SYSTEMS AND METHODS FOR PRIVACY-PRESERVING FUNCTIONAL IP VERIFICATION UTILIZING FULLY HOMOMORPHIC ENCRYPTION

• US 20160254912A1
• Filed: 02/23/2016
• Published: 09/01/2016
• Est. Priority Date: 02/26/2015
• Status: Active Grant

• Current Assignee: NEW York University in Abu Dhabi Corp
• Original Assignee: New York University
• Inventors: MANIATAKOS, Michail, Konstantinou, Charalambos, Keliris, Anastasis
• Granted Patent: US 10,079,674 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: H04L 2209/08 Randomization, e.g. dummy operations or using noise
• CPC Class Codes: H04L 2209/46 Secure multiparty computation, e.g. millionaire problem
• CPC Class Codes: H04L 9/008 involving homomorphic encryption
• CPC Class Codes: H04L 9/321 involving a third party or a trusted authority

Abstract

A privacy-preserving verification methodology for SoC computing systems is described. The verification methodology utilizes the principles of Multi-Party Computation (“MPC”), and enables meaningful manipulation of encrypted data in the encrypted domain through the use of a fully homomorphic encryption (“FHE”) scheme. In the described verification methodology, IP logic is transformed and test vectors utilized to verify the IP logic are encrypted. The parties involved in the verification (e.g., the designer, the manufacturer, a third-party verification service, etc.) can functionally verify the IP core via the encrypted test vectors while the encrypted test vectors remain in the encrypted domain. Accordingly, the IP core is verified without revealing unwarranted information, such as the underlying IP behind the SoC.

Claims

1. A method of verifying an intellectual property (“

IP”

) core with test vectors in the encrypted domain between at least two parties, the at least two parties including an IP owner and an IP user, the method comprising;

transforming, by an IP owner computing system, an IP core to a fully homomorphic encryption (“

FHE”

) compatible netlist;

generating, by an IP user computing system, a private encryption key and a public encryption key for a FHE scheme;

encrypting, by the IP user computing system, a test vector with the private encryption key to form an encrypted test vector that is encrypted according to the FHE scheme;

inputting the FHE compatible netlist, the encrypted test vector, and the public encryption key into a privacy-preserving verification (“

PPV”

) tool;

generating, by the PPV tool, an encrypted test output; and

transmitting the encrypted test output to the IP user computing system.

2. The method of claim 1, further comprising decrypting, by the IP user computing system, the encrypted test output to verify the functionality of the IP core.

3. The method of claim 1, wherein generating the encrypted test output is performed without decrypting the encrypted test vector.

4. The method of claim 1, wherein transforming the IP core to the FHE compatible netlist includes a re-synthesis operation.

5. The method of claim 4, wherein the re-synthesis operation removes multiplication operations from the netlist.

6. The method of claim 1, wherein transforming the IP core to the FHE compatible netlist includes transforming any combinational logic of the IP core to XOR gates or AND gates.

7. The method of claim 1, wherein the at least two parties further includes a verification service provider, and wherein the method further includes:

transmitting, by the IP owner computing system, the FHE compatible netlist to a verification computing system associated with the verification service provider; and

transmitting, by the IP user computing system, the encrypted test vector to the verification computing system.

8. The method of claim 7, wherein the verification computing system includes the PPV tool.

9. The method of claim 1, further comprising transmitting, by the IP user computing system, the encrypted test vector to the IP owner computing system.

10. The method of claim 9, wherein the IP owner computing system includes the PPV tool.

11. The method of claim 1, wherein the encrypted test vector includes a random factor that provides for different encrypted representations for all zeros and ones.

12. A computer-implemented machine for verifying an intellectual property (“

IP”

) core with test vectors in the encrypted domain between at least two parties, the at least two parties including an IP owner and an IP user, comprising;

a processor; and

a tangible computer-readable medium operatively connected to the processor and including computer code configured to;

transform, by an IP owner computing system, an IP core to a fully homomorphic encryption (“

FHE”

) compatible netlist;

generate, by an IP user computing system, a private encryption key and a public encryption key for a FHE scheme;

encrypt, by the IP user computing system, a test vector with the private encryption key to form an encrypted test vector that is encrypted according to the FHE scheme;

input the FHE compatible netlist, the encrypted test vector, and the public encryption key into a privacy-preserving verification (“

PPV”

) tool;

generate, by the PPV tool, an encrypted test output; and

transmit the encrypted test output to the IP user computing system.

13. The system of claim 12, wherein the computer code is further configured to decrypt, by the IP user computing system, the encrypted test output to verify the functionality of the IP core.

14. The system of claim 12, wherein generating the encrypted test output is performed without decrypting the encrypted test vector.

15. The system of claim 12, wherein transforming the IP core to the FHE compatible netlist includes a re-synthesis operation.

16. The system of claim 12, wherein transforming the IP core to the FHE compatible netlist includes transforming any combinational logic of the IP core to XOR gates or AND gates.

17. The system of claim 12, wherein the computer code is further configured to:

transmit, by the IP owner computing system, the FHE compatible netlist to a verification computing system associated with the verification service provider; and

transmit, by the IP user computing system, the encrypted test vector to the verification computing system.

18. The system of claim 12, wherein the computer code is further configured to transmit, by the IP user computing system, the encrypted test vector to the IP owner computing system.

19. The system of claim 12, wherein the encrypted test vector includes a random factor that provides for different encrypted representations for all zeros and ones.