知搜-全球专利检索

  1. Login
  2. Sign Up

Search Results

27 records (took 0.019 seconds)

    VALIDATING KEYS DERIVED FROM AN OBLIVIOUS PSEUDORANDOM FUNCTION
    4.
    发明申请
    VALIDATING KEYS DERIVED FROM AN OBLIVIOUS PSEUDORANDOM FUNCTION 审中-公开

    公开(公告)号：US20200067699A1

    公开(公告)日：2020-02-27

    申请号：US16112224

    申请日：2018-08-24

    Applicant: International Business Machines Corporation

    Inventor： Jason K. Resch ,  Hugo M. Krawczyk ,  Mark D. Seaborn

    IPC: H04L9/08 ,  H04L9/32

    Abstract: A computing device including a processor, memory, and instructions, interfaces with a key management system (KMS) that provides encryption keys using an Oblivious Pseudorandom Function (OPRF). The device obtains, based on a type of encryption key being requested, a public key of a public-private key pair. The device creates an Oblivious Key Access Request (OKAR), including a blinded value associated with a requested encryption key. The OKAR is transmitted to the KMS, and a response is received. The response includes a blinded OPRF output, which yields an OPRF output as a result of being subjected to an unblinding operation. The OPRF output is validated using the public key, either directly or via a challenge, and in response to a positive validation, the OPRF output is used as a final key, or an intermediary key used to derive the final key.

    Validating keys derived from an oblivious pseudorandom function
    7.
    发明授权
    Validating keys derived from an oblivious pseudorandom function 有权

    公开(公告)号：US10924267B2

    公开(公告)日：2021-02-16

    申请号：US16112224

    申请日：2018-08-24

    Applicant: International Business Machines Corporation

    Inventor： Jason K. Resch ,  Hugo M. Krawczyk ,  Mark D. Seaborn

    IPC: H04L9/08 ,  H04L9/32 ,  H04L9/00

    Abstract: A computing device including a processor, memory, and instructions, interfaces with a key management system (KMS) that provides encryption keys using an Oblivious Pseudorandom Function (OPRF). The device obtains, based on a type of encryption key being requested, a public key of a public-private key pair. The device creates an Oblivious Key Access Request (OKAR), including a blinded value associated with a requested encryption key. The OKAR is transmitted to the KMS, and a response is received. The response includes a blinded OPRF output, which yields an OPRF output as a result of being subjected to an unblinding operation. The OPRF output is validated using the public key, either directly or via a challenge, and in response to a positive validation, the OPRF output is used as a final key, or an intermediary key used to derive the final key.

    Efficient computation of a threshold partially-oblivious pseudorandom function
    8.
    发明授权
    Efficient computation of a threshold partially-oblivious pseudorandom function 有权

    公开(公告)号：US10700859B2

    公开(公告)日：2020-06-30

    申请号：US15943142

    申请日：2018-04-02

    Applicant: International Business Machines Corporation

    Inventor： Jason K. Resch ,  Hugo M. Krawczyk

    IPC: H04L9/08 ,  H04L9/06 ,  H04L9/32

    Abstract: A computing device includes an interface configured to interface and communicate with a communication system, a memory that stores operational instructions, and processing circuitry operably coupled to the interface and to the memory that is configured to execute the operational instructions to perform various operations. The computing device processes an input value in accordance with a Threshold Partially-Oblivious Pseudorandom Function (TP-OPRF) blinding operation to generate a blinded input. The computing device then selects a threshold number of shareholder computing devices that are associated with a Key Management System (KMS) service and transmits the blinded input to them. The computing device then receives at least a threshold number of blinded output components from at least some of the shareholder computing devices and processes them to generate a blinded output. The computing device then processes the blinded output in accordance with a TP-OPRF unblinding operation to generate a key.

    OBLIVIOUS PSEUDORANDOM FUNCTION IN A KEY MANAGEMENT SYSTEM
    9.
    发明申请
    OBLIVIOUS PSEUDORANDOM FUNCTION IN A KEY MANAGEMENT SYSTEM 审中-公开

    公开(公告)号：US20190296896A1

    公开(公告)日：2019-09-26

    申请号：US15926651

    申请日：2018-03-20

    Applicant: International Business Machines Corporation

    Inventor： Jason K. Resch ,  Hugo M. Krawczyk ,  Mark D. Seaborn

    IPC: H04L9/06 ,  H04L9/08 ,  H04L29/06

    Abstract: A computing device includes an interface configured to interface and communicate with a communication system, a memory that stores operational instructions, and processing circuitry operably coupled to the interface and to the memory that is configured to execute the operational instructions to perform various operations. The computing device processes an input value associated with a key based on a blinding key in accordance with an Oblivious Pseudorandom Function (OPRF) blinding operation to generate a blinded value and transmits it to another computing device (e.g., that is associated with a Key Management System (KMS) service). The computing device then receives a blinded key that is based on processing of the blinded value based on an OPRF using an OPRF secret. The computing device processes the blinded key based on the blinding key in accordance with the OPRF unblinding operation to generate the key (e.g., to be used for secure information access).

    Compressing encrypted data without the encryption key
    10.
    发明授权
    Compressing encrypted data without the encryption key 有权
    压缩加密数据而不加密密钥

    公开(公告)号：US09584323B2

    公开(公告)日：2017-02-28

    申请号：US14993577

    申请日：2016-01-12

    Applicant: International Business Machines Corporation

    Inventor： Camit Hazay ,  Ashish Jagmohan ,  Demijan Klinc ,  Hugo M. Krawczyk ,  Tal Rabin

    IPC: H04L9/06 ,  G06F21/00 ,  H04L9/32 ,  H04L29/06 ,  H04L9/08

    CPC classification number: H04L9/0637 ,  G06F2221/2107 ,  H04L9/0618 ,  H04L9/0819 ,  H04L9/32 ,  H04L63/0428 ,  H04L69/04 ,  H04L2209/24 ,  H04L2209/30

    Abstract: A method, system and computer program product are disclosed for compressing encrypted data, wherein the data is encrypted by using a block encryption algorithm in a chained mode of operation, and the encrypted data is comprised of a set of N encrypted blocks, C1 . . . CN. In one embodiment, the method comprises leaving block CN uncompressed, and compressing all of the blocks C1 . . . CN in a defined sequence using a Slepian-Wolf code. In an embodiment, the data is encrypted using an encryption key K, and the compressing includes compressing all of the blocks C1 . . . CN without using the encryption key. In one embodiment, the compressing includes outputting the blocks C1 . . . CN as a set of compressed blocks CmprC1 . . . CmprCN-1, and the method further comprises decrypting CN to generate a reconstructed block {tilde over (X)}n, and decrypting and decompressing the set of compressed blocks using {tilde over (X)}n.

    Abstract translation: 公开了一种用于压缩加密数据的方法，系统和计算机程序产品，其中通过使用链式操作模式中的块加密算法来加密数据，并且加密数据由一组N个加密块C1组成。 。 。 CN。 在一个实施例中，该方法包括将块CN未压缩，并压缩所有块C1。 。 。 CN以定义的顺序使用Slepian-Wolf代码。 在一个实施例中，使用加密密钥K对数据进行加密，并且压缩包括压缩所有块C1。 。 。 CN，而不使用加密密钥。 在一个实施例中，压缩包括输出块C1。 。 。 CN作为一组压缩块CmprC1。 。 。 CmprCN-1，并且所述方法还包括解密CN以生成重构块{（t）），并且使用{tilde over（X）} n来解密和解压缩该组压缩块。

Patent Agency Ranking