公开(公告)号：US08433892B2

公开(公告)日：2013-04-30

申请号：US13076410

申请日：2011-03-30

申请人： Shantanu Rane ,  Wei Sun ,  Manas A. Pathak ,  Bhiksha Raj

发明人： Shantanu Rane ,  Wei Sun ,  Manas A. Pathak ,  Bhiksha Raj

IPC分类号： H04L29/06

CPC分类号： H04L9/008 ,  G06N7/005 ,  H04L2209/46

摘要： A probability of an observation sequence stored at a client is evaluated securely with respect to a hidden Markov model (HMM) stored at a server. The server determines, for each state of the HMM, an encryption of a log-probability of a current element of the observation sequence. Determines, for each state of the HMM, an encryption of a log-summation of a product of a likelihood of the observation sequence based on a previous element of the observation sequence and a transition probability to the state of the HMM. Determines an encryption of a log-likelihood of the observation sequence for each state as a product of the encryption of a log-summation and an encryption of a corresponding log-probability of the current element of the observation sequence; and determines an encryption of the log-probability of the observation sequence based on the log-likelihood of the observation sequence for each state.

摘要翻译： 相对于存储在服务器中的隐马尔可夫模型（HMM），安全地评估存储在客户端的观察序列的概率。 对于HMM的每个状态，服务器确定观察序列的当前元素的对数概率的加密。 确定对于HMM的每个状态，基于观测序列的先前元素和HMM状态的转移概率，对观测序列的可能性的乘积的对数加和进行加密。 确定每个状态的观察序列的对数似然度的加密，作为对数求和的加密和观察序列的当前元素的相应对数概率的加密的乘积; 并且基于每个状态的观察序列的对数似然度来确定观察序列的对数概率的加密。

公开(公告)号：US20120254612A1

公开(公告)日：2012-10-04

申请号：US13076410

申请日：2011-03-30

申请人： Shantanu Rane ,  Wei Sun ,  Manas A. Pathak ,  Bhiksha Raj

发明人： Shantanu Rane ,  Wei Sun ,  Manas A. Pathak ,  Bhiksha Raj

IPC分类号： G06N5/02 ,  H04L9/32

CPC分类号： H04L9/008 ,  G06N7/005 ,  H04L2209/46

摘要： A probability of an observation sequence stored at a client is evaluated securely with respect to a hidden Markov model (HMM) stored at a server. The server determines, for each state of the HMM, an encryption of a log-probability of a current element of the observation sequence. Determines, for each state of the HMM, an encryption of a log-summation of a product of a likelihood of the observation sequence based on a previous element of the observation sequence and a transition probability to the state of the HMM. Determines an encryption of a log-likelihood of the observation sequence for each state as a product of the encryption of a log-summation and an encryption of a corresponding log-probability of the current element of the observation sequence; and determines an encryption of the log-probability of the observation sequence based on the log-likelihood of the observation sequence for each state.

摘要翻译： 相对于存储在服务器中的隐马尔可夫模型（HMM），安全地评估存储在客户端的观察序列的概率。 对于HMM的每个状态，服务器确定观察序列的当前元素的对数概率的加密。 确定对于HMM的每个状态，基于观测序列的先前元素和HMM状态的转移概率，对观测序列的可能性的乘积的对数加和进行加密。 确定每个状态的观察序列的对数似然度的加密，作为对数求和的加密和观察序列的当前元素的相应对数概率的加密的乘积; 并且基于每个状态的观察序列的对数似然度来确定观察序列的对数概率的加密。

公开(公告)号：US20110135096A1

公开(公告)日：2011-06-09

申请号：US12631974

申请日：2009-12-07

申请人： Shantanu Rane ,  Wei Sun ,  Anthony Vetro

发明人： Shantanu Rane ,  Wei Sun ,  Anthony Vetro

IPC分类号： H04L9/30 ,  H04L9/08

CPC分类号： H04L9/3093 ,  H04L9/008

摘要： A system and a method for determining a result of applying a function to signals is disclosed. The function is a polynomial function including monomials, in which the first signal in a first power forming a first part of the monomial and the second signal in a second power forming a second part of the monomial, wherein the first part of the monomial encrypted with a key is a first encrypted signal, and the second part of the monomial encrypted with the key is a second encrypted signal, comprising the steps of transmitting a first input signal encrypted with a second public key to the second processor, wherein the first input signal includes the first encrypted signal, transmitting a second input signal encrypted with a first public key to the first processor, wherein the second input signal includes a product of the first encrypted signal and the second encrypted signal.

摘要翻译： 公开了一种用于确定将功能应用于信号的结果的系统和方法。 该函数是包括单项式的多项式函数，其中形成单项式的第一部分的第一功率中的第一信号和形成单项式的第二部分的第二功率中的第二信号，其中单项的第一部分用 密钥是第一加密信号，并且用密钥加密的单项项的第二部分是第二加密信号，包括以下步骤：向第二处理器发送用第二公钥加密的第一输入信号，其中第一输入信号 将第一加密信号包括在第一处理器中传送用第一公开密钥加密的第二输入信号，其中第二输入信号包括第一加密信号和第二加密信号的乘积。

公开(公告)号：US20130339814A1

公开(公告)日：2013-12-19

申请号：US13525209

申请日：2012-06-15

申请人： Shantanu Rane ,  Wei Sun

发明人： Shantanu Rane ,  Wei Sun

IPC分类号： H03M13/05 ,  G06F11/10

CPC分类号： G06F11/08 ,  H03M13/05

摘要： A message is stored and processed by an untrusted third party by generating a codeword using a selected one of a set of error correcting codes (ECC). The selected ECC depends on a weight rate of the block, and each codeword satisfies a minimum distance criterion with respect to the codewords of all possible ECCs and all possible weight rates. Each symbol of the codeword is modifying explicitly, randomly and independently according to parameters of a channel to obtain a randomized codeword. Then, an encoded result of an operation performed on the randomized codeword by the untrusted third party is decoded.

摘要翻译： 消息由不可信第三方通过使用一组纠错码（ECC）中选择的一个生成码字来存储和处理。 选择的ECC取决于块的权重率，并且每个码字相对于所有可能的ECC的码字和所有可能的权重率满足最小距离标准。 代码字的每个符号根据信道的参数被明确，随机和独立地修改以获得随机码字。 然后，解码由不可信第三方对随机码字执行的操作的编码结果。

公开(公告)号：US08433893B2

公开(公告)日：2013-04-30

申请号：US13076418

申请日：2011-03-30

申请人： Wei Sun ,  Shantanu Rane

发明人： Wei Sun ,  Shantanu Rane

IPC分类号： H04L29/06

CPC分类号： H04L9/00 ,  G09C1/00 ,  H04L9/008 ,  H04L2209/42

摘要： Parameters of a hidden Markov model (HMM) are determined by a server based on an observation sequence stored at a client, wherein the client has a decryption key and an encryption key of an additively homomorphic cryptosystem, and the server has only the encryption key. The server initializes parameters of the HMM and updates the parameters iteratively until a difference between a probability of the observation sequence of a current iteration and a probability of the observation sequence of a previous iteration is above a threshold, wherein, for each iteration, the parameters are updated based on an encrypted conditional joint probability of each pair of states given the observation sequence and the parameters of the HMM, wherein the encrypted conditional probability is determining in an encrypted domain using a secure multiparty computation (SMC) between the server and the client.

摘要翻译： 隐马尔可夫模型（HMM）的参数由服务器基于存储在客户端的观察序列确定，其中客户端具有加密同态密码系统的解密密钥和加密密钥，并且服务器仅具有加密密钥。 服务器初始化HMM的参数并重复更新参数，直到当前迭代的观察序列的概率与先前迭代的观察序列的概率之间的差异高于阈值，其中，对于每次迭代，参数 基于给定观察序列和HMM的参数的每对状态的加密条件联合概率更新，其中加密的条件概率在加密域中使用服务器和客户端之间的安全多方计算（SMC）来确定 。

公开(公告)号：US08416955B2

公开(公告)日：2013-04-09

申请号：US12631974

申请日：2009-12-07

申请人： Shantanu Rane ,  Wei Sun ,  Anthony Vetro

发明人： Shantanu Rane ,  Wei Sun ,  Anthony Vetro

IPC分类号： H04L9/08

CPC分类号： H04L9/3093 ,  H04L9/008

摘要： A system and a method for determining a result of applying a function to signals is disclosed. The function is a polynomial function including monomials, in which the first signal in a first power forming a first part of the monomial and the second signal in a second power forming a second part of the monomial, wherein the first part of the monomial encrypted with a key is a first encrypted signal, and the second part of the monomial encrypted with the key is a second encrypted signal, comprising the steps of transmitting a first input signal encrypted with a second public key to the second processor, wherein the first input signal includes the first encrypted signal, transmitting a second input signal encrypted with a first public key to the first processor, wherein the second input signal includes a product of the first encrypted signal and the second encrypted signal.

摘要翻译： 公开了一种用于确定将功能应用于信号的结果的系统和方法。 该函数是包括单项式的多项式函数，其中形成单项式的第一部分的第一功率中的第一信号和形成单项式的第二部分的第二功率中的第二信号，其中单项的第一部分用 密钥是第一加密信号，并且用密钥加密的单项项的第二部分是第二加密信号，包括以下步骤：向第二处理器发送用第二公钥加密的第一输入信号，其中第一输入信号 将第一加密信号包括在第一处理器中传送用第一公开密钥加密的第二输入信号，其中第二输入信号包括第一加密信号和第二加密信号的乘积。

公开(公告)号：US08311213B2

公开(公告)日：2012-11-13

申请号：US12631939

申请日：2009-12-07

申请人： Shantanu Rane ,  Wei Sun ,  Anthony Vetro

发明人： Shantanu Rane ,  Wei Sun ,  Anthony Vetro

IPC分类号： H04L29/00

CPC分类号： H04L9/008

摘要： Embodiments of the invention discloses a system and a method for determining a result of applying a function to signals including a first signal and a second signal, wherein the function is a polynomial function of the signals such that a monomial in the function includes the first signal having a power less than or equal to a first maximum power, and wherein the first signal is partitioned into a first subsignal and a second subsignal, comprising a processor for performing steps of the method, comprising the steps of acquiring a second signal and a second subsignal; acquiring a set of encrypted powers of the first subsignal, wherein the set of encrypted powers of the first subsignal includes homomorphically encrypted powers of the first subsignal; and determining an encrypted result of the function based on a second subsignal, the set of encrypted powers of the first subsignal, and the second signal.

摘要翻译： 本发明的实施例公开了一种用于确定对包括第一信号和第二信号的信号应用功能的结果的系统和方法，其中所述函数是所述信号的多项式函数，使得所述函数中的单项包括所述第一信号 具有小于或等于第一最大功率的功率，并且其中所述第一信号被划分为第一子信号和第二子信号，包括用于执行所述方法的步骤的处理器，包括以下步骤：获取第二信号和第二信号 次信号 获取所述第一子信号的一组加密功率，其中所述第一子信号的加密功率集合包括所述第一子信号的同态加密功率; 以及基于第二子信号确定所述函数的加密结果，所述第一子信号的加密功率集合和所述第二信号。

公开(公告)号：US08891762B2

公开(公告)日：2014-11-18

申请号：US12965066

申请日：2010-12-10

申请人： Shantanu Rane ,  Wei Sun

发明人： Shantanu Rane ,  Wei Sun

IPC分类号： H04L29/06 ,  H04L9/08

CPC分类号： H04L9/0819 ,  H04L9/008 ,  H04L2209/46

摘要： A system and a method select an encrypted element in an encrypted vector according to an order of the encrypted element in the encrypted vector. The selecting is performed in a privacy-preserving manner. Values of the elements of the encrypted vector are scaled, such that the order of the elements in the encrypted vector is preserved, and then permuted to produce a scaled permuted vector. Information in the encrypted domain indicative of an order of elements in the scaled permuted vector is provided to a second processor having a private key. The second processor decrypts the information to determine the index of the encrypted element based on the order of the elements. The encrypted element is obliviously selected based on the index.

摘要翻译： 系统和方法根据加密向量中加密元素的顺序选择加密向量中的加密元素。 以隐私保护的方式执行选择。 加密矢量的元素的值被缩放，使得保存加密矢量中的元素的顺序，然后被排列以产生缩放的置换向量。 将表示缩放置换向量中的元素的顺序的加密域中的信息提供给具有私钥的第二处理器。 第二处理器根据元素的顺序解密信息以确定加密元素的索引。 基于索引忽略加密元素。

公开(公告)号：US08750508B2

公开(公告)日：2014-06-10

申请号：US13525218

申请日：2012-06-15

申请人： Shantanu Rane ,  Wei Sun

发明人： Shantanu Rane ,  Wei Sun

IPC分类号： G06F21/00

CPC分类号： H04L63/0428 ,  H04L41/069 ,  H04L63/0407

摘要： Data is generated in a client based on events at a client, wherein each event is associated with a first dimension, a second dimension and a quantity. A random value is generated for each interval of the first dimension and each instance of the second dimension. The quantity of each event is modified using the random value to determine a modified quantity. A running total for each interval of the first dimension and each instance of the second dimension is determined using the modified quantities and transmitted to an untrusted third party. An exact result of processing the modified quantities and the running totals by the untrusted third party can then be received and decoded by the client.

摘要翻译： 基于客户机上的事件在客户端中生成数据，其中每个事件与第一维度，第二维度和数量相关联。 为第一维度和第二维度的每个实例的每个间隔生成随机值。 使用随机值修改每个事件的数量以确定修改的数量。 使用修改的数量确定第一维度的每个间隔和第二维度的每个实例的运行总计并传送到不可信的第三方。 然后可以由客户接收并解码由不可信第三方处理修改的数量和运行总计的确切结果。

公开(公告)号：US08402263B2

公开(公告)日：2013-03-19

申请号：US13076424

申请日：2011-03-31

申请人： Wei Sun ,  Shantanu Rane

发明人： Wei Sun ,  Shantanu Rane

IPC分类号： H04L29/06

CPC分类号： H04L9/008 ,  G06N7/005 ,  H04L2209/46 ,  H04L2209/50

摘要： A most likely sequence of states corresponding to an observation sequence stored at a client is determined securely with respect to a HMM stored at a server. An encryption of a log-probability of the current element of the observation sequence is determined for each state of the HMM. A product of an encryption of the log-probability of the state for the current element, an encryption of a transition probability to the state, and the encryption of a log-probability of the current element of the observation sequence is determined iteratively, for each state of the HMM, to produce an encrypted matrix of indexes of the states; and the encrypted matrix is transmitted to the client.

摘要翻译： 相对于存储在服务器中的HMM，安全地确定对应于存储在客户端的观察序列的最可能的状态序列。 针对HMM的每个状态确定对观察序列的当前元素的对数概率的加密。 对于每一个，迭代地确定对当前元素的状态的对数概率的加密，对状态的转移概率的加密以及观察序列的当前元素的对数概率的加密的乘积 HMM的状态，以产生状态索引的加密矩阵; 并将加密的矩阵传送给客户端。