Encryption for low-end devices through computation offloading

Patent metadata

Field	Value
Publication number	US-11075748-B2
Application number	US-201816189108-A
Country	US
Kind code	B2
Filing date	Nov 13, 2018
Priority date	May 13, 2016
Publication date	Jul 27, 2021
Grant date	Jul 27, 2021

Abstract

The application relates to a method for computing a probabilistic encryption scheme for encrypting a data item in an electronic device including: computing a plurality of random bit strings in a computation cluster; sending the computed plurality of random strings to the electronic device; generating a random string (r E ) for using in the encryption scheme in the electronic device using a subset of the plurality of the random strings computed in the computation cluster and encrypting the data item using the random string computed in the electronic device. The present application also relates to a corresponding system and corresponding computer program product including one or more computer readable media having computer executable instructions for performing the steps of the method.

First claim

The invention claimed is:

1. A method for computing a probabilistic encryption scheme for encrypting a data item in an electronic device comprising the steps of: a) computing a plurality of random bit strings in a computation cluster; b) sending the computed plurality of random strings to the electronic device; c) generating a random string rE for using in the encryption scheme in the electronic device using a subset of the plurality of the random strings computed in the computation cluster; and d) encrypting the data item using the random string computed in the electronic device, wherein generating the random string rE comprises recombining of the subset of the plurality of the random strings computed in the computation cluster, preferably using a recombination function c, wherein the plurality of random bit strings is processed with a randomness preparation function fin the computation cluster before sending to the electronic device, and wherein the generation of the random string for using in the encryption scheme in the electronic device is performed using the following function: rE=cf(r1),.f.rm),r), with rE being the random string for using in the encryption scheme, c being the recombination function, ri . . . rm being the plurality of random strings computed in the computation cluster and r being a random bit string generated in the electronic device, preferably a random bit string of length q-log 2(m) with m being the number of random strings sent from the computation cluster and q being a predefined parameter.

2. The method according to claim 1 , further comprising the step of storing the plurality of random strings in a storage of the computation cluster.

3. The method according to claim 1 , wherein the electronic device requests the plurality of random bit strings from the computation cluster.

4. The method according to claim 1 , wherein the encryption scheme is a homomorphic encryption scheme, preferably an additively homomorphic encryption scheme, preferably an additively homomorphic encryption scheme.

5. The method according to claim 1 , wherein the encryption scheme is an encryption scheme defined as follows: with d being the data item, the pair (g,n) being the key, R being the random string for using in the encryption scheme, g is a generator and n is the size of the plain text space.

6. A system for computing a probabilistic encryption scheme for encrypting a data item in an electronic device comprising: a computation cluster configured to compute a plurality of random bit strings and comprising a sending unit configured to send the computed plurality of random strings to the electronic device; the electronic device being configured to generate a random string for using in the encryption scheme using a subset of the plurality of the random strings computed in the computation cluster and the electronic device being further configured to encrypt the data item using the random string that it has computed, wherein the computation cluster is further configured to process the plurality of random bit strings with a function f before sending the plurality of random bit strings to the electronic device, and wherein the electronic device is further configured to generate the random string for using in the encryption scheme using the following function: with rE being the random string for using in the encryption scheme, ri . . . rm being the plurality of random strings computed in the computation cluster and r being a random bit string generated in the electronic device, preferably a random bit string of length q-log 2(m) with m being the number of random strings sent from the computation cluster and q being a predefined parameter.

7. The system according to claim 6 , wherein the computation cluster further comprises a storage configured to store the plurality of random strings.

8. A computer readable media for computing a probabilistic encryption scheme for encrypting a data item in an electronic device comprising: computer executable instructions effective to: compute a plurality of random bit strings in a computation cluster; send the computed plurality of random strings to the electronic device; generate a random string for using in the encryption scheme in the electronic device using a subset of the plurality of the random strings computed in the computation cluster; and encrypt the data item using the random string computed in the electronic device; wherein the computer executable instructions are effective to: process the plurality of random bit strings with a function f before sending the plurality of random bit strings to the electronic device, and generate the random string for using in the encryption scheme using the following function: rE=c(f(r1), . . . , f(rmr), with rE being the random string for using in the encryption scheme, ri . . . rm being the plurality of random strings computed in the computation cluster and r being a random bit string generated in the electronic device, preferably a random bit string of length q-log 2(m) with m being the number of random strings sent from the computation cluster and q being a predefined parameter.

9. The method according to claim 1 , wherein the plurality of random bit strings is processed with a randomness preparation function fin the computation cluster before sending to the electronic device.

10. The method according to claim 1 , further comprising the step of storing the plurality of random strings in a storage of the computation cluster.

11. The method according to claim 1 , further comprising the step of storing the plurality of random strings in a storage of the computation cluster.

12. The method according to claim 2 , wherein the electronic device requests the plurality of random bit strings from the computation cluster.

13. The method according to claim 1 , wherein the electronic device requests the plurality of random bit strings from the computation cluster.

14. The system according to claim 6 , wherein the computation cluster further comprises a storage configured to store the plurality of random strings.

15. The system according to claim 6 , wherein the computation cluster further comprises a storage configured to store the plurality of random strings.

Assignees

• Abb Schweiz Ag

Inventors

• Locher Thomas
• Schneider Johannes
• Harvan Matus
• Obermeier Sebastian
• Pignolet Yvonne-Anne

Classifications

• H04L9/30 Primary

  Public key, i.e. encryption algorithm being computationally infeasible to invert or user's encryption keys not requiring secrecy · CPC title

• H04L2209/76

  Proxy, i.e. using intermediary entity to perform cryptographic operations · CPC title

• H04L2209/08

  Randomization, e.g. dummy operations or using noise · CPC title

• H04L9/0656 Primary

  Pseudorandom key sequence combined element-for-element with data sequence, e.g. one-time-pad [OTP] or Vernam's cipher · CPC title

• H04L9/008

  involving homomorphic encryption · CPC title