Proxy Computing System Secure Decryption Verification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing methods for decryption and computation face security concerns when sharing decryption keys and lack verification of computation validity, particularly in scenarios where one apparatus provides computing capability to another without leaking secrets or verifying the computation performed.
Innovation Solution
A system where a computing apparatus receives input information from a capability providing apparatus to perform computations using scrambled input elements, generating output information that allows the computing apparatus to verify the correctness of computations without directly receiving the decryption key, ensuring secure computation and verification.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If the second apparatus provides a decryption key to the first apparatus, then the first apparatus can decrypt the ciphertext, but the decryption key needs to be taken out from the second apparatus to the outside which poses security concerns
Solution Approach 1:
The patent introduces a proxy apparatus as an intermediary between the first apparatus (ciphertext holder) and the second apparatus (decryption key holder). The proxy apparatus receives the ciphertext, performs decryption using the decryption key without exposing it, and returns the plaintext. This mediator approach allows decryption capability to be provided while maintaining security by keeping the decryption key confined within the proxy apparatus.
2Ease of operation
If the first apparatus provides a ciphertext to the second apparatus and the second apparatus decrypts the ciphertext, then decryption can be performed, but the first apparatus cannot verify the validity of decryption performed by the second apparatus
Solution Approach 1:
The patent implements a feedback mechanism where the proxy apparatus (acting as the second apparatus) provides not only the decryption result but also verification information back to the first apparatus. The verification information allows the first apparatus to confirm that the decryption was performed correctly and that the result is valid, thus enabling verification accuracy while maintaining the service model.
3Productivity
If a capability providing apparatus provides computing capability to a computing apparatus, then computation can be performed, but secret information may be leaked
Solution Approach 1:
The proxy apparatus serves as a secure intermediary that holds the decryption key and performs computations on ciphertexts without exposing the key. The computing apparatus can utilize the decryption capability through the proxy without directly accessing secret information, thus maintaining productivity while preventing secret information leakage.
Solution Approach 2:
The patent extracts the decryption key from the capability providing apparatus and confines it within the proxy apparatus, while extracting only the necessary computation results and verification information to be provided back to the computing apparatus. This selective extraction approach enables computation capability provision while minimizing and controlling information exposure.
Data Source
AI summary
A computing apparatus outputs τ1 and τ2 corresponding to a ciphertext x, a capability providing apparatus uses τ1 to correctly compute f(τ1) with a probability greater than a certain probability and sets the result of the computation as z1, uses τ2 to correctly compute f(τ2) with a probability greater than a certain probability and sets the result of the computation as z2, the computing apparatus generates a computation result u=f(x)bx1 from z1, generates a computation result v=f(x)ax2 from z2, and outputs ub′va′ if the computation results u and v satisfy a particular relation, where G and H are groups, f(x) is a function for obtaining an element of the group G for x∈H, X1 and X2 are random variables having values in the group G, x1 is a realization of the random variable X1, and x2 is a realization of the random variable X2.