Triggered Data Snippets for Secure Sharing Without Key Exchange
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing data sharing techniques, such as Fully Homomorphic Encryption (FHE), are ineffective for secure data exchange between multiple organizations as they require sharing of encryption keys, compromising data privacy and security.
Innovation Solution
A system and method for exchanging data between data processing systems using distinct symmetric keys, employing a data exchanging protocol that allows data snippets to be shared without applying the symmetric keys, and utilizing a dynamic knowledge graph and ML models to generate queries in a predefined encoded format.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If Fully Homomorphic Encryption (FHE) is used for data sharing, then data privacy is protected during computation, but key exchange between multiple organizations is required which compromises security
Solution Approach 1:
The patent introduces a trusted third party (TTP) as an intermediary that generates and distributes secret shares to multiple organizations. This TTP mediates the key distribution process, allowing organizations to participate in secure multi-party computation without directly exchanging keys with each other. The intermediary resolves the contradiction by centralizing the trust model, eliminating the need for complex peer-to-peer key exchange while maintaining data privacy.
Solution Approach 2:
The patent segments the encryption key into multiple secret shares distributed to different organizations. Instead of requiring a single shared key between all parties, each organization receives a portion of the key material that is useless without the other shares. This segmentation allows secure collaboration among multiple organizations without direct key exchange, resolving the contradiction between data privacy and key exchange complexity.
2Reliability
If data is encrypted while in transit and at rest, then data security is improved, but data must be decrypted for computation which creates security vulnerabilities
Solution Approach 1:
The patent changes the cryptographic parameter state by using homomorphic encryption properties that allow computation on encrypted data. Instead of transitioning data from encrypted to decrypted state for computation, the system performs mathematical operations directly on the ciphertext. This parameter change maintains data security throughout the computation process while enabling useful operations, resolving the contradiction between security and ease of computation.
Solution Approach 2:
The patent replaces the traditional mechanical approach of decrypt-then-compute with a cryptographic substitution that enables compute-then-encrypt. By using homomorphic encryption schemes, the system substitutes the decryption step with homomorphic operations that produce encrypted results directly, eliminating security vulnerabilities associated with plaintext exposure while maintaining computational functionality.
3Productivity
If data sharing is increased to optimize business requirements, then data utility is improved, but maintaining data privacy becomes more difficult
Solution Approach 1:
The patent creates a universal secure computation framework that can handle multiple data sharing scenarios simultaneously. The multi-party computation system provides a single platform that enables various types of collaborative computations (aggregation, filtering, machine learning) across different organizations with different privacy requirements. This universality allows increased data utility through diverse applications while maintaining a consistent privacy protection mechanism, resolving the contradiction between data sharing volume and privacy maintenance.
Data Source
AI summary
The disclosure relates to system and method for exchanging data between data processing systems. The method includes receiving, from a second data processing system by a first data processing system, a data trigger associated with an event within the second data processing system. The first data processing system employs first symmetric keys for data communication and the second data processing system employs second symmetric keys for data communication. The first symmetric keys are distinct from the second symmetric keys. The data trigger is received without application of the second symmetric keys. The method further includes transmitting by the first data processing system to the second data processing system, a data snippet. The data snippet is representative of a data superset within the first data processing system corresponding to the data trigger. The data snippet is transmitted without application of the first symmetric keys.