System and architecture for supporting analytics on encrypted databases

    公开(公告)号:US10783263B2

    公开(公告)日:2020-09-22

    申请号:US15675055

    申请日:2017-08-11

    摘要: A method is provided for generating an encrypted database. The method includes: receiving a plaintext database having plaintext data entries in one or more columns; augmenting the received plaintext database to generate an augmented plaintext database, the augmenting including the addition of one or more columns to the received plaintext database, each added column corresponding to an attribute which is to be made available for conditional queries; and encrypting the augmented plaintext database to generate the encrypted database including encrypted data entries. The encrypted database supports at least one form of conditional query for those attributes corresponding to the added columns, the at least one form of conditional query being computed on the encrypted data entries without the decryption thereof to produce an encrypted result.

    METHOD AND SYSTEM FOR DETECTING ATTACKS ON CYBER-PHYSICAL SYSTEMS USING REDUNDANT DEVICES AND SMART CONTRACTS

    公开(公告)号:US20190087571A1

    公开(公告)日:2019-03-21

    申请号:US15709259

    申请日:2017-09-19

    发明人: Shantanu Rane

    IPC分类号: G06F21/56 G06F21/55

    摘要: One embodiment facilitates detection of attacks in a cyber-physical system of interacting elements with physical inputs and outputs. During operation, the system receives, by a first entity of a plurality of entities, a first reading from a first set of sensors of the cyber-physical system via a first network. The system receives, by the first entity, a second reading from a second set of sensors of the cyber-physical system via a second network, wherein the second network includes security measures which prevent access by any external entity or any of the plurality of entities. The system executes a set of instructions based on the first reading and the second reading. The system determines that a result of the executed instructions does not match an expected condition. The system performs a remedial action based on the result.

    Fault-tolerant aggregation of encrypted data in a star network

    公开(公告)号:US10069631B2

    公开(公告)日:2018-09-04

    申请号:US15073330

    申请日:2016-03-17

    摘要: One embodiment provides a system that facilitates encrypted-domain aggregation of data in a star network. During operation, the system receives a set of ciphertexts, representing respective encrypted polynomial shares, of an input value from each participant in a plurality of participants. Each ciphertext in the set of ciphertexts is associated with a specific participant in the plurality of participants. The system computes an encrypted partial value for each participant by aggregating in the encrypted-domain a respective ciphertext associated with that participant received from the plurality of participants and sends a message comprising the encrypted partial value to that participant. This encrypted partial value is encrypted based on a public key of a corresponding participant. The system receives a decrypted partial value from each participant and computes a target value based on a set of decrypted partial values received from a set of participants in the plurality of participants.

    METHOD AND SYSTEM FOR COLLECTING SENSOR DATA IN BUILDINGS

    公开(公告)号:US20230053901A1

    公开(公告)日:2023-02-23

    申请号:US17404142

    申请日:2021-08-17

    IPC分类号: H04L12/28 G05D23/19 G05B15/02

    摘要: A system for collecting building environmental sensor data includes a first data collection device having a first transceiver that is configured to receive data from proximate building environmental sensors and a second transceiver that is configured to communicate with an external service. The device will, upon detecting that the first transceiver is within a receiving range of a first building environmental sensor, communicatively connect with the first building environmental sensor to receive a data stream that comprises sensor data captured by the first building environmental sensor. The device will continue to receive the data stream until the first transceiver either receives all of the sensor data or moves out of the receiving range. The device will repeat this process for additional building environmental sensors. The device will use its second transceiver to transfer the sensor data to the external service.

    System and method for secure two-party evaluation of utility of sharing data

    公开(公告)号:US11451527B2

    公开(公告)日:2022-09-20

    申请号:US17016073

    申请日:2020-09-09

    摘要: Embodiments described herein provide a system for improving a classifier by computing a statistic for the utility of sharing data with a second party. The system may encrypt a set of class labels based on a public key/private key pair to obtain a set of encrypted class labels. The system may send a public key and the set of encrypted class labels to a second computing device. The system may receive an encrypted value computed by the second computing device based on the public key. The system may decrypt the encrypted value based on a private key to obtain a decrypted value. The system may then send a pair of encrypted values computed based on the decrypted value to the second computing device. The system may subsequently receive an encrypted utility statistic from the second computing device, and decrypt the encrypted utility statistic to obtain a decrypted utility statistic.