Secure analytics using homomorphic and injective format-preserving encryption and an encrypted analytics matrix
Systems and methods that provide secure analytics using homomorphic and injective format-preserving encryption and an encrypted analytics matrix are disclosed herein. An example method includes encoding an analytic parameter set using a homomorphic encryption scheme as a homomorphic analytic matrix; transmitting a processing set to a server system, the processing set including at least the homomorphic analytic matrix and a keyed hashing function; and receiving a homomorphic encrypted result from the server system, the server system having utilized the homomorphic encryption scheme, the keyed hashing function, and a format preserving encryption scheme to evaluate the homomorphic analytic matrix over a datasource.
1. A method, comprising:
encoding an analytic parameter set using a homomorphic encryption scheme as a homomorphic analytic matrix;
transmitting a processing set to a server system, the processing set comprising at least the homomorphic analytic matrix and a keyed hashing function; and
receiving a homomorphic encrypted result from the server system, the server system having utilized the homomorphic encryption scheme, the keyed hashing function, and a format preserving encryption scheme to evaluate the homomorphic analytic matrix over a datasource.
2. The method according to claim 1 , further comprising decrypting the homomorphic encrypted result using a private key that was used to homomorphically encrypt the analytic parameter set into the homomorphic analytic matrix.
3. The method according to claim 1 , further comprising generating the homomorphic analytic matrix by:
extracting a set of term components from an analytic and an analytic parameter set using a term generator function;
applying a keyed hashing function to each of the set of term components to generate bitmask values; and
identifying a portion of the set of term components having a zero bitmask value.
4. The method according to claim 3 , further comprising ignoring the portion of the set of term components having a zero bitmask value such that the homomorphic analytic matrix includes non-zero bitmask value ones of the set of term components.
5. The method according to claim 4 , further comprising selecting a new hashing function if two non-zero bitmask values corresponding term components are identical to one another.
6. The method according to claim 4 , further comprising generating the processing set, the processing set comprising the homomorphic analytic matrix, a term generator function, the analytic, and the keyed hashing function.
7. The method according to claim 6 , wherein the homomorphic analytic matrix, the term generator function, the analytic, the keyed hashing function, and the encrypted result are never revealed to a data owner, an observer, or an attacker.
8. The method according to claim 1 , wherein the datasource may reside on a single server or may be distributed over multiple servers or in a cloud.
9. The method according to claim 8 , wherein the datasource comprises unencrypted plaintext, deterministically encrypted ciphertext, semantically encrypted ciphertext, probabilistically encrypted ciphertext, and any combination thereof.
10. A method, comprising:
receiving a homomorphic analytic matrix that comprises an analytic and analytic parameter set encoded by a client system using a homomorphic encryption scheme;
utilizing at least the homomorphic encryption scheme, a keyed hashing function, and a format preserving encryption scheme to evaluate the homomorphic analytic matrix over a datasource and generate a homomorphic encrypted result; and
transmitting the homomorphic encrypted result to the client system.
11. The method according to claim 10 , wherein the datasource may reside on a single server or may be distributed over multiple servers.
12. The method according to claim 10 , further comprising:
extracting a set of term components from the datasource using a term generator function using the homomorphic encryption scheme and the keyed hashing function; and
evaluating the homomorphic analytic matrix over the datasource using the extracted set of term components to generate the encrypted result.
13. A system comprising:
a client system configured to:
encode an analytic parameter set using a homomorphic encryption
scheme as a homomorphic analytic matrix;
transmit a processing set to a server system, the processing set comprising
at least the homomorphic analytic matrix and a keyed hashing function;
and
receive a homomorphic encrypted result; and
a server system that communicatively couples with the client system and a data repository, the server system being configured to:
receive the processing set from the client system;
utilize at least the homomorphic encryption scheme, a keyed hashing function, and a format preserving encryption scheme to evaluate the homomorphic analytic matrix over a datasource and generate a homomorphic encrypted result; and
transmit the homomorphic encrypted result to the client system.
14. The system according to claim 13 , wherein the client system is further configured to decrypt the encrypted result using a private key that was used to homomorphically encrypt the analytic parameter set.
15. The system according to claim 14 , wherein the homomorphic analytic matrix, a term generator function, an analytic, the keyed hashing function, and the encrypted result are never revealed to a data owner, an observer, or an attacker.
16. The system according to claim 15 , wherein the datasource may reside on a single server or may be distributed over multiple servers.
17. The system according to claim 16 , wherein the datasource comprises unencrypted plaintext, deterministically encrypted ciphertext, semantically encrypted ciphertext, probabilistically encrypted ciphertext, and any combination thereof.
18. The system according to claim 13 , wherein the client system is further configured to generate the homomorphic analytic matrix by:
extracting a set of term components from an analytic and an analytic parameter set using a term generator function;
applying a keyed hashing function to each of the set of term components to generate bitmask values; and
identifying a portion of the set of term components having a zero bitmask value.
19. The system according to claim 13 , wherein the server system is further configured to:
extract a set of term components from the datasource using a term generator function using the homomorphic encryption scheme and the keyed hashing function; and
evaluate the homomorphic analytic matrix over the datasource using the extracted set of term components to generate the encrypted result.
20. The system according to claim 13 , wherein the format preserving encryption scheme is an injective, format preserving encryption scheme.