Managed secure computations on encrypted data
AssigneeMicrosoft Corporation
InventorsJacob J. Loftus, Michael Naehrig, Joppe Willem Bos, Kristin Estella Lauter
Life of this patent
Estimating the term…
Abstract
The subject disclosure is directed towards secure computations of encrypted data over a network. In response to user desired security settings with respect to the encrypted data, software/hardware library components automatically select parameter data for configuring a fully homomorphic encryption scheme to secure the encrypted data items while executing a set of computational operations. A client initiates the set of computational operations via the library components and if requested, receives secure computation results in return.
Claims20
In a computing environment, a method performed at least in part on at least one processor, comprising, managing secure computations on encrypted data, including, processing a data set comprising the encrypted data based upon a homomorphic encryption scheme, processing user input corresponding to a set of computational operations on the data set, automatically selecting parameters corresponding to the set of computational operations, and configuring execution of the set of computational operations on the encrypted data.
In a computing environment, a system, comprising, a network resource configured to provide at least one computing device with computational services for a data set, including, an encryption mechanism configured to generate a set of cryptographic keys from a truncated polynomial ring representing a leveled homomorphic encryption scheme, wherein the leveled homomorphic encryption scheme defines a single polynomial ring element for each data item in the data set, and to provide the at least one computing device with access to at least one homomorphic function configured to perform computations on the data set.
One or more computer-readable media having computer-executable instructions, which when executed perform steps, comprising:
- accessing a computation service over a network;
- establishing a security parameter with the computation service that configures a leveled fully homomorphic encryption scheme to provide secure computations of a data set;
- via a library associated with the computation service, encrypting data items in the data set according to the leveled fully homomorphic encryption scheme and computing an inherent noise estimate for each data item;
- and
- using at least one library component to select a computational operation for the computation service to perform.
Dependencies are inferred from the claim text.