IP Library › Granted Patent US 10,972,251
Granted Patent B2
US 10,972,251 · App. 15/876,043 · Granted Apr 6, 2021

Secure web browsing via homomorphic encryption

Inventor: Ryan Carr (Fulton, MD)
Assignee: Enveil, Inc.
H04L9/008G06F1/0307G06F7/552G06F7/723G06F7/728G06F9/30014H03M7/24H04L9/30H04L63/0428H04L63/0442H04L2209/30
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 10,972,251
App. No.
15/876,043
Filed
Jan 19, 2018
Granted
Apr 6, 2021
Kind
B2
Art Unit
2433
USPC
380/28
Abstract

Systems and methods for end-to-end encryption of a web browsing process are described herein. A web query is encrypted at a client using a homomorphic encryption scheme. The encrypted query is sent to a server where the encrypted query is evaluated over web content to generate an encrypted response without decrypting the encrypted query and without decrypting the response. The encrypted response is sent to the client where it is decrypted to obtain the results of the query without revealing the query or results to the owner of the web content, an observer, or an attacker.

Claims (52)

1. A method comprising:

receiving at a server an encrypted query from a client, the encrypted query being a homomorphic query matrix encrypted from a query using a homomorphic encryption scheme, the encrypted query received without a key for decrypting the encrypted query;

evaluating the encrypted query over web content D without decrypting the encrypted query to produce an encrypted response; and

sending the encrypted response from the server to the client for decryption at the client.

2. The method of claim 1 , further comprising:

receiving at the client an action via a web browser;

converting the action to the query at the client;

encrypting the query using the homomorphic encryption scheme at the client;

sending the encrypted query from the client to the server;

receiving at the client the encrypted response from the server;

decrypting the response to produce an unencrypted result at the client; and

using the unencrypted result at the web browser.

3. The method of claim 2 , wherein the web browser and the client communicate via a network.

4. The method of claim 2 , wherein the client and the web browser are co-located on a same computing device.

5. The method of claim 1 , wherein the query is a chain of series of operations to be performed over the web content D.

6. The method of claim 1 , further comprising receiving at the client an action from a web browser.

7. The method of claim 1 , further comprising:

receiving at the client an action from a web browser; and

converting the action to the query at the client.

8. The method of claim 1 , further comprising:

receiving at the client the encrypted response;

decrypting at the client the response to produce an unencrypted result; and

using the unencrypted result at a web browser.

9. The method of claim 1 , wherein the homomorphic encryption scheme is Paillier encryption.

10. The method of claim 1 , wherein the key includes a private encryption key.

11. A system comprising:

a browser configured to receive an action from a user;

a client configured to:

convert the action to a query;

encrypt the query using a homomorphic encryption scheme and an encryption key, the homomorphic encryption scheme encrypting the query as a homomorphic query matrix;

send the encrypted query to a server without the encryption key; and

decrypt an encrypted response using the homomorphic encryption scheme and the encryption key; and

the server configured to:

receive the encrypted query without the encryption key from the client via a network;

evaluate the encrypted query over web content D to generate the encrypted response without decrypting the encrypted query and without decrypting the encrypted response; and

send the encrypted response to the client.

12. The system of claim 11 , wherein the action is a chain of series of operations to be performed over the web content D.

13. The system of claim 11 , wherein the client and the browser are co-located such that client computations are computed on a same computing device on which the browser is located.

14. The system of claim 11 , wherein the encryption key is a private encryption key.

15. A non-transitory computer readable storage media having a program embodied thereon, the program being executable by a processor at a client to perform a method for secure queries of web content D, the method comprising:

converting an action to a query;

encrypting the query using a homomorphic encryption scheme and a public encryption key, the homomorphic encryption scheme encrypting the query as a homomorphic query matrix;

sending the encrypted query to one or more servers without a corresponding private encryption key;

receiving an encrypted response from the one or more servers, the encrypted response generated from an evaluation of the encrypted query over the web content D at the one or more servers, the evaluation having been performed without decrypting the encrypted query and without decrypting the encrypted response; and

decrypting the encrypted response to generate an unencrypted result of the action over the web content D.

16. The non-transitory computer readable storage media of claim 15 , wherein the action is a chain of series of operations to be performed over the web content D.

17. The non-transitory computer readable storage media of claim 16 , wherein the operations include a document search and a classification of the unencrypted result of the document search.

18. The non-transitory computer readable storage media of claim 15 , wherein the method further comprises:

receiving the action from a web browser; and

providing the unencrypted result to the web browser for use by the web browser.

19. The non-transitory computer readable storage media of claim 18 , wherein the web browser and the client are co-located such that client computations are computed on a same computing device on which the web browser is located.

20. The non-transitory computer readable storage media of claim 15 , wherein the homomorphic encryption scheme is Paillier encryption.

Assignments (1)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded May 21, 2018
From: CARR, RYAN
To: ENVEIL, INC.
Reel/Frame 045865/0496 →
Continuity (5)
Provisional Application 62448916 · Jan 20, 2017
Provisional Application 62448883 · Jan 20, 2017
Provisional Application 62448885 · Jan 20, 2017
Provisional Application 62462818 · Feb 23, 2017
Related Publication 20180212756A1 · Jul 26, 2018
Cited By (3)
US 12,250,291 US 12,309,127 US 12,585,444