Back to results
US 10,382,194 B1Granted
Homomorphic encryption based high integrity computing system
AssigneeRockwell Collins, Inc.
InventorsDavid A. Miller, Mark A. Kovalan, David C. Matthews
Life of this patent
Estimating the term…
Abstract
A homomorphic encryption based high integrity computing system including a processing system including a single-string computation channel configured to receive encrypted input data from at least one data source. The processing system includes at least one processor hosting at least one hosted function. The processor is configured to provide high integrity homomorphic encryption-based computations thereon. This enables isolated channel computations within a single physical computation channel. The at least one processor provides encrypted output data, wherein the encrypted output data is configured to enable computational integrity validation by a receiver.
Claims8
An avionics system, comprising:
- a) a plurality of receivers, at least one of the receivers comprising an avionics device;
- b) a plurality of transmitters, at least one of the transmitters comprising one or more sensors, each transmitter of the plurality of transmitters configured to:
- collect a first input data value and at least one additional input data value with the one or more sensors;
- generate multiple member values that form a n-tuple of each input data value, wherein n is greater than 2, and
- c) a plurality of homomorphic encryption based high integrity computing systems, each homomorphic encryption based high integrity computing system, comprising:
- a processing system configured to receive, from the plurality of transmitters, the multiple member values that form the n-tuple of each input data value, said processing system comprising one or more processors hosting at least one hosted function, said one or more processors configured to provide high integrity homomorphic encryption based isolated channel computations thereon repeating computations of the hosted function once for each of the respective multiple member values of each input data value,
- wherein said plurality of homomorphic encryption based high integrity computing systems, said plurality of said receivers, and said plurality of said transmitters are operatively interconnected to form the avionics system,
- wherein the processing system provides high integrity computation by validating computational integrity either at a transmitter of the processing system or a receiver of the plurality of receivers by isolated channel computations,
- wherein the n-tuple of the first input data value consists of n values of a single numeric value A, EK1A, EK2A, . . . , and EKn-1A, wherein A is a single numeric value A collected by a single sensor of the one or more sensors, wherein EK1A is an encrypted value of A using key K1, EK2A is an encrypted value of A using key K2, . . . , and EKn-1A is an encrypted value of A using key Kn−1, wherein keys K1, K2, . . . , and Kn−1 are encryption keys,
- wherein the n-tuple of the at least one additional input data value consists of n values of a single numeric value B, EK1B, EK2B, . . . , and EKn-1B, wherein B is a single numeric value collected by a different sensor of the one or more sensors, wherein EK1B is an encrypted value of B using the key K1, EK2B is an encrypted value of B using the key K2, . . . , and EKn-1B is an encrypted value of B using the key Kn−1,
- wherein the hosted function of the processing system is further configured to compute a value C by performing a homomorphic operation OP on the first input data value A and the at least one additional data value B, wherein computing C includes computing C=A OP B, wherein the hosted function of the processing system is further configured to compute encrypted values of C:
- EK1C=EK1A OP EK1B, EK2C=EK2A OP EK2B, . . . , and EKn-1C=EKn-1A OP EKn-1B, and
- wherein the hosted function of the processing system is further configured to verify that decrypting each of EK1C, EK2C, . . . , and EKn-1C using the keys K1, K2, . . . and Kn−1 respectively, yields a same value as the computed value C, wherein EK1C, EK2C, and EKn-1C are the encrypted values of C calculated using the homomorphic operation OP, and
- wherein, upon determining the decrypted values all represent the same computed value C, the one or more processors are configured to adjust one or more characteristics of the avionics system based upon the computed value C.
11 more elements
A homomorphic encryption based high integrity computing system, comprising:
- a receiver;
- a transmitter, the transmitter including one or more sensors, the transmitter configured to:
- collect a first input data value and at least one additional input data value;
- and
- generate multiple member values that form a n-tuple of each input data value, wherein n is greater than 2;
- and
- a processing system configured to receive, from the transmitter, the multiple member values that form the n-tuple of each input data value, said processing system comprising one or more processors hosting at least one hosted function, said one or more processors configured to provide high integrity homomorphic encryption based isolated channel computations thereon repeating computations of the hosted function once for each of the multiple member values of each input data value,
- wherein the processing system provides high integrity computation by validating computational integrity either at a transmitter of the processing system or the receiver by isolated channel computations,
- wherein the n-tuple of the first input data value consists of n values of a single numeric value A, EK1A, EK2A, . . . , and EKn-1A, wherein A is a single numeric value A collected by a single sensor of the one or more sensors, wherein EK1A is an encrypted value of A using key K1, EK2A is an encrypted value of A using key K2, . . . , and EKn-1A is an encrypted value of A using key Kn−1, wherein keys K1, K2, . . . , and Kn−1 are encryption keys,
- wherein the n-tuple of the at least one additional input data value consists of n values of a single numeric value B, EK1B, EK2B, . . . , and EKn−1B, wherein B is a single numeric value collected by a different sensor of the one or more sensors, wherein EK1B is an encrypted value of B using the key K1, EK2B is an encrypted value of B using the key K2, . . . , and EKn−1B is an encrypted value of B using the key Kn−1,
- wherein the hosted function of the processing system is further configured to compute a value C by performing a homomorphic operation OP on the first input data value A and the at least one additional data value B, wherein computing C includes computing C=A OP B, wherein the hosted function of the processing system is further configured to compute encrypted values of C:
- EK1C=EK1A OP EK1B, EK2C=EK2A OP EK2B, . . . , and EKn-1C=EKn-1A OP EKn-1B, and
- wherein the hosted function of the processing system is further configured to verify that decrypting each of EK1C, EK2C, . . . , and EKn-1C using the keys K1, K2, . . . and Kn−1 respectively, yields a same value as the computed value C, wherein EK1C, EK2C, and EKn-1C are the encrypted values of C calculated using the homomorphic operation OP, and
- wherein, upon determining the decrypted values all represent the same computed value C, the one or more processors are configured to adjust one or more characteristics of an avionics system based upon the computed value C.
11 more elements
Dependencies are inferred from the claim text.