent computations on encrypted data. The homomorphic properties eliminate the need for complex key derivation, rotation, and management operations that typically accompany standard encryption schemes
Data Source
AI summary
A method for encrypting and decrypting data across domains based on privacy computing is provided. A data provider deploys a base key for a data user in advance, and when the data user needs to use the data at a later stage, the data provider generates a data token about a data key based on the base key, and then transmits encrypted data and the data token to the data user. The user obtains the data key based on its own base key in a privacy environment according to the data token, and uses the data key in the privacy environment to realize use of the encrypted data. A transmission process does not involve transmission of the key; therefore, even if a transmission channel is not secure, security of the data can still be ensured, and even if private data is used, the data itself cannot be obtained.