公开(公告)号：US20170070340A1

公开(公告)日：2017-03-09

申请号：US15068591

申请日：2016-03-13

Applicant: Cisco Technology, Inc.

Inventor： Eliphaz HIBSHOOSH ,  Aviad KIPNIS ,  Andrew SINTON

IPC: H04L9/00 ,  H04L9/30 ,  H04L9/08

CPC classification number: H04L9/008 ,  H04L9/0838 ,  H04L9/3026

Abstract: One embodiment of the invention includes a method, including performing, a symmetric homomorphic encryption of a secret SA with a cryptographic key H as input yielding a homomorphic encryption result SA*, sending SA* for mathematical combination by at least one device with at least one secret SB yielding G*, the device A not having access to SB, the at least one device not having access to SA and not having access to H, receiving G*, performing a symmetric homomorphic decryption of data based on G* with H as input yielding a first decrypted output, determining a symmetric cryptographic key KA based on the first decrypted output for secure communication with a first device which is operationally connected to, or includes, a tamper resistant security system including SA and SB therein, securing data using KA yielding secured data, and sending the secured data to the first device.

Abstract translation: 本发明的一个实施例包括一种方法，包括以加密密钥H作为输入产生秘密SA的对称同态加密，产生同态加密结果SA *，由至少一个具有至少一个设备的装置发送用于数学组合的SA * 产生G *的设备A，无法访问SB的设备A，至少一个不具有访问SA并且不能访问H的设备，接收G *，以H为基础的G *执行数据的对称同态解密 输入产生第一解密输出，基于第一解密输出确定对称加密密钥KA，以与第一设备进行安全通信，该第一设备在操作上连接到或包括其中的SA和SB的防篡改安全系统，其中使用KA保护数据 产生安全数据，并将安全数据发送到第一设备。