公开(公告)号：US10599494B2

公开(公告)日：2020-03-24

申请号：US15167676

申请日：2016-05-27

Applicant: Huawei Technologies Co., Ltd.

Inventor： Yin Tan ,  Dong Jin Kim ,  Alan Pak-Lun Ho

IPC: G06F7/04 ,  G06F12/00 ,  G06F12/14 ,  G06F13/00 ,  G06F17/00 ,  G11C7/00 ,  G06F9/54 ,  G06F21/44 ,  G06F21/62

Abstract: A computer-implemented method of performing inter-process communication includes a first process in a first operating system (OS) level container in a user space sending a message to a buffer process. The message is addressed to a second process in a second OS-level container in the user space. The buffer process communicates the message to the second process. A device for performing the computer-implemented method is also provided.

公开(公告)号：US20190089530A1

公开(公告)日：2019-03-21

申请号：US15711797

申请日：2017-09-21

Applicant: Huawei Technologies Co., Ltd.

Inventor： Teng Wu ,  Yin Tan ,  Lionel Lianhong Zhang

IPC: H04L9/08 ,  H04L9/14 ,  H04L9/30 ,  H04L9/32

Abstract: A method for securely receiving a cipher key from a key provider to a key requester is provided. The method includes generating a session key shared between the key requester and the key provider, determining at least one key in accordance with the session key. The method also includes transmitting a request from the key requester to the key provider, and receiving a response from the key provider, where the response comprises an encrypted payload and an authentication tag. The method also includes authenticating the response and decrypting the encrypted payload using the at least one key to obtain the cipher key.

公开(公告)号：US12079379B2

公开(公告)日：2024-09-03

申请号：US17111007

申请日：2020-12-03

Applicant: HUAWEI TECHNOLOGIES CO., LTD.

Inventor： Denis Remezov ,  Yin Tan ,  Jingshun Chen

IPC: G06F21/85 ,  G06F12/10 ,  G06F12/14 ,  G06F13/28 ,  G06F13/40 ,  G06F13/42 ,  G06F21/44

CPC classification number: G06F21/85 ,  G06F12/10 ,  G06F12/14 ,  G06F13/28 ,  G06F13/4027 ,  G06F13/4282 ,  G06F21/44 ,  G06F2212/1052 ,  G06F2213/0026

Abstract: The disclosed systems, structures, and methods are directed to a computer system including a PCIe protection controller as a part of a PCIe root complex that includes at least one root port. Each root port is configured to optionally connect to at least one endpoint device, and each endpoint device is designated as a secure endpoint device or a nonsecure endpoint device. The PCIe protection controller is configured to control outbound traffic to protect secure endpoint devices from access from any nonsecure components of the computer system. The PCIe protection controller may be further configured to control inbound traffic to prevent access to secure memory by nonsecure endpoint devices. The PCIe protection controller may be dynamically configured at runtime to designate endpoint devices as either secure or nonsecure.

公开(公告)号：US11063754B2

公开(公告)日：2021-07-13

申请号：US15968430

申请日：2018-05-01

Applicant: Huawei Technologies Co., Ltd.

Inventor： Amirhossein Vakili ,  Yin Tan

IPC: H04L9/08 ,  H04L29/06 ,  H04L9/06 ,  H04L9/32 ,  H04L9/30 ,  H04L9/14

Abstract: Systems, devices, and methods for hybrid secret sharing are disclosed. In accordance with embodiments, a computing device may encrypt the secret message using a first encryption key to generate an encrypted secret message. The computing device may also split a second encryption key into a plurality of key shares in accordance with a threshold number. The threshold number is less than or equal to the number of the plurality of key shares. Then, the computing device may transmit a plurality of messages. Each message of the plurality of messages comprises the encrypted secret message and one of the plurality of key shares.

公开(公告)号：US20200028693A1

公开(公告)日：2020-01-23

申请号：US16037789

申请日：2018-07-17

Applicant: Huawei Technologies Co., Ltd.

Inventor： Teng Wu ,  Yin Tan

IPC: H04L9/32 ,  G06F21/57 ,  H04L9/08 ,  H04L9/30 ,  G09C5/00

Abstract: A method for verifying a property of plaintext using ciphertext is disclosed. In an embodiment, a computing device may receive the ciphertext at a trusted execution environment (TEE) of the computing device. The TEE may decrypt the ciphertext to generate the plaintext using a private encryption key of an encryption key pair. The encryption key pair comprises a public encryption key and the private encryption key. The TEE may generate a digitally signed validation result by encrypting the validation result using a private signing key of a signing key pair. The signed key pair comprises a public signing key and the private signing key. The private key is retrieved from secure memory of the computing device, and the secure memory may only be accessible by the TEE. The computing device may then transmit the digitally signed validation result.

公开(公告)号：US20190342080A1

公开(公告)日：2019-11-07

申请号：US15968430

申请日：2018-05-01

Applicant: Huawei Technologies Co., Ltd.

Inventor： Amirhossein Vakili ,  Yin Tan

IPC: H04L9/08 ,  H04L9/06 ,  H04L9/30 ,  H04L9/14 ,  H04L9/32

Abstract: Systems, devices, and methods for hybrid secret sharing are disclosed. In accordance with embodiments, a computing device may encrypt the secret message using a first encryption key to generate an encrypted secret message. The computing device may also split a second encryption key into a plurality of key shares in accordance with a threshold number. The threshold number is less than or equal to the number of the plurality of key shares. Then, the computing device may transmit a plurality of messages. Each message of the plurality of messages comprises the encrypted secret message and one of the plurality of key shares.

公开(公告)号：US11764944B2

公开(公告)日：2023-09-19

申请号：US17566337

申请日：2021-12-30

Applicant: HUAWEI TECHNOLOGIES CO., LTD.

Inventor： Haohao Liao ,  Zhiwei Shang ,  Yin Tan

IPC: H04L9/00

CPC classification number: H04L9/008 ,  H04L2209/125

Abstract: A field-programmable gate array (FPGA) cluster, comprising a plurality of FPGA devices, can be used to accelerate homomorphic encryption functionality. In particular, the FPGA cluster can accelerate the relinearization process used in homomorphic encryption by using multiple FPGA devices to perform portions of the relinearization process in parallel. Further, the use of the FPGA cluster provides sufficient memory resources to allow data used by the relinearization process, namely the keyswitch keys, to be stored on-chip.

公开(公告)号：US10567165B2

公开(公告)日：2020-02-18

申请号：US15711797

申请日：2017-09-21

Applicant: Huawei Technologies Co., Ltd.

Inventor： Teng Wu ,  Yin Tan ,  Lionel Lianhong Zhang

IPC: H04L9/08 ,  H04L9/32 ,  H04L9/14 ,  H04L9/30

Abstract: A method for securely receiving a cipher key from a key provider to a key requester is provided. The method includes generating a session key shared between the key requester and the key provider, determining at least one key in accordance with the session key. The method also includes transmitting a request from the key requester to the key provider, and receiving a response from the key provider, where the response comprises an encrypted payload and an authentication tag. The method also includes authenticating the response and decrypting the encrypted payload using the at least one key to obtain the cipher key.

公开(公告)号：US20230216656A1

公开(公告)日：2023-07-06

申请号：US17566783

申请日：2021-12-31

Applicant: HUAWEI TECHNOLOGIES CO., LTD.

Inventor： Haohao Liao ,  Zhiwei Shang ,  Yin Tan

IPC: H04L9/00 ,  H04L9/30 ,  G06F7/72 ,  G06F17/16

CPC classification number: H04L9/008 ,  H04L9/3093 ,  G06F7/728 ,  G06F17/16

Abstract: A low latency relinearization process can be performed in an FPGA cluster for accelerating homomorphic encryption. The low-latency process performs an early calculation of matrix rows to make the summation result available earlier in the relinearization to reduce waiting of subsequent operations.

公开(公告)号：US11336641B2

公开(公告)日：2022-05-17

申请号：US16830857

申请日：2020-03-26

Applicant: Huawei Technologies Co., Ltd.

Inventor： Teng Wu ,  Yin Tan ,  Stephen Sui Luen Li ,  Wei Xiong ,  Zhongyuan Zheng ,  Tao Hu

IPC: H04L29/06 ,  H04L9/00 ,  H04L9/08 ,  H04L9/32

Abstract: The present disclosure is drawn to systems and methods for implementing authentication protocols based on trusted execution environments. Each of a principal device, an identity provider server and a service provider server are associated with a respective trusted execution environment. Authentication protocols are provided for registering the principal device to the identity provider server; authenticating the principal device to the identity provider server; and authenticating the principal device to a service provider server.