Processor Stealth Mode for Secure Encrypted Code Execution

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

In cloud computing environments, there is a concern about data security as cloud service providers can access and potentially hack encrypted data during processing, compromising user trust.

Innovation Solution

A processor operating in a first mode can switch to a second 'stealth' mode, disabling external connections, decrypting encrypted code, and executing it on decrypted data without external access, ensuring secure operations and encrypted results are returned to the user.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Adaptability or versatility

If encrypted data is loaded to the cloud and operated on in the cloud, then cloud computing functionality is provided, but the cloud service provider can see the processed data in clear text which compromises security

Engineering Contradiction:

Improvecloud computing functionalityVSAvoiddata security

Core Design Contradiction:

Adaptability or versatilityVSReliability

Solution Approach 1:

The processor is divided into two distinct operating modes: a first mode for executing clear text instructions and a second mode for executing encrypted code. This segmentation allows the system to maintain both cloud computing functionality and data security by isolating encrypted operations in a dedicated secure mode where the provider cannot access clear text data.

Inventive Principle:

Principle #1Segmentation

2Productivity

If the cloud provider has access to encrypted data for processing, then processing operations can be performed, but trust is required in the cloud provider which creates a security vulnerability

Engineering Contradiction:

Improveprocessing capabilityVSAvoidtrust requirement vulnerability

Core Design Contradiction:

ProductivityVSObject-affected harmful factors

Solution Approach 1:

The system changes the operational parameter of the processor by switching between two distinct modes. In the second mode, the processor executes encrypted code directly without converting to clear text, fundamentally changing how processing occurs and eliminating the need for trust in the provider while maintaining full processing capability.

Inventive Principle:

Principle #35Parameter changes

3Ease of operation

If encrypted code is decrypted for execution, then code can be run on the processor, but the decrypted code becomes accessible to potential hackers

Engineering Contradiction:

Improvecode execution capabilityVSAvoiddata exposure risk

Core Design Contradiction:

Ease of operationVSObject-generated harmful factors

Solution Approach 1:

The processor dynamically switches between operating modes based on the code being executed. When encrypted code needs to be run, the system transitions to the second mode where the code remains encrypted during execution. This dynamic approach allows code execution capability while preventing data exposure, as the code never exists in a permanently decrypted state accessible to hackers.

Inventive Principle:

Principle #15Dynamics

Data Source

PatentUS11120140B2Secure operations on encrypted data

Publication Date: 2021.09.14 INTERNATIONAL BUSINESS MACHINE CORPORATION

AI summary

Secure operations are performed on encrypted code. A processor in a first operating mode obtains encrypted code. The processor switches from the first operating mode to a second operating mode, and decrypts the encrypted code to obtain decrypted code. The decrypted code is executed, based on the processor being in the second operating mode, to provide a result. The result is encrypted, and the encrypted result is sent to a user, based on the processor switching back to the first operating mode.