IP Library › Granted Patent US 11,943,359
Granted Patent B2
US 11,943,359 · App. 17/359,108 · Granted Mar 26, 2024

Secure compute network devices and methods

Inventors: Fei Liu (Plano, TX); Jun Xu (Plano, TX)
Assignee: Huawei Technologies Co., Ltd.
H04L9/3221H04L9/0825H04L9/3218H04L9/3247H04L61/4517H04L63/12G06F21/645G06F21/71H04L9/0897H04L9/3239H04L9/50
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 11,943,359
App. No.
17/359,108
Granted
Mar 26, 2024
Kind
B2
Abstract

The disclosure relates to technology for secure compute. One aspect includes a network device, comprising a non-transitory memory comprising instructions; and one or more processors in communication with the non-transitory memory storage. The one or more processors execute the instructions to receive and process routing requests in a network; send an indication into the network that the network device is able to perform secure computes; perform a secure compute based on an input received via the network from an input device; ensure that a result of the secure compute is trusted as a correct result of the secure compute; and provide the trusted result of the secure compute to a result device connected to the network.

Claims (53)

1. A network device, comprising:

a memory comprising instructions; and

one or more processors in communication with the memory, wherein the one or more processors execute the instructions to:

receive and process routing requests in a network;

send an indication into the network that the network device is able to perform a secure compute;

perform the secure compute based on an input received via the network from an input device;

ensure that a result of the secure compute is trusted as a correct result of the secure compute; and

provide the trusted result of the secure compute to a result device connected to the network.

2. The network device of claim 1 , wherein to ensure that the result of the secure compute is trusted the one or more processors execute the instructions to:

act as a peer to generate the trusted result with other network devices in the network that performed the secure compute; or

notarize the result of the secure compute from a plurality of network devices to produce the trusted result.

3. The network device of claim 1 , wherein to provide the trusted result of the secure compute to the result device the one or more processors execute the instructions to record the trusted result in a blockchain ledger.

4. The network device of claim 1 , wherein to ensure that the result of the secure compute is trusted the one or more processors execute the instructions in a trusted execution environment (TEE).

5. The network device of claim 1 , wherein to send the indication into the network that the network device is able to perform the secure compute, the one or more processors execute the instructions to:

receive a query, via the network, whether the network device is able to perform the type of secure compute; and

respond to the query to indicate that the network device is able to perform the type of secure compute.

6. The network device of claim 1 , wherein to send the indication into the network that the network device is able to perform the secure compute, the one or more processors execute the instructions to add information to a header of a packet when processing the routing requests.

7. The network device of claim 1 , wherein the input from the input device comprises a zero-knowledge proof, and wherein to perform the secure compute the one or more processors execute the instructions to verify correctness of the zero-knowledge proof, based on a verification protocol.

8. The network device of claim 7 , wherein to provide the trusted result of the secure compute to the result device the one or more processors execute the instructions to:

return a result of true to the result device in response to the zero-knowledge proof being correct; and

return a result of false to the result device in response to the zero-knowledge proof being incorrect.

9. The network device of claim 1 , wherein to process routing requests in a network the one or more processors execute the instructions to route packets in accordance with an Open System Interconnection (OSI) layer 3 protocol or an Open System Interconnection (OSI) layer 2 protocol.

10. The network device of claim 9 , wherein to provide the trusted result of the secure compute to the result device the one or more processors execute the instructions to:

the input received via the network from the input device is encrypted; and

the one or more processors execute the instructions to perform the secure compute without decrypting the input.

11. A method for secure computing implemented by a network device, comprising:

receiving and processing, by the network device, routing requests in a network;

sending an indication, by the network device, into the network that the network device is able to perform of secure compute;

performing the secure compute, by the network device, based on an input received via the network from an input device;

ensuring, by the network device, that a result of the secure compute is trusted as a correct result of the secure compute; and

providing the trusted result of the secure compute from the network device to a result device connected to the network.

12. The method of claim 11 , wherein ensuring that the result of the secure compute is trusted comprises:

acting as a peer device to generate the trusted result with other network devices that performed the secure compute; or

recording the trusted result of the secure compute, by the network device, in a blockchain ledger.

13. The method of claim 11 , further comprising sending a query to network devices in the network to seek one or more network devices that are qualified to perform the secure compute.

14. The method of claim 11 , further comprising:

selecting multiple network devices to perform the secure compute; and

providing the input via the network to the multiple network devices selected.

15. The method of claim 11 , wherein the input from the input device comprises a zero- knowledge proof, and wherein performing the secure compute based on the input from the input device comprises verifying correctness of the zero-knowledge proof based on a verification protocol.

16. The method of claim 11 , wherein the input received via the network from the input device is encrypted, and wherein performing the secure compute comprises performing the secure compute without decrypting the input.

17. A non-transitory computer-readable medium storing computer instructions for secure computing, that when executed by one or more processors, cause the one or more processors to:

receive and process routing requests in a network by a network device;

send an indication into the network that the network device is able to perform a type of secure compute;

perform the type of secure compute based on an input received via the network from an input device;

ensure that a result of the secure compute is trusted as a correct result of the secure compute; and

provide the trusted result of the secure compute to one or more result devices connected to the network.

18. The non-transitory computer-readable medium of claim 17 , wherein the computer instructions further cause the one or more processors to obtain the result of the secure compute from a blockchain ledger.

19. The non-transitory computer-readable medium of claim 17 , wherein the computer instructions further cause the one or more processors to:

select the network device from among multiple network devices that indicate that the respective network device is qualified to perform the type of secure compute; and

provide the input to the network device selected.

20. The non-transitory computer-readable medium of claim 17 , wherein the computer instructions further cause the one or more processors to:

compare a result of the secure compute from each of multiple selected network devices; and

select the trusted result based on the result of the secure compute from each of the multiple selected network devices.

Assignments (2)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Jan 24, 2024
From: FUTUREWEI TECHNOLOGIES, INC.
To: HUAWEI TECHNOLOGIES CO., LTD.
Reel/Frame 066365/0423 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Jan 10, 2024
From: FUTUREWEI TECHNOLOGIES, INC.
To: HUAWEI TECHNOLOGIES CO., LTD.
Reel/Frame 066267/0955 →
Continuity (3)
Continuation PCTCN2019083567 · Apr 20, 2019
Provisional Application 62810730 · Feb 26, 2019
Related Publication 20210328798A1 · Oct 21, 2021