Computing device comprising a table network

Patent metadata

Field	Value
Publication number	US-10180824-B2
Application number	US-201314443409-A
Country	US
Kind code	B2
Filing date	Dec 17, 2013
Priority date	Dec 21, 2012
Publication date	Jan 15, 2019
Grant date	Jan 15, 2019

Abstract

A computing device is provided configured to compute a data function on a function-input value comprising an electronic storage storing a table network configured for the data function and an electronic processor coupled to the storage and configured to compute the data function by applying the table network, wherein the device is configured to obtain the function-input value as an encoded input value, the encoded input value combines the function-input value together with a state-input value encrypted together into a single value, the table network is configured to take as input the encoded input value and produce as output an encoded output value, the encoded output value combines a function-output value together with a state-output value encrypted data function together into a single value, wherein the function-output value equals the result of applying the data function to the function-input value, and the state-output value equals the result of applying a state function to the state-input value.

First claim

The invention claimed is:

1. A computing device configured to run a computer program compiled by a compiler stored on a non-transitory computer readable medium, the compiler being configured for parsing the computer program to identify multiple operators, including a data function (f) and a state function (g), and for producing a table network configured for the data function and the state function, said computer program compiled by the compiler being configured to execute the operators by look-up table execution of the table network, wherein
the table network is configured to take, as input, an encoded input value, combining a function input value encrypted together with a state input value, and produce, as output, an encoded output value, the encoded output value combining a function-output value encrypted together with a state-output value, wherein the function-output value equals the result of applying the data function to the function-input value, and the state-output value equals the result of applying the state function to the state-input value, wherein the computing device comprises:
an electronic storage storing the table network produced by the compiler, configured for a data function (f) and a state function (g); and
an electronic processor coupled to the storage and configured to compute the data function and the state function by applying the table network, wherein
the computing device is configured to obtain the function-input value as an encoded input value, the encoded input value combines the function-input value encrypted together with a state-input value, wherein
the table network is configured to take, as input, the encoded input value and produce, as output, an encoded output value, the encoded output value combining a function-output value encrypted together with a state-output value, wherein the function-output value equals the result of applying the data function (f) to the function-input value and the state-output value equals the result of applying a state function (g) to the state-input value, and wherein the table network comprises:
a state extractor table configured such that state extractor table applied to the encoded input value produces the state-input value;
a state function table configured such that the state function table applied to the state-input value produces the state-output value; and
a re-encoding table configured for receiving, as input, the encoded input value and the state-output value and producing, as output, a recoded input value, the recoded input value combining the function-input value together with the state-output value encrypted together into a single value.

2. The computing device as claimed in claim 1 , wherein the computing device is configured to use the state or data function of the table network on the function-input value depending on a current encoding of the encoded input value.

3. The computing device as claimed in claim 2 , wherein
the encoded input value combines the function-input value and the state-input value encrypted together into a first single value according to a first encoding (E), wherein
the table network is configured to obtain the function-input value and the state-input value as a further encoded input value, the further encoded input value combining the function-input value together with the state-input value encrypted together into a second single value according to a second encoding ({tilde over (E)}), and wherein
the table network is configured to take, as input, the further encoded input value and produce, as output, a further encoded output value, the further encoded output value combining a function-output value together with a state-output value encrypted together into a further single value, wherein the function-output value equals the result of applying the state function (g) to the function-input value and the state-output value equals the result of applying the data function (f) to the state-input value.

4. The computing device as claimed in claim 3 , wherein
the first encoding is defined by a first encoding function E(x,y), wherein x denotes a function-input and y denotes a state-input, and the second encoding is defined by a second encoding function defined by {tilde over (E)}(x,y)=E(y,x).

5. The computing device as claimed in claim 3 , wherein the computing device is configured to pre-process and post-process inputs and output of the table network with the function composition ({tilde over (E)}E −1 ) of the second encoding ({tilde over (E)}) and the inverse of the first encoding (E).

6. The computing device as claimed in claim 1 , wherein the table network comprises a single table taking, as input, the encoded input value and producing, as output, the encoded output value.

7. The computing device as claimed in claim 1 , wherein the table network comprises a data function table configured for receiving, as input, the recoded input value and producing, as output, the encoded output value.

8. The computing device as claimed in claim 1 , wherein the table network comprises:
a reduced state function table configured for receiving the state-input value and producing, as output, an intermediate state value equal to the result of a reduced state function applied to state-input value, the range of the reduced state function being larger than a single value and smaller than the range of the state function, the encoded input value being recoded in dependence upon the intermediate state value.

9. The computing device as claimed in claim 8 , wherein the table network comprises:
a first re-encoding table configured for receiving, as input, the encoded input value and the intermediate state value, and producing, as output, a recoded input value, the recoded input value combining the function-input value together with the intermediate state value encrypted together into a first single value;
a data function table configured for receiving, as input, the recoded input value, and for producing, as output, a recoded output value, the recoded output value combining the function-output value together with the intermediate state value encrypted together into a second single value; and
a second re-encoding table configured for receiving, as input, the recoded output value and the state-output value, and producing, as output, the encoded output value.

10. The computing device as claimed in claim 8 , wherein the table network comprises:
a first re-encoding table configured for receiving, as input, the encoded input value and the intermediate state value, and producing, as output, a recoded input value, the recoded input value being the function-input re-encoded, the re-encoding being selected in dependence upon the intermediate state value;
a data function table configured for receiving, as input, the recoded input value and reduced state value, and producing, as output, the function-output value in an encoded form; and
a second re-encoding table configured for receiving, as input, the function-output value in an encoded form and the state-output value, and producing, as output, the encoded output value.

11. The computing device as claimed in claim 1 , wherein the table network comprises:
a first re-encoding table configured for receiving, as input, the encoded input value and the state-output value, and producing, as output, a recoded input value, the recoded input value being the function-input re-encoded, the re-encoding being selected in dependence upon the state-output value.

12. The computing device as claimed in claim 1 , wherein the table network is configured for function-input values having at least 4 bits.

13. The computing device as claimed in claim 1 , wher

Assignees

• Koninklijke Philips Nv

Inventors

• Tolhuizen Ludovicus Marinus Gerardus Maria
• Gorissen Paulus Mathias Hubertus Mechtildis Antonius
• Deng Mina
• Bruekers Alphons Antonius Maria Lambertus

Classifications

• H04L2209/16

  Obfuscation or hiding, e.g. involving white box · CPC title

• H04L9/0618

  Block ciphers, i.e. encrypting groups of characters of a plain text message using fixed encryption transformation · CPC title

• H04L9/002 Primary

  Countermeasures against attacks on cryptographic mechanisms (network architectures or network communication protocols for protection against malicious traffic H04L63/1441) · CPC title

• G06F8/41 Primary

  Compilation · CPC title

• H04L63/0428

  wherein the data content is protected, e.g. by encrypting or encapsulating the payload · CPC title