专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

11. 发明授权

US09547720B2 Access control for encrypted query processing 有权
标题翻译：加密查询处理的访问控制
公开(公告)号：US09547720B2
公开(公告)日：2017-01-17
申请号：US14582471
申请日：2014-12-24
申请人： Isabelle Hang , Florian Kerschbaum , Martin Haerterich , Mathias Kohler , Andreas Schaad , Axel Schroepfer , Walter Tighzert
发明人： Isabelle Hang , Florian Kerschbaum , Martin Haerterich , Mathias Kohler , Andreas Schaad , Axel Schroepfer , Walter Tighzert
IPC分类号： G06F21/00 , G06F17/30 , H04L29/06
CPC分类号： G06F17/30867 , G06F17/30433 , G06F17/30528 , G06F17/30554 , H04L63/0428 , H04L63/104
摘要： Methods, systems, and computer-readable storage media for enforcing access control in encrypted query processing. Implementations include actions of obtaining a set of user groups based on the user credential and a user group mapping, obtaining a set of relations based on the query, obtaining a set of virtual relations based on the set of user groups and the set of relations, receiving a first rewritten query based on the set of virtual relations and a query rewriting operation, encrypting the first rewritten query to provide an encrypted query, and transmitting the encrypted query to at least one server computing device over a network for execution of the encrypted query over access controlled, encrypted data.
摘要翻译：用于在加密查询处理中执行访问控制的方法，系统和计算机可读存储介质。实现包括基于用户凭证和用户组映射获取一组用户组的动作，基于查询获得一组关系，基于该组用户组和该组关系获得一组虚拟关系，基于所述一组虚拟关系和查询重写操作接收第一重写查询，对所述第一重写查询进行加密以提供加密查询，以及通过网络将加密查询发送到至少一个服务器计算设备以执行加密查询通过访问控制，加密数据。

12. 发明授权

US09537838B2 Adjustable proxy re-encryption 有权
标题翻译：可调代理重新加密
公开(公告)号：US09537838B2
公开(公告)日：2017-01-03
申请号：US14579317
申请日：2014-12-22
申请人： Isabelle Hang , Florian Kerschbaum , Mathias Kohler , Martin Haerterich , Florian Hahn , Axel Schroepfer , Walter Tighzert , Andreas Schaad
发明人： Isabelle Hang , Florian Kerschbaum , Mathias Kohler , Martin Haerterich , Florian Hahn , Axel Schroepfer , Walter Tighzert , Andreas Schaad
IPC分类号： H04L29/06
CPC分类号： H04L63/0464 , H04L63/0471 , H04L63/0807
摘要： Methods, systems, and computer-readable storage media for proxy re-encryption of encrypted data stored in a first database of a first server and a second database of a second server. Implementations include actions of receiving a first token at the first server from a client-side computing device, providing a first intermediate re-encrypted value based on a first encrypted value and the first token, transmitting the first intermediate re-encrypted value to the second server, receiving a second intermediate re-encrypted value from the second server, the second intermediate re-encrypted value having been provided by encrypting the first encrypted value at the second server based on a second token, providing the first encrypted value as a first re-encrypted value based on the first intermediate re-encrypted value and the second intermediate re-encrypted value, and storing the first re-encrypted value in the first database.
摘要翻译：用于对存储在第一服务器的第一数据库和第二服务器的第二数据库中的加密数据进行代理重新加密的方法，系统和计算机可读存储介质。实现包括从客户端计算设备在第一服务器处接收第一令牌的动作，基于第一加密值和第一令牌提供第一中间重新加密的值，将第一中间重新加密值发送到第二中继重新加密值服务器，从第二服务器接收第二中间重新加密的值，第二中间重新加密值是通过基于第二令牌加密第二服务器处的第一加密值而提供的，提供第一加密值作为第一重新基于所述第一中间重新加密值和所述第二中间重新加密值的加密值，并将所述第一重新加密值存储在所述第一数据库中。

13. 发明申请

US20160357869A1 ACCESS CONTROL FOR ENCRYPTED QUERY PROCESSING 有权
标题翻译：加密查询处理的访问控制
公开(公告)号：US20160357869A1
公开(公告)日：2016-12-08
申请号：US14582471
申请日：2014-12-24
申请人： Isabelle Hang , Florian Kerschbaum , Martin Haerterich , Mathias Kohler , Andreas Schaad , Axel Schroepfer , Walter Tighzert
发明人： Isabelle Hang , Florian Kerschbaum , Martin Haerterich , Mathias Kohler , Andreas Schaad , Axel Schroepfer , Walter Tighzert
IPC分类号： G06F17/30 , H04L29/06
CPC分类号： G06F17/30867 , G06F17/30433 , G06F17/30528 , G06F17/30554 , H04L63/0428 , H04L63/104
摘要： Methods, systems, and computer-readable storage media for enforcing access control in encrypted query processing. Implementations include actions of obtaining a set of user groups based on the user credential and a user group mapping, obtaining a set of relations based on the query, obtaining a set of virtual relations based on the set of user groups and the set of relations, receiving a first rewritten query based on the set of virtual relations and a query rewriting operation, encrypting the first rewritten query to provide an encrypted query, and transmitting the encrypted query to at least one server computing device over a network for execution of the encrypted query over access controlled, encrypted data.
摘要翻译：用于在加密查询处理中执行访问控制的方法，系统和计算机可读存储介质。实现包括基于用户凭证和用户组映射获取一组用户组的动作，基于查询获得一组关系，基于该组用户组和该组关系获得一组虚拟关系，基于所述一组虚拟关系和查询重写操作接收第一重写查询，对所述第一重写查询进行加密以提供加密查询，以及通过网络将加密查询发送到至少一个服务器计算设备以执行加密查询通过访问控制，加密数据。

14. 发明申请

US20160182467A1 ADJUSTABLE PROXY RE-ENCRYPTION 有权
标题翻译：可调节代码重新加密
公开(公告)号：US20160182467A1
公开(公告)日：2016-06-23
申请号：US14579317
申请日：2014-12-22
申请人： Isabelle Hang , Florian Kerschbaum , Mathias Kohler , Martin Haerterich , Florian Hahn , Axel Schroepfer , Walter Tighzert , Andreas Schaad
发明人： Isabelle Hang , Florian Kerschbaum , Mathias Kohler , Martin Haerterich , Florian Hahn , Axel Schroepfer , Walter Tighzert , Andreas Schaad
IPC分类号： H04L29/06
CPC分类号： H04L63/0464 , H04L63/0471 , H04L63/0807
摘要： Methods, systems, and computer-readable storage media for proxy re-encryption of encrypted data stored in a first database of a first server and a second database of a second server. Implementations include actions of receiving a first token at the first server from a client-side computing device, providing a first intermediate re-encrypted value based on a first encrypted value and the first token, transmitting the first intermediate re-encrypted value to the second server, receiving a second intermediate re-encrypted value from the second server, the second intermediate re-encrypted value having been provided by encrypting the first encrypted value at the second server based on a second token, providing the first encrypted value as a first re-encrypted value based on the first intermediate re-encrypted value and the second intermediate re-encrypted value, and storing the first re-encrypted value in the first database.
摘要翻译：用于对存储在第一服务器的第一数据库和第二服务器的第二数据库中的加密数据进行代理重新加密的方法，系统和计算机可读存储介质。实现包括从客户端计算设备在第一服务器处接收第一令牌的动作，基于第一加密值和第一令牌提供第一中间重新加密的值，将第一中间重新加密值发送到第二中继重新加密值服务器，从第二服务器接收第二中间重新加密的值，第二中间重新加密值是通过基于第二令牌加密第二服务器处的第一加密值而提供的，提供第一加密值作为第一重新基于所述第一中间重新加密值和所述第二中间重新加密值的加密值，并将所述第一重新加密值存储在所述第一数据库中。

15. 发明申请

US20140372769A1 Automatic Protocol Selection in Mixed-Protocol Secure Computation 审中-公开
标题翻译：混合协议安全计算中的自动协议选择
公开(公告)号：US20140372769A1
公开(公告)日：2014-12-18
申请号：US13920937
申请日：2013-06-18
申请人： Florian Kerschbaum , Axel Schroepfer
发明人： Florian Kerschbaum , Axel Schroepfer
IPC分类号： G06F21/71
CPC分类号： H04L9/008 , H04L2209/46
摘要： Secure multi-party computation may be performed utilizing mixed protocols in order to improve performance. In particular, embodiments implementing mixed protocols can reduce run time and thereby lower the cost of performing secure computation. Algorithms for optimizing selection from mixed protocols are disclosed, including an algorithm based on integer programming or an efficient heuristic algorithm for the selection problem. According to certain embodiments a selection engine is configured to receive as inputs, a function description and cost parameter(s). Based upon execution of the integer programming algorithm and the application of heuristics, the selection engine is configured to generate an output comprising a single cryptographic protocol (e.g. garbled circuit or homomorphic encryption). By employing mixed protocol selection according to embodiments, a compiler responsible for implementing secure computations can identify and select the fastest underlying mixed cryptographic protocols.
摘要翻译：可以使用混合协议来执行安全的多方计算，以便提高性能。特别地，实现混合协议的实施例可以减少运行时间，从而降低执行安全计算的成本。公开了用于从混合协议优化选择的算法，包括基于整数规划的算法或用于选择问题的有效启发式算法。根据某些实施例，选择引擎被配置为接收功能描述和成本参数作为输入。基于整数规划算法的执行和启发式的应用，选择引擎被配置为生成包括单个密码协议（例如，乱码电路或同态加密）的输出。通过采用根据实施例的混合协议选择，负责实现安全计算的编译器可以识别并选择最快的底层混合加密协议。

16. 发明授权

US09355377B2 Carbon dioxide emissions optimized secure cloud computing 有权
标题翻译：二氧化碳排放优化了安全云计算
公开(公告)号：US09355377B2
公开(公告)日：2016-05-31
申请号：US13926926
申请日：2013-06-25
申请人： Axel Schroepfer
发明人： Axel Schroepfer
IPC分类号： G06Q10/06 , G06F9/44 , G06F9/45 , G06F9/455
CPC分类号： G06Q10/0631
摘要： Systems and method for deploying CO2 emission and financial cost optimized secured algorithms to cloud computing environments are disclosed. Algorithms are converted into a single state assignment representation that includes a combination of statements that represent sub operations of the algorithm. Runtime and power consumption cost values associated with executing the statements in the cloud are calibrated by executing the statements in a particular configuration of a cloud some number of time with multiple security protocols and then analyzing the results. CO2 emission and financial cost values are mapped to the calibrated runtime and power consumption cost values. The mapped CO2 emission and financial cost values and the calibrated runtime and power consumption cost values are used by a linear program to optimize a partitioning vector of indicators that define which security protocol will be used to execute each statement in the cloud when the algorithm is deployed.
摘要翻译：公开了将二氧化碳排放和财务成本优化的安全算法部署到云计算环境的系统和方法。算法被转换成单个状态分配表示，其包括表示算法的子操作的语句的组合。与执行云中的语句相关联的运行时和功耗成本值通过在多个安全协议的某个时间段内执行云的特定配置中的语句进行校准，然后分析结果。二氧化碳排放量和财务成本值映射到校准的运行时间和功耗成本值。映射的二氧化碳排放和财务成本值以及校准的运行时间和功耗成本值由线性程序用于优化指示符的分区向量，该指标定义当部署算法时，将使用哪种安全协议来执行云中的每个语句。

17. 发明申请

US20140379396A1 Carbon Dioxide Emissions Optimized Secure Cloud Computing 有权
标题翻译：二氧化碳排放优化安全云计算
公开(公告)号：US20140379396A1
公开(公告)日：2014-12-25
申请号：US13926926
申请日：2013-06-25
申请人： Axel Schroepfer
发明人： Axel Schroepfer
IPC分类号： G06Q10/06
CPC分类号： G06Q10/0631
摘要： Systems and method for deploying CO2 emission and financial cost optimized secured algorithms to cloud computing environments are disclosed. Algorithms are converted into a single state assignment representation that includes a combination of statements that represent sub operations of the algorithm. Runtime and power consumption cost values associated with executing the statements in the cloud are calibrated by executing the statements in a particular configuration of a cloud some number of time with multiple security protocols and then analyzing the results. CO2 emission and financial cost values are mapped to the calibrated runtime and power consumption cost values. The mapped CO2 emission and financial cost values and the calibrated runtime and power consumption cost values are used by a linear program to optimize a partitioning vector of indicators that define which security protocol will be used to execute each statement in the cloud when the algorithm is deployed.
摘要翻译：公开了将二氧化碳排放和财务成本优化的安全算法部署到云计算环境的系统和方法。算法被转换成单个状态分配表示，其包括表示算法的子操作的语句的组合。与执行云中的语句相关联的运行时和功耗成本值通过在多个安全协议的某个时间段内执行云的特定配置中的语句进行校准，然后分析结果。二氧化碳排放量和财务成本值映射到校准的运行时间和功耗成本值。映射的二氧化碳排放和财务成本值以及校准的运行时间和功耗成本值由线性程序用于优化指示符的分区向量，该指标定义当部署算法时，将使用哪种安全协议来执行云中的每个语句。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式