IP Library › Granted Patent US 10,567,354
Granted Patent B2
US 10,567,354 · App. 15/650,901 · Granted Feb 18, 2020

Enhanced communication security

Inventor: Hart Montgomery (Redwood City, CA)
Assignee: FUJITSU LIMITED
H04L63/0442H04L9/0825
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 10,567,354
App. No.
15/650,901
Granted
Feb 18, 2020
Kind
B2
Abstract

A system may include a communication device configured to communicate over a network, one or more processors, and one or more non-transitory computer-readable media containing instructions that, when executed by the one or more processors, cause the system to perform one or more operations. The operations may include performing a cryptographic operation on one or more packets to facilitate secure communication between the system and a computing device over the network, the cryptographic operation including probabilistic rounding. The operations may also include communicating, via the communication device, with the computing device over the network using the one or more packets.

Claims (58)

1. A system comprising:

a communication device configured to communicate over a network;

one or more processors; and

one or more non-transitory computer-readable media containing instructions that, when executed by the one or more processors, cause the system to perform one or more operations, the operations comprising:

performing a cryptographic operation on one or more packets to facilitate secure communication between the system and a computing device over the network, the cryptographic operation including probabilistic rounding, the probabilistic rounding including fake rounding with probabilistic boundary elimination; and

transmitting, via the communication device, to the computing device over the network, the one or more packets.

2. The system of claim 1 , wherein the cryptographic operation includes:

generating a first public key component to transmit to the computing device, at least one input to the first public key component probabilistically rounded and based on first secret information;

transmitting the first public key component from the system to the computing device;

receiving a second public key component at the system from the computing device, at least one input to the second public key component probabilistically rounded; and

deriving a shared key based on the second public key component and the first secret information.

3. The system of claim 1 , wherein the cryptographic operation includes:

receiving a public key from the computing device;

encrypting the one or more packets using the public key by probabilistically rounding one or more inputs to the encrypted one or more packets of data; and

transmitting the one or more encrypted packets to the computing device.

4. The system of claim 1 , wherein the probabilistic rounding includes rounding with probabilistic boundary elimination.

5. The system of claim 1 , wherein the fake rounding with probabilistic boundary elimination includes:

determining whether an entry associated with the cryptographic operation is within a threshold amount of a rounding boundary; and

in response to the entry being within the threshold amount of the rounding boundary introducing additional variability to the entry.

6. A method comprising:

performing a cryptographic operation on one or more data packets to facilitate secure communication between a first computing device and a second computing device over a network, the cryptographic operation including probabilistic rounding, the probabilistic rounding including fake rounding with probabilistic boundary elimination; and

transmitting, via a communication device of the first computing device, to the second computing device over the network, the one or more data packets.

7. The method of claim 6 , wherein the cryptographic operation includes:

generating a first public key component to transmit to the second computing device, at least one input to the first public key component probabilistically rounded and based on first secret information;

transmitting the first public key component from the first computing device to the second computing device;

receiving a second public key component at the first computing device from the second computing device, at least one input to the second public key component probabilistically rounded; and

deriving a shared key based on the second public key component and the first secret information.

8. The method of claim 7 , further comprising:

receiving, by the first computing device, a request for the second computing device to access restricted content, the request including the shared key; and

granting the second computing device access to the restricted content based on the request.

9. The method of claim 7 , further comprising lifting at least one rounded element of the second public key component.

10. The method of claim 7 , further comprising receiving at least one cross-rounding bit from the second computing device, wherein deriving the shared key is further based on the at least one cross-rounding bit.

11. The method of claim 6 , wherein the cryptographic operation includes:

receiving a public key from the second computing device;

encrypting the one or more data packets using the public key by probabilistically rounding one or more inputs to the encrypted one or more data packets; and

transmitting the one or more encrypted data packets to the second computing device.

12. The method of claim 11 , wherein encrypting the one or more data packets comprises:

performing a probabilistic rounding on each element of a first matrix associated with the public key to generate first data;

performing the probabilistic rounding on each element of a second matrix associated with the public key;

adding a message of the packet to the probabilistically rounded second matrix to generate second data; and

outputting a combination of the first data and the second data as the encrypted packet.

13. The method of claim 6 , wherein the probabilistic rounding includes rounding with probabilistic boundary elimination.

14. The method of claim 6 , wherein the fake rounding with probabilistic boundary elimination includes:

determining whether an entry associated with the cryptographic operation is within a threshold amount of a rounding boundary; and

in response to the entry being within the threshold amount of the rounding boundary, introducing additional variability to the entry.

15. The method of claim 14 , wherein the fake rounding with probabilistic boundary elimination further includes, in response to the entry being outside of the threshold amount of the rounding boundary, rounding the entry.

16. A non-transitory computer-readable media including instructions that, in response to being executed by one or more processors, perform operations, the operations comprising:

performing a cryptographic operation on one or more data packets to facilitate secure communication between a first computing device and a second computing device over a network, the cryptographic operation including probabilistic rounding, the probabilistic rounding including fake rounding with probabilistic boundary elimination; and

transmitting, via a communication device of the first computing device, to the second computing device over the network, the one or more data packets.

17. The computer-readable media of claim 16 , wherein the cryptographic operation includes:

generating a first public key component to transmit to the second computing device, at least one input to the first public key component probabilistically rounded and based on first secret information;

transmitting the first public key component from the first computing device to the second computing device;

receiving a second public key component at the first computing device from the second computing device, at least one input to the second public key component probabilistically rounded; and

deriving a shared key based on the second public key component and the first secret information.

18. The computer-readable media of claim 16 , wherein the cryptographic operation includes:

receiving a public key from the second computing device;

encrypting the one or more data packets using the public key by probabilistically rounding one or more inputs to the encrypted one or more data packets; and

transmitting the one or more encrypted data packets to the second computing device.

Assignments (1)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Jul 28, 2017
From: MONTGOMERY, HART
To: FUJITSU LIMITED
Reel/Frame 043122/0676 →
Continuity (1)
Related Publication 20190020634A1 · Jan 17, 2019