Method and computation entity for performing computation of a function over encrypted data

Patent metadata

Field	Value
Publication number	US-12335404-B2
Application number	US-202118020272-A
Country	US
Kind code	B2
Filing date	Feb 17, 2021
Priority date	Sep 9, 2020
Publication date	Jun 17, 2025
Grant date	Jun 17, 2025

Abstract

A method for performing computation of a function over encrypted data by a computation entity is provided. According to the method, the computation of a quadratic function is performed by the computation entity, the encrypted data are encrypted by a linearly homomorphic encryption scheme, and a homomorphic message authentication code is used for providing verifiable computation on encrypted data.

First claim

The invention claimed is:

1. A method for performing verifiable computation of a quadratic function over encrypted data by a computation entity, the method comprising:
generating the encrypted data or receiving the encrypted data from a data source, wherein the encrypted data is encrypted by a linearly homomorphic encryption scheme, and
performing the computation of the quadratic function over the encrypted data by the computation entity,
wherein a homomorphic message authentication code is used for providing the verifiable computation on the encrypted data,
wherein a computation over authentication tags that accompany the encrypted data is performed, so that the computation entity can output an encoding that includes a ciphertext encrypting a result of the computation and a tag, and
wherein an integrity of the result is verified by a final tag, and
wherein the tags are different from the homomorphic message authentication code.

2. The method according to claim 1 , wherein the homomorphic message authentication code is used to define a verifiable computation scheme.

3. The method according to claim 1 , wherein the linearly homomorphic encryption scheme is a linearly homomorphic EIGamal encryption scheme.

4. The method according to claim 1 , wherein the linearly homomorphic encryption scheme produces one or more encodings, a public evaluation key and/or a private verification key.

5. The method according to claim 4 , wherein a degree-2 function of the encrypted or encoded data is computed by the computation entity by homomorphic operations over the encryptions or encodings, thereby producing an output encoding.

6. The method according to claim 5 , wherein it is verified that the output encoding encodes the result of the function over the encrypted or encoded data and, if so, the output encoding is decoded.

7. The method according to claim 1 , wherein the method is used in data-mining and/or in machine learning.

8. The method according to claim 1 , wherein the data source provides and/or encrypts the data.

9. The method according to claim 8 , wherein the data source transmits and/or uploads the encrypted data to the computation entity.

10. The method according to claim 8 , wherein the data source is a metering device or a smart energy meter.

11. The method according to claim 1 , wherein the encrypted data are provided in the form of a ciphertext or ciphertexts.

12. The method according to claim 1 , wherein the computation entity is a server or cloud server.

13. A system for performing verifiable computation of a quadratic function over encrypted data, the system comprising:
one or more hardware processors configured to:
generate the encrypted data or receive the encrypted data from a data source, wherein the encrypted data is encrypted by a linearly homomorphic encryption scheme, and
perform the computation of the quadratic function, and
wherein a homomorphic message authentication code is used for providing the verifiable computation on the encrypted data,
wherein a computation over authentication tags that accompany the encrypted data is performed, so that the computation entity can output an encoding that includes a ciphertext encrypting a result of the computation and a tag,
wherein an integrity of the result is verified by a final tag, and
wherein the tags are different from the homomorphic message authentication code.

14. The method according to claim 6 , wherein the data source encrypts the encrypted data by the linearly homomorphic encryption scheme and a client performs the verification that the output encoding encodes the result of the function over the encrypted or encoded data.

Assignees

• NEC Laboratories Europe GmbH
• Nec Corp

Inventors

• Soriente Claudio
• Fiore Dario

Classifications

• H04L9/008 Primary

  involving homomorphic encryption · CPC title

• Y04S40/20

  Information technology specific aspects, e.g. CAD, simulation, modelling, system security · CPC title

• H04L9/3242 Primary

  involving keyed hash functions, e.g. message authentication codes [MACs], CBC-MAC or HMAC · CPC title