Method for processing data streams with multiple tenants

Method of secure processing of input data by a stream processing network having a first and a second processing unit, wherein the method comprises:

• a) transmitting first and second data streams over a communication channel, the first and second data streams being mixed together as input data transmitted over the same communication channel;
• b) receiving the input data from the same communication channel, wherein the input data includes the first data stream associated with a first owner and the second data stream associated with a second owner;
• c) distinguishing data packets of the first data stream from that of the second data stream;
• d) securely processing the first data stream with the first processing unit;
• and
• e) securely processing the second data stream with the second processing unit;
• wherein contents of the first data stream are not revealed to the second processing unit and contents of the second data stream are not revealed to the first processing unit;
• wherein the first data stream includes a confidential part, and wherein prior to the step a) the method comprises encrypting at least the confidential part of the first data stream;
• wherein the second data stream includes a confidential part, and wherein the method comprises encrypting at least the confidential part of the second data stream;
• wherein the encrypting and processing are carried out by homomorphic encryption.

Method of secure processing of input data by a stream processing network having a first and a second processing unit, wherein the method comprises:

• a) transmitting first and second data streams over a communication channel, the first and second data streams being mixed together as input data transmitted over the same communication channel;
• b) receiving the input data from the same communication channel, wherein the input data includes the first data stream associated with a first owner and the second data stream associated with a second owner;
• c) distinguishing data packets of the first data stream from that of the second data stream;
• d) securely processing the first data stream with the first processing unit;
• and
• e) securely processing the second data stream with the second processing unit;
• wherein contents of the first data stream are not revealed to the second processing unit and contents of the second data stream are not revealed to the first processing unit;
• further comprising decrypting the first data stream by the first processing unit using a first decryption key corresponding to a first encryption key used for encrypting the first data stream, and decrypting the second data stream by the second processing unit using a second decryption key corresponding to a second encryption key used for encrypting the second data stream;
• wherein the encrypting and processing are carried out by homomorphic encryption.

Method of secure processing of input data by a stream processing network having a first and a second processing unit, wherein the method comprises:

• a) transmitting first and second data streams over a communication channel, the first and second data streams being mixed together as input data transmitted over the same communication channel;
• b) receiving the input data from the same communication channel, wherein the input data includes the first data stream associated with a first owner and the second data stream associated with a second owner;
• c) distinguishing data packets of the first data stream from that of the second data stream;
• d) securely processing the first data stream with the first processing unit;
• and
• e) securely processing the second data stream with the second processing unit;
• wherein contents of the first data stream are not revealed to the second processing unit and contents of the second data stream are not revealed to the first processing unit;
• further comprising prior to step a):
• labeling the first data stream with a unique first owner ID by adding or appending the unique first owner ID as meta tags into headers of data packets of the first data stream, and labeling the second data stream with a unique second owner ID by adding or appending the unique second owner ID as meta tags into headers of data packets of the second data stream;
• wherein step c) distinguishes data packets of the first data stream from that of the second data stream using the meta tags and unique first and second owner IDs.