Secure Server Module for Confidential Cloud Computation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Cloud computing poses security challenges when sensitive data, such as financial or patient records, need to be processed by remote servers, as existing technologies fail to ensure confidentiality and privacy of the data during computations.
Innovation Solution
A secure processing approach using a server module that implements a circuit with concealed inputs and outputs, leveraging techniques like garbled circuits and fully homomorphic encryption to maintain data secrecy without revealing actual inputs to any participant module or the server, thereby delegating processing tasks and reducing the burden on participant modules.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Power
If cloud computing is used to outsource computational tasks to remote servers, then computational burden on the first agent is reduced and processing capabilities are improved, but sensitive data confidentiality and privacy are compromised
Solution Approach 1:
The circuit is divided into garbled components where each gate is represented by encrypted truth tables. The input data is segmented into concealed forms that cannot be reverse-engineered. This segmentation allows the server to process individual encrypted components without accessing the underlying sensitive information, resolving the contradiction between processing capability and data confidentiality.
Solution Approach 2:
Garbled circuits serve as an intermediary mechanism between the first agent's sensitive data and the second agent's processing capabilities. The concealed inputs and circuit structure act as a mediator that enables computation while preventing direct exposure of confidential information, allowing powerful server processing without compromising data privacy.
2Loss of information
If multi-party computation is implemented to maintain data secrecy, then data confidentiality is improved, but processing burden on participant modules increases
Solution Approach 1:
The computationally intensive garbling operations are extracted from the participant modules and performed once during circuit preparation. The resulting garbled circuit and concealed inputs can then be processed by the server without requiring participants to repeatedly perform complex cryptographic operations, reducing their ongoing processing burden while maintaining data secrecy.
Solution Approach 2:
The circuit garbling and input concealment operations are performed in advance before the actual computation. This preliminary action prepares all necessary encrypted components ahead of time, so that the server can perform straightforward evaluation of the pre-prepared garbled circuit without requiring participants to engage in complex real-time cryptographic processing, thereby reducing their processing burden.
Data Source
AI summary
A server module evaluates a circuit based on concealed inputs provided by respective participant modules, to provide a concealed output. By virtue of this approach, no party to the transaction (including the sever module) discovers any other party's non-concealed inputs. In a first implementation, the server module evaluates a garbled Boolean circuit. This implementation also uses a three-way oblivious transfer technique to provide a concealed input from one of the participant modules to the serer module. In a second implementation, the server module evaluates an arithmetic circuit based on ciphertexts that have been produced using a fully homomorphic encryption technique. This implementation modifies multiplication operations that are performed in the evaluation of the arithmetic circuit by a modifier factor; this removes bounds placed on the number of the multiplication operations that can be performed.