Methods providing transmission and/or searching of encrypted data and related devices

Patent metadata

Field	Value
Publication number	US-11689358-B2
Application number	US-201716772863-A
Country	US
Kind code	B2
Filing date	Dec 29, 2017
Priority date	Dec 29, 2017
Publication date	Jun 27, 2023
Grant date	Jun 27, 2023

Abstract

Methods may be provided to transmit encrypted data from a communication device to a remote storage system. A data value and information related to the data value may be provided, where the information related to the data value includes an identifier associated with the communication device and a time-value associated with the data value. A combination of the time-value and the identifier may be encrypted using a public key to provide a first encrypted value. The data value may be encrypted using the public key to provide a second encrypted value, and a hidden datum package may be generated including the time-value, the first encrypted value, and the second encrypted value. The hidden datum package including the time-value, the first encrypted value, and the second encrypted value may be transmitted to the remote storage system.

First claim

The invention claimed is:

1. A method of transmitting encrypted data from a communication device to a remote storage system, the method comprising:
providing a data value and information related to the data value, wherein the information related to the data value includes an identifier associated with the communication device and a time-value associated with the data value;
encrypting a combination of the time-value and the identifier using a public key to provide a first encrypted value;
encrypting the data value using the public key to provide a second encrypted value;
generating a hidden datum package including the time-value, the first encrypted value, and the second encrypted value; and
transmitting the hidden datum package including the time-value, the first encrypted value, and the second encrypted value to the remote storage system.

2. The method of claim 1 , wherein the information related to the data value further includes a type value defining a type of the communication device and/or a type of the data value, wherein encrypting further comprises encrypting a combination of the time-value and the type using the public key to provide a third encrypted value, and wherein the hidden datum package further includes the third encrypted value.

3. The method of claim 1 , wherein encrypting the data value comprises encrypting a combination of the time-value and the data value to provide the second encrypted value.

4. The method of claim 1 , wherein the information related to the data value further includes a random nonce value associated with the data value, and wherein encrypting the data value comprises encrypting one of:
a combination of the random nonce value and the data value,
a combination of the time-value, the random nonce value, and the data value, and
a combination of the time-value, the random nonce value, the data value, and padding bits, to provide the second encrypted value.

5. A method of searching encrypted data on a remote storage system, wherein the encrypted data is associated with a remote communication device, the method comprising:
providing information to be used for the search, wherein the information to be used for the search includes a time-value and an identifier associated with the remote communication device;
encrypting a combination of the time-value and the identifier using a public key associated with the remote communication device to provide an encrypted search value;
generating a search package including the time-value and the encrypted search value;
transmitting the search package including the time-value without encryption and the encrypted search value to the remote storage system;
receiving a result package including a hidden datum package, wherein the hidden datum package includes the time-value, the encrypted search value, and an encrypted result value;
decrypting the encrypted result value using a secret key associated with the public key to provide a data value; and
extracting the data value.

6. The method of claim 5 , wherein the encrypted search value is a first encrypted search value, wherein the information related to the data value further includes a type value defining a type of the remote communication device and/or a type of the data value, wherein encrypting further comprises encrypting a combination of the time-value and the type using the public key to provide a second encrypted search value, wherein the search package includes the time-value without encryption, the first encrypted search value, and the second encrypted search value, and wherein the hidden datum package includes the time-value without encryption, the first encrypted search value, the second encrypted search value, and the encrypted result value.

7. The method of claim 5 , wherein decrypting comprises decrypting the encrypted result value to provide a combination of the time-value and the data value, and wherein extracting the data value comprises extracting the data value from the combination of the time-value and the data value.

8. The method of claim 5 , wherein the hidden datum package further includes a random nonce value, wherein decrypting comprises decrypting the encrypted result value to provide one of:
a combination of the random nonce value and the data value, and wherein extracting the data value comprises extracting the data value from the combination of the random nonce value and the data value,
a combination of the time-value, the random nonce value, and the data value, and wherein extracting the data value comprises extracting the data value from the combination of the time-value, the random nonce value, and the data value, and
a combination of the time-value, the random nonce value, the data value, and padding bits, and wherein extracting the data value comprises extracting the data value from the combination of the time-value, the random nonce value, the data value, and the padding bits.

9. The method of claim 5 , wherein the search package includes the time-value without encryption, wherein the hidden datum package includes the time-value without encryption, and wherein extracting comprises extracting the data value using the time-value.

10. The method of claim 5 , wherein providing the information to be used for the search comprises providing the information to be used for the search based on user input accepted through a user interface of the communication device.

11. A communication device comprising:
a communication interface configured to provide communication over a network with a remote storage system; and
a processor coupled with the communication interface, wherein the processor is configured to,
provide a data value and information related to the data value, wherein the information related to the data value includes an identifier associated with the communication device and a time-value associated with the data value,
encrypt a combination of the time-value and the identifier associated with the communication device using a public key to provide a first encrypted value,
encrypt the data value using the public key to provide a second encrypted value,
generate a hidden datum package including the time-value, the first encrypted value, and the second encrypted value, and
transmit the hidden datum package including the time-value, the first encrypted value, and the second encrypted value through the communication interface to the remote storage system.

12. The communication device of claim 11 , wherein the information related to the data value further includes a type value defining a type of the communication device and/or a type of the data value, wherein encrypting further comprises encrypting a combination of the time-value and the type using the public key to provide a third encrypted value, and wherein the hidden datum package further includes the third encrypted value.

13. The communication device of claim 11 , wherein encrypting the data value comprises encrypting a combination of the time-value and the data value to provide the second encrypted value.

14. The communication device of claim 11 , wherein the information related to the data value further includes a random nonce value associated with the data value, and wherein encrypting the data value comprises encrypting one of:
a combination of the random nonce value and the data value,
a combination of the time-value, the random nonce value, and the data value, and a combination of the time-value, the random nonce value, the data value, and padding bits
to provide the second encrypted value.

15. A communication device comprising:
a communication interface configured to provide commu

Assignees

• Ericsson Telefon Ab L M

Inventors

• Arkko Jari
• Keränen Ari

Classifications

• H04L9/085

  Secret sharing or secret splitting, e.g. threshold schemes · CPC title

• H04L9/0822

  using key encryption key · CPC title

• H04L9/0825 Primary

  using asymmetric-key encryption or public key infrastructure [PKI], e.g. key signature or public key certificates · CPC title

• H04L9/3297

  involving time stamps, e.g. generation of time stamps · CPC title

• H04L9/008 Primary

  involving homomorphic encryption · CPC title