IP Library › Granted Patent US 12,634,113
Granted Patent B2
US 12,634,113 · App. 18/342,627 · Granted May 19, 2026

Method for processing dynamic data based on homomorphic encryption which carries out unlimited arithmetic operations without bootstrapping and reencryption of control data

Inventors: Junsoo Kim (Seoul, KR); Hyungbo Shim (Seoul, KR)
Assignee: SEOUL NATIONAL UNIVERSITY R&DB FOUNDATION
H04L9/008H04L9/3066
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 12,634,113
App. No.
18/342,627
Granted
May 19, 2026
Kind
B2
Abstract

A method for processing dynamic data in an environment. The environment includes a device to be controlled; a controller, a state equation of which is x(t+1)=Fx(t)+Gy(t); a decryption module which decrypts an encrypted control command received from the controller; an actuator which operates according to the decrypted control command received from the decryption module; a sensor which detects the output (y(t)) of the device and an encryption module which carries out homomorphic encryption to the signal of the sensor.

Claims (723)

1 . A computer-implemented method for processing dynamic data in an environment comprising a device to be controlled, a controller configured to encrypt data based on a state x(t) that dynamically changes according to a state equation x(t+1)=Fx(t)+Gy(t), a decryption module that decrypts an encrypted control data received from the controller, an actuator that operates according to the decrypted control data received from the decryption module, a sensor that detects output of the device, and an encryption module that carries out homomorphic encryption to signal of the sensor, the method comprising:

dividing, by the controller, the state equation into Schur stable part (z s (t+1)=F s z s (t)+G s y(t)) and Schur anti-stable part (z u (t+1)=F u z u (t)+G u y(t)), wherein F is a state matrix of the controller, G is an input matrix of the controller, x(t) is the state of the controller at time t, x(t+1) is a state of the controller at time t+1, and y(t) is the output of the device at time t, and wherein subscript “s” refers to the Schur stable part and subscript “u” refers to the Schur anti-stable part;

approximating, by the controller, the Schur stable part using the following equation:

[

z

s

,

1

(

t

+

1

)

z

s

,

2

⁢

(

t

+

1

)

⋮

z

s

,

k

1

⁢

(

t

+

1

)

]

≈

[

z

s

,

2

(

t

)

⋮

z

s

,

k

1

⁢

(

t

)

0

]

+

[

G

s

F

s

⁢

G

s

⋮

F

s

k

1

-

1

⁢

G

s

]

⁢

y

⁡

(

t

)

,

approximating, by the controller, the Schur anti-stable part using the following equation:

z

u

(

t

+

1

)

≈

F

0

⁢

z

u

(

t

)

+

G

u

⁢

y

⁡

(

t

)

,

wherein the state variable equation for generating control data in approximating the Schur anti-stable part is,

ξ

⁢

(

k

2

⁢

t

+

1

)

=

ξ

⁢

(

k

2

⁢

t

)

+

T

2

⁢

F

0

-

1

⁢

G

u

⁢

y

⁢

(

t

)

ξ

⁢

(

k

2

⁢

t

+

2

)

=

ξ

⁢

(

k

2

⁢

t

+

1

)

+

T

2

⁢

F

0

-

2

⁢

G

u

⁢

y

⁢

(

t

)

⋮

ξ

⁢

(

k

2

⁢

t

+

k

2

-

1

)

=

ξ

⁢

(

k

2

⁢

t

+

k

2

-

2

)

+

T

2

⁢

F

0

-

(

k

2

-

1

)

⁢

G

u

⁢

y

⁢

(

t

)

ξ

⁢

(

k

2

⁢

t

+

k

2

)

=

T

2

⁢

F

0

k

2

⁢

T

2

-

1

⁢

ξ

⁡

(

k

2

⁢

t

+

k

2

-

1

)

+

T

2

⁢

G

u

⁢

y

⁡

(

t

)

;

and

wherein z(t)=T 1 x(t); the absolute value of every eigenvalue of F s is less than 1; the absolute value of every eigenvalue of F u is equal to or greater than 1; ξ(k 2 t)=T 2 z u (k 2 t); k 1 is a sufficiently large natural number which satisfies the condition that

F

s

k

1

converges to 0; k 2 is a natural number which satisfies the conditions that ∥F u −F 0 ∥<ε, for a sufficiently small number ε which is greater than 0 and

T

2

⁢

F

0

k

2

⁢

T

2

-

1

∈

ℤ

n

×

n

(

F

0

∈

ℝ

n

×

n

⁢

and

⁢

T

2

∈

ℝ

n

×

n

)

;

and

updating, by the controller, the state x(t+1) from the state x(t) according to the state equation.

2 . The method according to claim 1 , wherein

[

z

s

,

2

(

t

)

⋮

z

s

,

k

1

⁢

(

t

)

0

]

=

A

[

z

s

,

1

(

t

)

z

s

,

2

(

t

)

⋮

z

s

,

k

1

(

t

)

]

,

and

wherein the matrix “A” is a matrix in which the elements immediately above the diagonal elements are 1, and the remaining elements are 0.

3 . The method according to claim 1 , wherein k 1 and k 2 are equal.

4 . A non-transitory computer-readable medium containing program instructions executable by a processor to cause the processor to perform a method comprising:

dividing, a state equation x(t+1)=Fx(t)+Gy(t) into Schur stable part (z s (t+1)=F s z s (t)+G s y(t)) and Schur anti-stable part (z u (t+1)=F u z u (t)+G u y(t)), wherein F is a state matrix of the controller, G is an input matrix of the controller, x(t) is the state of the controller at time t, x(t+1) is a state of the controller at time t+1, and y(t) is the output of the device at time t, and wherein subscript “s” refers to the Schur stable part and subscript “u” refers to the Schur anti-stable part;

approximating, by the controller, the Schur stable part using the following equation:

[

z

s

,

1

(

t

+

1

)

z

s

,

2

⁢

(

t

+

1

)

⋮

z

s

,

k

1

⁢

(

t

+

1

)

]

≈

[

z

s

,

2

(

t

)

⋮

z

s

,

k

1

⁢

(

t

)

0

]

+

[

G

s

F

s

⁢

G

s

⋮

F

s

k

1

-

1

⁢

G

s

]

⁢

y

⁡

(

t

)

,

 and

approximating, by the controller the Schur anti-stable part using the following equation:

z

u

(

t

+

1

)

≈

F

0

⁢

z

u

(

t

)

+

G

u

⁢

y

⁡

(

t

)

,

wherein the state variable equation for generating control command in the step of approximating the Schur anti-stable part is,

ξ

⁢

(

k

2

⁢

t

+

1

)

=

ξ

⁢

(

k

2

⁢

t

)

+

T

2

⁢

F

0

-

1

⁢

G

u

⁢

y

⁢

(

t

)

ξ

⁢

(

k

2

⁢

t

+

2

)

=

ξ

⁢

(

k

2

⁢

t

+

1

)

+

T

2

⁢

F

0

-

2

⁢

G

u

⁢

y

⁢

(

t

)

⋮

ξ

⁢

(

k

2

⁢

t

+

k

2

-

1

)

=

ξ

⁢

(

k

2

⁢

t

+

k

2

-

2

)

+

T

2

⁢

F

0

-

(

k

2

-

1

)

⁢

G

u

⁢

y

⁢

(

t

)

ξ

⁢

(

k

2

⁢

t

+

k

2

)

=

T

2

⁢

F

0

k

2

⁢

T

2

-

1

⁢

ξ

⁡

(

k

2

⁢

t

+

k

2

-

1

)

+

T

2

⁢

G

u

⁢

y

⁡

(

t

)

;

and

wherein z(t)=T 1 x(t); the absolute value of every eigenvalue of F s is less than 1; the absolute value of every eigenvalue of F u is equal to or greater than 1; ξ(k 2 t)=T 2 z u (k 2 t); k 1 is a sufficiently large natural number which satisfies the condition that

F

s

k

1

converges to 0; k 2 is a natural number which satisfies the conditions that ∥F u −F 0 ∥<ε, for a sufficiently small number ε which is greater than 0 and

T

2

⁢

F

0

k

2

⁢

T

2

-

1

∈

ℤ

n

×

n

(

F

0

∈

ℝ

n

×

n

⁢

and

⁢

T

2

∈

ℝ

n

×

n

)

,

and

updating, by the controller, the state x(t+1) from the state x(t) according to the state equation.

Assignments (1)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Jun 27, 2023
From: KIM, JUNSOO; SHIM, HYUNGBO
To: SEOUL NATIONAL UNIVERSITY R&DB FOUNDATION
Reel/Frame 064088/0079 →
Priority Claims (1)
KR 10-2021-0006962 · Jan 18, 2021 · national
Continuity (2)
Continuation PCTKR2021017080 · Nov 19, 2021
Related Publication 20230344618A1 · Oct 26, 2023
References Cited (29)
US 9374220B2 · Youn et al. · 2016 [cited by applicant]
US 9716590B2 · Gentry · 2017 [cited by applicant]
US 10924262B2 · Shim et al. · 2021 [cited by applicant]
US 20140153724A1 · Kim · 2014 [cited by applicant]
US 20140270159A1 · Youn et al. · 2014 [cited by applicant]
US 20170293913A1 · Gulak et al. · 2017 [cited by applicant]
US 20190182216A1 · Gulak et al. · 2019 [cited by applicant]
US 20190205875A1 · Gulak et al. · 2019 [cited by applicant]
US 20190363872A1 · Shim et al. · 2019 [cited by applicant]
CA 3002582A1 · 2017 [cited by applicant]
CN 103856316A · 2014 [cited by applicant]
CN 109314641A · 2019 [cited by applicant]
EP 2677680A1 · 2013 [cited by applicant]
EP 2741529A3 · 2014 [cited by applicant]
EP 2741529A2 · 2014 [cited by applicant]
JP 2019514301A · 2019 [cited by applicant]
KR 1020140071605A · 2014 [cited by applicant]
KR 1020140114933A · 2014 [cited by applicant]
KR 101795771B1 · 2017 [cited by applicant]
KR 1020180092199A · 2018 [cited by applicant]
KR 1020180127506A · 2018 [cited by applicant]
KR 101919940B1 · 2018 [cited by applicant]
KR 1020210042668A · 2021 [cited by applicant]
KR 102306635B1 · 2021 [cited by applicant]
WO 2017177313A1 · 2017 [cited by applicant]
WO 2018147497A1 · 2018 [cited by applicant]
Fully homomorphic encryption without bootstrapping, by Gentry et al., published 2014 (Year: 2014). [cited by examiner]
Fully Homomorphic encryption without Bootstrapping, by Yagisawa et al., published 2015 (Year: 2015). [cited by examiner]
Cheon, J.H. et al., “Need for Controllers having Integer Coefficients in Homomorphically Encrypted Dynamic System”, 2018 IEEE Conference on Decision and Control (CDC), 978-1-5386-1395-5/18/$31.00 © 2018 IEEE, Miami Beac… [cited by applicant]