Intuit, Inc.

Margarita Vald

Yaron Sheffer

Yehezkel Shraga Resheff

Sergey Banshats

Boaz Sapir

Olla Nasirov

Gleb Keselman

Laetitia Kahn

Yair Horesh

Shimon Shahar

Dan Sharon

Tzvika Barenholz

Elad Shmidov

Yerucham Meir Berkowitz

Liron London

Julia Zarubinsky

Adi Akavia

Vadim Belov

Yehezkel S Resheff

Certain aspects of the disclosure provide a method for performing data verification. The method includes generating a MAC by applying a tagging algorithm indicated by a shared verification key to a data item; appending the MAC to the data item; generating an encrypted dataset comprising an encrypted data item and encrypted message authentication; generating a re-encryption key based on a homomorphic secret key corresponding to the homomorphic public key and a new public key; generating a re-encrypted dataset comprising a re-encrypted data item and a re-encrypted MAC; transmitting the re-encrypted dataset to a first external system configured to perform data verification; receiving, from the first external system, an encrypted verification result based on the shared verification key; and taking an action based on receiving the verification result indicating that the data item is authentic.

Privacy-preserving authenticated key rotation

A processor may receive a request to perform an operation. The processor may generate a seed derived from data required to perform the operation. The processor may generate a perturbation based on inputting the seed into a pseudorandom number generator. The processor may generate the actual result based on performing the operation. The processor may generate a perturbed result, wherein generating the perturbed result may comprise performing a second operation based on the actual result and the perturbation. The processor may return the perturbed result in response to the request.

Data services with privacy preservation and repeatability

Systems and methods that may be used to provide policies and protocols for blocking decryption capabilities in symmetric key encryption using a unique protocol in which key derivation may include injecting a random string into each key derivation. For example, a policy may be assigned to each client device indicating whether the client device has been assigned encryption only permission or full access permission to both encrypt and decrypt data. The disclosed protocol prevents client devices with encryption only permission from obtaining keys for decryption.

Systems and methods for blocking decryption capabilities in symmetric key encryption

A method includes receiving event strings from source code repositories, creating, for the source code repositories, digests of keywords, receiving log strings, and aggregating the log strings into a log group. The method further includes comparing the digests to the log group to generate scores, whereby the scores correlate the digests to the log group. The method further includes selecting a source code repository from the source code repositories according to the scores, and associating the log group to a service corresponding to the source code repository, where the source code repository corresponds to the digest with a highest score.

System and method for associating logs to repositories using source code

Systems and methods that may be used to provide multitenant key derivation and management using a unique protocol in which key derivation may be executed between the server that holds the root key and a client that holds the derivation data and obtains an encryption key. In one or more embodiments, the derivation data may be hashed. The disclosed protocol ensures that the server does not get access to or learn anything about the client's derived key, while the client does not get access to or learn anything about the server's root key.

System and method for multitenant key derivation

Systems and methods that may implement an Oracle-aided protocol for producing and using FHE encrypted data. The systems and methods may initially encrypt and store input data in one encrypted form that is not performed using FHE, which does not substantially increase the size of the data and storage resources required to store the encrypted data. In accordance with the Oracle-aided protocol, the encrypted data is re-encrypted as FHE encrypted data when FHE encrypted data is required.

Oracle-aided protocol for compact data storage for applications using computations over fully homomorphic encrypted data

Systems and methods for securely verifying integrity of application responses are disclosed. One example method includes receiving, from a client, an application encrypted in accordance with a fully homomorphic encryption (FHE) algorithm, generating, with a trained machine learning model associated with the FHE algorithm, a plurality of first application labels, each first application label indicating a true or false response associated with the application, inverting a randomly selected portion of the plurality of first application labels, generating a first randomly sorted list including the plurality of first application labels, transmitting the first randomly sorted list to the client, receiving a first decrypted list from the client, performing a validation of at least the first decrypted list, the validation based at least in part on the plurality of first application labels, and in response to the validation being successful, providing the client with a response to the application.

Integrity protection for homomorphic computations

Certain aspects of the present disclosure provide techniques for performing computations on encrypted data. One example method generally includes obtaining, at a computing device, encrypted data, wherein the encrypted data is encrypted using fully homomorphic encryption and performing at least one computation on the encrypted data while the encrypted data remains encrypted. The method further includes identifying a clear data operation to perform on the encrypted data and transmitting, from the computing device to a server, a request to perform the clear data operation on the encrypted data, wherein the request includes the encrypted data. The method further includes receiving, at the computing device in response to the request, encrypted output from the server, wherein the encrypted output is of the same size and the same format for all encrypted data transmitted to the server.

Privacy preserving oracle

Systems and methods that approximate and use branching operations on data encrypted by fully homomorphic encryption (FHE). The systems and methods may use polynomial approximation to convert 'if' statements into 'soft if' statements that may be applied to the FHE encrypted data in a manner that preserves the security of the systems and methods.

Growing community of inventors

Tel Aviv, Israel

Margarita Vald