Homomorphic encryption in a healthcare network environment, system and methods
A system and method for homomorphic encryption in a healthcare network environment is provided and includes receiving digital data over the healthcare network at a data custodian server in a plurality of formats from various data sources, encrypting the data according to a homomorphic encryption scheme, receiving a query at the data custodian server from a data consumer device concerning a portion of the encrypted data, initiating a secure homomorphic work session between the data custodian server and the data consumer device, generating a homomorphic work space associated with the homomorphic work session, compiling, by the data custodian server, a results set satisfying the query, loading the results set into the homomorphic work space, and building an application programming interface (API) compatible with the results set, the API facilitating encrypted analysis on the results set in the homomorphic work space.
1 . A system comprising one or more non-transitory computer readable storage media on which are stored instructions executable by one or more processors to perform operations for supporting secure multi-party computation, the operations comprising:
initiating a secure work session over a network between a plurality of computing devices;
allocating a homomorphic encryption memory area to be used by the secure work session, the homomorphic encryption memory area being built on top of homomorphic encryption primitives from a homomorphic encryption library and comprising a virtual memory space distributed across a plurality of memory locations respectively located in the plurality of computing devices;
loading encrypted data derived from one or more data sources into the homomorphic encryption memory area, at least a portion of the encrypted data being accessible to the plurality of computing devices via an application programming interface, the application programming interface comprising the homomorphic encryption primitives and defining methods of an instantiated class of the encrypted data to allow a computing device that calls the application programming interface, from among the plurality of computing devices, to perform computation on the encrypted data locally on the computing device using the homomorphic encryption primitives without awareness by the computing device of an unencrypted value associated with the encrypted data; and
determining a result from one or more operations performed by at least one of the plurality of computing devices on the encrypted data in the homomorphic encryption memory area via the application programming interface.
2 . The system of claim 1 , wherein said loading includes sending the encrypted data and the application programming interface to the at least one of the plurality of computing devices.
3 . The system of claim 1 , wherein the encrypted data is encrypted according to a context specific to the secure work session between the plurality of computing devices.
4 . The system of claim 3 , wherein the context is associated with at least one cryptographic key.
5 . The system of claim 1 , wherein the encrypted data comprises a structured encrypted vector.
6 . The system of claim 1 , further comprising providing a public cryptographic key to one or more of the plurality of computing devices, the public cryptographic key having a corresponding private key to the homomorphic encryption memory area.
7 . The system of claim 1 , wherein the secure work session comprises a symmetric cryptographic session.
8 . The system of claim 1 , wherein the plurality of computing devices includes a data custodian server.
9 . The system of claim 8 , wherein the homomorphic encryption memory area is instantiated at the data custodian server and at one or more other computing devices from among the plurality of computing devices.
10 . The system of claim 8 , wherein the homomorphic encryption memory area is instantiated at one or more computing devices other than the data custodian server.
11 . The system of claim 1 , wherein the result comprises a results set.
12 . The system of claim 11 , wherein the results set comprises a results vector.
13 . The system of claim 1 , wherein the encrypted data comprises healthcare data associated with a particular patient.
14 . A method of supporting secure multi-party computation, the method comprising:
initiating a secure work session over a network between a plurality of computing devices;
allocating a homomorphic encryption memory area to be used by the secure work session, the homomorphic encryption memory area being built on top of homomorphic encryption primitives from a homomorphic encryption library and comprising a virtual memory space distributed across a plurality of memory locations respectively located in the plurality of computing devices;
loading encrypted data derived from one or more data sources into the homomorphic encryption memory area, at least a portion of the encrypted data being accessible to the plurality of computing devices via an application programming interface, the application programming interface comprising the homomorphic encryption primitives and defining methods of an instantiated class of the encrypted data to allow a computing device that calls the application programming interface, from among the plurality of computing devices, to perform computation on the encrypted data locally on the computing device using the homomorphic encryption primitives without awareness by the computing device of an unencrypted value associated with the encrypted data; and
determining a result from one or more operations performed by at least one of the plurality of computing devices on the encrypted data in the homomorphic encryption memory area via the application programming interface.
15 . A system for supporting secure multi-party computation, the system comprising:
a plurality of computing devices; and
a data custodian server configured to initiate a secure work session over a network between the plurality of computing devices and allocate a homomorphic encryption memory area to be used by the secure work session, the homomorphic encryption memory area being built on top of homomorphic encryption primitives from a homomorphic encryption library and comprising a virtual memory space distributed across a plurality of memory locations respectively located in the plurality of computing devices, the data custodian server being further configured to load encrypted data derived from one or more data sources into the homomorphic encryption memory area, at least a portion of the encrypted data being accessible to the plurality of computing devices via an application programming interface, the application programming interface comprising the homomorphic encryption primitives and defining methods of an instantiated class of the encrypted data to allow a computing device that calls the application programming interface, from among the plurality of computing devices, to perform computation on the encrypted data locally on the computing device using the homomorphic encryption primitives without awareness by the computing device of an unencrypted value associated with the encrypted data, and to determine a result from one or more operations performed by at least one of the plurality of computing devices on the encrypted data in the homomorphic encryption memory area via the application programming interface.