Anti-collusion client-server method and system for homomorphically encrypted data
AssigneeCommissariat A L'energie Atomique Et Aux Energies Alternatives
InventorsRenaud SIRDEY, Aymen BOUDGUIGA, Martin ZUBER
Life of this patent
Estimating the term…
Loading patent…
AssigneeCommissariat A L'energie Atomique Et Aux Energies Alternatives
InventorsRenaud SIRDEY, Aymen BOUDGUIGA, Martin ZUBER
Estimating the term…
The present invention relates to a client-server system implementing a client, a compute server, and a service provider delegating, to the compute server, an operation to be performed in the homomorphic domain on confidential data from the client. The system can be protected from possible collusions of a first type between the compute server and the service provider by virtue of an HSMSP module with which the latter is provided. The HSMSP module contains the homomorphic cryptosystem of the service provider and is suitable for decrypting, on its behalf, the result of an operation performed by the compute server. The system can be protected from possible collusions of a second type between the compute server and the client by virtue of an HSMCL module with which the latter is provided. The HSMCL module contains the homomorphic cryptosystem of the client and is suitable for decrypting, of its behalf, the result of an operation performed by the compute server.
A client-server system comprising a client, a compute server and a service provider, said service provider delegating, to the compute server, an operation to be performed on confidential data from the client, the compute server being suitable for performing said operation on the confidential data, encrypted using the public key of a homomorphic cryptosystem, wherein the service provider, respectively the client, is provided with a hardware security module containing said homomorphic cryptosystem and suitable for decrypting the result of the operation using the private key of said homomorphic cryptosystem to transmit it to the service provider, respectively to the client.
Dependencies are inferred from the claim text.