-
公开(公告)号:US11544353B2
公开(公告)日:2023-01-03
申请号:US17313597
申请日:2021-05-06
Applicant: Google LLC
Inventor: Kevin Yeo , Sarvar Patel , Giuseppe Persiano , Mariana Raykova
Abstract: A method includes executing an instruction to execute a query for a data block, the data block associated with a corresponding memory level of a logarithmic number of memory levels (li) of memory, each memory level (li) including physical memory (RAMi) residing on memory hardware of a distributed system. The method also includes retrieving a value associated with the data block from an oblivious hash table using a corresponding key, and extracting un-queried key value pairs from the oblivious hash table associated with un-queried data blocks after executing a threshold number of queries for data blocks. The method also includes a multi-array shuffle routine on the extracted key value pairs from the oblivious hash table to generate an output array containing the un-queried key value pairs.
-
公开(公告)号:US11494506B2
公开(公告)日:2022-11-08
申请号:US16486281
申请日:2019-04-19
Applicant: Google LLC
Inventor: Sarvar Patel , Marcel M. Moti Yung , Karn Seth , Benjamin Kreuter
Abstract: Systems, methods, devices, and other techniques for preserving privacy when comparing private datasets from first and second computing systems. The second computing system identifies a first set of identifiers corresponding to records in a private database of the second computing system. The second computing system receives blinded versions of a set of identifiers corresponding to records in a private database of the first computing system. The second computing system determines an intersection or characteristic thereof of the records in the private database of the first computing system and the records in the private database of the second computing system based on matches between the blinded versions of the first and second sets of identifiers.
-
公开(公告)号:US20220200794A1
公开(公告)日:2022-06-23
申请号:US17567208
申请日:2022-01-03
Applicant: Google LLC
Inventor: Shobhit Saxena , Benjamin Kreuter , Sarvar Patel , Karn Seth
Abstract: Systems and methods may be used for establishing a link between user identifiers of different systems without disclosing specific user identifying information. One method includes generating a matching relationship based on double encrypted one or more first data sets of a first party system and double encrypted one or more second data sets of a second party system. The matching relationship indicates one or more links between match keys associated with the first party system and the match keys associated with the third party system. The method includes assigning bridge identifiers for user identifiers associated with the first party system and the user identifiers associated with the third party system based on the matching relationship.
-
公开(公告)号:US11310045B2
公开(公告)日:2022-04-19
申请号:US16702217
申请日:2019-12-03
Applicant: Google LLC
Inventor: Kevin Yeo , Asra Ali , Tancrede Lepoint , Sarvar Patel
IPC: H04L9/30 , G06F16/901 , H04L9/00
Abstract: A method includes obtaining a plaintext query that includes a sequence of plaintext integers and generating a polynomial having coefficients that include the sequence of plaintext integers of the plaintext query. The method also includes encrypting the polynomial using a secret encryption key and transmitting the encrypted polynomial to a server. The secret encryption key is randomly sampled from a ciphertext space and the server is configured to expand the encrypted polynomial using a public encryption key to obtain a sequence of encrypted integers corresponding to the sequence of plaintext integers. The method also includes receiving an encrypted result from the server. The encrypted result is based on the sequence of encrypted integers.
-
公开(公告)号:US11240009B2
公开(公告)日:2022-02-01
申请号:US17002610
申请日:2020-08-25
Applicant: Google LLC
Inventor: Shobhit Saxena , Benjamin Kreuter , Sarvar Patel , Karn Seth
Abstract: Systems and methods may be used for establishing a link between user identifiers of different systems without disclosing specific user identifying information. One method includes generating a matching relationship based on double encrypted one or more first data sets of a first party system and double encrypted one or more second data sets of a second party system. The matching relationship indicates one or more links between match keys associated with the first party system and the match keys associated with the third party system. The method includes assigning bridge identifiers for user identifiers associated with the first party system and the user identifiers associated with the third party system based on the matching relationship.
-
公开(公告)号:US11216433B2
公开(公告)日:2022-01-04
申请号:US16712151
申请日:2019-12-12
Applicant: Google LLC
Inventor: Kevin Yeo , Ahmet Erhan Nergiz , Nicolas Lidzborski , Laetitia Estelle Baudoin , Sarvar Patel
IPC: H04L29/06 , G06F16/22 , G06F16/242 , G06F16/2455 , H04L9/06 , H04L9/08 , H04L9/00 , G06F21/60
Abstract: A method for providing encrypted search includes receiving, at a user device associated with a user, a search query for a keyword that appears in one or more encrypted documents stored on an untrusted storage device and accessing a count table to obtain a count of documents that include the keyword. The method also includes generating a delegatable pseudorandom function (DPRF) based on the keyword, a private cryptographic key, and the count of documents. The method also includes evaluating a first portion of the DPRF and delegating a remaining second portion of the DPRF to the untrusted storage device which causes the untrusted storage device to evaluate the DPRF and access an encrypted search index associated with the documents. The untrusted storage device determines one or more encrypted documents associated with DPRF and returns, to the user device, an identifier for each encrypted document associated with the DPRF.
-
公开(公告)号:US20210279301A1
公开(公告)日:2021-09-09
申请号:US17313597
申请日:2021-05-06
Applicant: Google LLC
Inventor: Kevin Yeo , Sarvar Patel , Giuseppe Persiano , Mariana Raykova
Abstract: A method includes executing an instruction to execute a query for a data block, the data block associated with a corresponding memory level of a logarithmic number of memory levels (li) of memory, each memory level (li) including physical memory (RAMi) residing on memory hardware of a distributed system. The method also includes retrieving a value associated with the data block from an oblivious hash table using a corresponding key, and extracting un-queried key value pairs from the oblivious hash table associated with un-queried data blocks after executing a threshold number of queries for data blocks. The method also includes a multi-array shuffle routine on the extracted key value pairs from the oblivious hash table to generate an output array containing the un-queried key value pairs.
-
公开(公告)号:US20210192076A1
公开(公告)日:2021-06-24
申请号:US17053648
申请日:2018-05-07
Applicant: Google LLC
Inventor: Sarvar Patel , Kevin Yeo , Giuseppe Persiano
Abstract: A method (500) includes initializing a client state (250) on a client device (120) be executing a private batched sum retrieval instruction (200) to compute c sums O of data blocks (102) from an untrusted storage device (150). Each computed sum O stored on memory hardware (122) of the client device and including a sum of a corresponding subset S of exactly k data blocks. The method also includes a query instruction (300) to retrieve a query block Bq stored on the untrusted storage device by iterating through each of the c sums O of data blocks to identify one of the c sums O that does not include the query block Bq, instructing a service to pseudorandomly partition the untrusted storage device into partitions and sum the data blocks in each partition to determine a corresponding encrypted data block sum (302).
-
公开(公告)号:US11669624B2
公开(公告)日:2023-06-06
申请号:US16715994
申请日:2019-12-16
Applicant: Google LLC
Inventor: Kevin Yeo , Sarvar Patel , Giuseppe Persiano
CPC classification number: G06F21/602 , G06F21/6227 , H04L9/0894 , G06F2221/0751 , G06F2221/2107
Abstract: A method for providing response-hiding searchable encryption includes receiving a search query for a keyword from a user device associated with a user. The keyword appears in one or more encrypted documents within a corpus of encrypted documents stored on an untrusted storage device. The method also includes accessing a document oblivious key-value storage (OKVS) to obtain a list of document identifiers associated with the keyword. Each document identifier in the list of document identifiers associated with a respective keyword identifier is concatenated with the keyword and uniquely identifies a respective one of the one or more encrypted documents that the keyword appears in. The method also includes returning the list of document identifiers obtained from the document OKVS to the user device.
-
公开(公告)号:US20230091538A1
公开(公告)日:2023-03-23
申请号:US17448565
申请日:2021-09-23
Applicant: Google LLC
Inventor: Kevin Yeo , Joon Young Seo , Sarvar Patel
Abstract: A method includes obtaining, from a server, a filter including a set of encrypted identifiers each encrypted with a server key controlled by the server. The method includes obtaining a request that requests determination of whether a query identifier is a member of a set of identifiers corresponding to the set of encrypted identifiers. The method also includes transmitting an encryption request to the server that requests the server to encrypt the query identifier. The method includes receiving, from the server, an encrypted query identifier including the query identifier encrypted by the server key and determining, using the filter, whether the encrypted query identifier is not a member of the set of encrypted identifiers. When the encrypted query identifier is not a member of the set of encrypted identifiers, the method includes reporting that the query identifier is not a member of the set of identifiers.
-
-
-
-
-
-
-
-
-