Secure Data Transformations via Obfuscated Representations
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing data processing systems lack secure methods to perform transformations on data values while preventing attackers from analyzing intermediate results, especially when they have access to the device's code and memory.
Innovation Solution
A system that applies a series of transformations using encrypted representations, employing obfuscation functions and look-up tables to hide the algorithmic steps and intermediate values, ensuring that only the input and output values are explicitly computed, with the obfuscated representation containing redundancy dependent on an input variable.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a sequence of transformations is applied to data values using encrypted representations, then security against attacks is improved, but device complexity increases
Solution Approach 1:
The transformation process is divided into multiple discrete transformation steps (first transformation, second transformation, third transformation, etc.), where each step operates on obfuscated representations rather than original data. This segmentation allows the system to maintain security through multiple layers while managing complexity by breaking down the overall transformation into manageable, modular components.
Solution Approach 2:
Obfuscated representations serve as intermediaries between the original data values and the final transformed output. These intermediate forms hide the actual data content during processing, preventing attackers from analyzing intermediate results while still allowing the transformation logic to function. The obfuscated representations act as mediators that preserve security without requiring the system to handle plaintext data at any point during the transformation sequence.
2Reliability
If obfuscation functions with redundancy are used to hide algorithmic steps, then security is improved, but computational complexity increases
Solution Approach 1:
The system changes the parameters of data representation by introducing obfuscated forms with controlled redundancy. Each transformation step operates on these parameter-changed representations, where the redundancy is deliberately introduced to mask the underlying algorithmic structure. This parameter transformation allows the system to achieve higher security through multiple transformation layers while managing computational complexity by working with fixed-structure obfuscated data throughout the process.
3Reliability
If intermediate results are not explicitly computed, then security against analysis is improved, but the transformation process becomes more complex
Solution Approach 1:
The system extracts and eliminates the explicit computation of intermediate results from the transformation process. Instead of computing and storing actual intermediate data values, the system operates entirely on obfuscated representations throughout the transformation sequence. This extraction of intermediate computation maintains security by preventing attackers from accessing meaningful intermediate states, while the process complexity is managed through consistent application of the obfuscation framework at each transformation step.
Data Source
Figure 1
Figure 2~3
AI summary
A system for performing a secure sequence of transformations of a data value, using encrypted representations of the data value is disclosed. The system comprises first transformation means 101 for applying a transformation to an input data value to obtain an obfuscated representation thereof, wherein the obfuscated representation contains a redundancy that depends on an input variable. The system comprises a sequence of second transformation means 102; 110 for applying a transformation to compute transformed obfuscated representations. The system further comprises fourth transformation means 103 for applying a transformation such that a last obfuscated transformed data is obtained. The system comprises fifth transformation means 104 for applying a transformation that depends on the last obfuscated transformed data and the input data.