Secure analytics using an encrypted analytics matrix
Systems and methods of secure analytics using an encrypted analytics matrix are disclosed herein. An example method includes encoding an analytic parameter set using a homomorphic encryption scheme as a homomorphic analytic matrix; transmitting a processing set to a server system, the processing set including at least the homomorphic analytic matrix and a keyed hashing function; and receiving a homomorphic encrypted result from the server system, the server system having utilized the homomorphic encryption scheme and the keyed hashing function to evaluate the homomorphic analytic matrix over a datasource.
1. A method, comprising:
encoding an analytic parameter set using a homomorphic encryption scheme as a homomorphic analytic matrix;
transmitting a processing set to a server system, the processing set comprising at least the homomorphic analytic matrix and a keyed hashing function; and
receiving a homomorphic encrypted result from the server system, the server system having utilized the homomorphic encryption scheme and the keyed hashing function to evaluate the homomorphic analytic matrix over a datasource.
2. The method according to claim 1 , further comprising decrypting the homomorphic encrypted result using a private key that was used to homomorphically encrypt the analytic parameter set into the homomorphic analytic matrix.
3. The method according to claim 1 , further comprising generating the homomorphic analytic matrix by:
extracting a set of term components from an analytic and an analytic parameter set using a term generator function;
applying a keyed hashing function to each of the set of term components to generate bitmask values; and
identifying a portion of the set of term components having a zero bitmask value.
4. The method according to claim 3 , further comprising ignoring the portion of the set of term components having a zero bitmask value such that the homomorphic analytic matrix includes non-zero bitmask value ones of the set of term components.
5. The method according to claim 4 , further comprising selecting a new hashing function if two non-zero bitmask values corresponding term components are identical to one another.
6. The method according to claim 4 , further comprising generating the processing set, the processing set comprising the homomorphic analytic matrix, a term generator function, the analytic, and the keyed hashing function.
7. The method according to claim 6 , wherein the homomorphic analytic matrix, the term generator function, the analytic, the keyed hashing function, and the encrypted result are never revealed to a data owner, an observer, or an attacker.
8. The method according to claim 1 , wherein the datasource may reside on a single server or may be distributed over multiple servers or in a cloud.
9. The method according to claim 8 , wherein the datasource comprises unencrypted plaintext, deterministically encrypted ciphertext, semantically encrypted ciphertext, probabilistically encrypted ciphertext, and any combination thereof.
10. A method, comprising:
receiving a homomorphic analytic matrix that comprises an analytic and analytic parameter set encoded by a client system using a homomorphic encryption scheme;
utilizing at least the homomorphic encryption scheme and a keyed hashing function to evaluate the homomorphic analytic matrix over a datasource and generate an encrypted result; and
transmitting the encrypted result to the client system.
11. The method according to claim 10 , wherein the datasource may reside on a single server or may be distributed over multiple servers.
12. The method according to claim 10 , further comprising:
extracting a set of term components from the datasource using a term generator function using the homomorphic encryption scheme and the keyed hashing function; and
evaluating the homomorphic analytic matrix over the datasource using the extracted set of term components to generate the encrypted result.
13. A system comprising:
a client system configured to:
encode an analytic parameter set using a homomorphic encryption scheme as a homomorphic analytic matrix;
transmit a processing set to a server system, the processing set comprising at least the homomorphic analytic matrix and a keyed hashing function; and
receive a homomorphic encrypted result; and
a server system that communicatively couples with the client system and a data repository, the server system being configured to:
receive the processing set from the client system;
utilize at least the homomorphic encryption scheme and a keyed hashing function to evaluate the homomorphic analytic matrix over a datasource and generate an encrypted result; and
transmit the encrypted result to the client system.
14. The system according to claim 13 , wherein the client system is further configured to decrypt the encrypted result using a private key that was used to homomorphically encrypt the analytic parameter set.
15. The system according to claim 14 , wherein the homomorphic analytic matrix, a term generator function, an analytic, the keyed hashing function, and the encrypted result are never revealed to a data owner, an observer, or an attacker.
16. The system according to claim 15 , wherein the datasource may reside on a single server or may be distributed over multiple servers.
17. The system according to claim 16 , wherein the datasource comprises unencrypted plaintext, deterministically encrypted ciphertext, semantically encrypted ciphertext, probabilistically encrypted ciphertext, and any combination thereof.
18. The system according to claim 13 , wherein the client system is further configured to generate the homomorphic analytic matrix by:
extracting a set of term components from an analytic and an analytic parameter set using a term generator function;
applying a keyed hashing function to each of the set of term components to generate bitmask values; and
identifying a portion of the set of term components having a zero bitmask value.
19. The system according to claim 13 , wherein the server system is further configured to:
extract a set of term components from the datasource using a term generator function using the homomorphic encryption scheme and the keyed hashing function; and
evaluate the homomorphic analytic matrix over the datasource using the extracted set of term components to generate the encrypted result.