Shared-Key Homomorphic Encryption for Multi-Edge Data Collaboration

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing data security methods for edge nodes in industrial cloud environments fail to ensure both confidentiality and interoperability of data during collaborative calculations between multiple edge nodes, as different encryption keys prevent homomorphic calculations across nodes.

Innovation Solution

A data security sharing method involving a shared key management mechanism, where edge nodes apply for and receive unique IDs, exchange IDs within collaborative groups, and use a centralized authority to generate and distribute shared keys for encryption and decryption, enabling homomorphic analysis and calculation across edge nodes.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If each edge node encrypts data with its own key using homomorphic encryption, then data confidentiality between edge node and cloud platform is ensured, but homomorphic calculation cannot be performed on data from multiple edge nodes due to different keys

Engineering Contradiction:
Improvedata confidentialityVSAvoidinteroperability of data between edge nodes
Core Design Contradiction:
ReliabilityVSAdaptability or versatility

Solution Approach 1:

The patent introduces a cloud platform as an intermediary that performs key translation. The cloud platform receives ciphertexts encrypted with different edge node keys, translates them into a unified key space, and enables homomorphic operations. This mediator resolves the key incompatibility issue while maintaining the original encryption security properties.

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The patent changes the encryption parameter (key) dynamically based on the operation type. For single-node operations, the original edge node key is used. For multi-node collaborative operations, the system switches to a unified key generated by the cloud platform, enabling cross-node homomorphic calculations while preserving confidentiality.

Inventive Principle:
Principle #35Parameter changes

2Adaptability or versatility

If a unified shared key is used for homomorphic calculation across multiple edge nodes, then interoperability is achieved, but data confidentiality between individual edge nodes and cloud platform is compromised

Engineering Contradiction:
Improveinteroperability of data between edge nodesVSAvoiddata confidentiality
Core Design Contradiction:
Adaptability or versatilityVSReliability

Solution Approach 1:

The patent segments the encryption keys into two distinct types: edge node-specific keys for confidential communication with the cloud platform, and a unified shared key for collaborative homomorphic operations. This segmentation allows each key to serve its specific purpose without compromising the other function.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The system dynamically selects which key to use based on the operation context. When performing confidential data upload or single-node operations, the edge node-specific key is used. When performing multi-node collaborative homomorphic calculations, the system switches to the unified shared key, providing adaptive key management.

Inventive Principle:
Principle #15Dynamics

3Reliability

If edge nodes upload encrypted data to cloud platform for storage and processing, then data security is maintained, but the cloud platform cannot perform calculations on ciphertext without end-to-end keys

Engineering Contradiction:
Improvedata securityVSAvoidcalculating service capability on ciphertext
Core Design Contradiction:
ReliabilityVSEase of operation

Solution Approach 1:

The cloud platform is designed with multi-functionality: it can both store encrypted data securely and perform homomorphic calculations on that data. By integrating key translation capabilities and homomorphic computation resources, the platform serves multiple functions without requiring data decryption, maintaining security while enabling processing.

Inventive Principle:
Principle #6Universality (Multi-functionality)

Data Source

PatentUS11640158B2Data security sharing method in multi-edge node collaboration mode under industrial cloud environment
Publication Date: 2023.05.02 CHONGQING UNIV OF POSTS & TELECOMM
  • US11640158B2 patent drawing
  • US11640158B2 patent drawing
  • US11640158B2 patent drawing

AI summary

Provided is a data security sharing method for multiple edge nodes to operate in a collaboration mode under an industrial cloud environment. The method includes: firstly, edge nodes that need collaborative computing separately applying for a shared key to an authority center; secondly, the authority center generating a shared key and issuing the key to each of the edge nodes applying for participation in the collaborative computing; again, the edge nodes combining industrial characteristics to generate an interference factor set, and adding different interference factors for different types of data; then, the data of the edge nodes is implemented with improved homomorphic encryption and is uploaded to an industrial cloud platform; and finally, the industrial cloud platform performing homomorphic analysis and computing on the data uploaded by each of the edge nodes, and issuing the data back to each of the edge nodes.