Binary multiplication pair generation control method, device and storage medium based on ROT

Abstract

The present invention relates to a binary multiplication pair generation control method based on ROT, which specifically includes the following steps: S1, the sender and the receiver generate mutually related random numbers through the RROT service module of the offline service module in the service layer; S2, the sender and the receiver decouple the two sets of generated mutually related random numbers through the BMT service module of the offline service module in the service layer to obtain binary multiplication triples and save them to the storage layer; S3, the binary multiplication triples are sent to the online service module of the service layer for privacy calculation. Compared with the prior art, the present invention has the advantages of reducing the online calculation amount and network communication amount of privacy calculation, and improving the generation efficiency of binary multiplication pairs.

Description

Technical Field

[0001] The present invention relates to the technical field of data privacy protection, and in particular to a binary multiplication pair generation control method, device and storage medium based on ROT. Background Art

[0002] In the era of big data networking, the privacy protection of sensitive data has become a prominent issue that needs to be addressed urgently. In particular, with the introduction of various privacy protection laws at home and abroad in recent years, major projects involving sensitive data have been stranded due to the lack of privacy protection for key data. In order to enable data to flow without being exposed (available but not visible), privacy computing, as a major tool and means, plays an important role in a series of environments that require privacy protection, such as blockchain and federated learning.

[0003] In common privacy computing, operators of two-party privacy-preserving computing, such as two-party secure arithmetic operations and comparison operations, have become the basis for building privacy computing. However, due to the computational overhead and network overhead of existing implementation solutions, existing solutions cannot improve computing efficiency when dealing with large-scale data operations.

[0004] One of the schemes that can realize the generation of multiplication pairs in the prior art is a generation method based on homomorphic encryption. The bottleneck of this scheme is reflected in two aspects. First, due to the introduction of the semi-homomorphic encryption algorithm, for the generation of a large number of binary multiplication triples (BMT), its computational performance depends entirely on the speed of the underlying semi-homomorphic encryption scheme. As we all know, the speed of semi-homomorphic encryption is much slower than that of symmetric encryption operations. Therefore, this is a factor that limits the widespread use of this scheme; second, since the ciphertext of the semi-homomorphic encryption algorithm is at least 32 times larger than the plaintext, the overhead of network communication will be significantly increased during the transmission process.

[0005] The second existing technical solution is to use random oblivious transmission (ROT) to realize the generation of BMT. Before introducing the second existing technical solution, the function of ROT is introduced. First, ROT requires that the computing parties are divided into two roles, namely the sender and the receiver. For the sender, after ROT, the sender will receive two random bit strings of length λ (s 0 ,s 1 ); For the receiver, the receiver needs to take a selection bit b as input. After ROT, the receiver will receive s b The disadvantage of the second prior art solution is that for ROT, the receiver needs to first input a selection bit, so b 0 and b 1The value of must be determined before ROT is performed. This makes the operation of ROT dependent on the selection of random numbers, which is seriously disadvantageous to the early generation of ROT (that is, ROT must be coupled in the BMT generation process). In addition, since the generation of ROT consumes a lot of bandwidth, the online network communication overhead of the entire solution is relatively large. Summary of the invention

[0006] The purpose of the present invention is to overcome the defects of the above-mentioned prior art and to provide a binary multiplication pair generation control method, device and storage medium based on ROT, which reduces online computing and network communication volume by completely decoupling the random number-related generation process and the operation of ROT from the BMT generation process.

[0007] The purpose of the present invention can be achieved by the following technical solutions:

[0008] A binary multiplication pair generation control method based on random oblivious transmission is provided. The service layer and the storage layer are used to calculate the binary multiplication pairs in privacy computing. The service layer includes an offline service module and an online service module. The offline service module includes an RROT service module and a BMT service module. The method specifically includes the following steps:

[0009] S1. The sender and receiver generate mutually related random numbers through the RROT service module;

[0010] S2, the sender and the receiver decouple the two sets of generated interrelated random numbers through the BMT service module to obtain a binary multiplication triplet;

[0011] S3, the binary multiplication triplet is sent to the online service module for privacy calculation.

[0012] The process of the BMT service module decoupling to obtain the binary multiplication triplet is specifically as follows:

[0013] S21, sender P 0 make p=s 0 , the receiver P 1 Let a 1 =x,q=s x ;

[0014] S22, sender P 0 make p'=t 0 , the receiver P 1 Let b 1 =y,q'=t y ;

[0015] S23, sender P0 make Receiver P 1 make

[0016] Among them, (s 0 ,s 1 ,t 0 ,t 1 ) is the random number obtained by the sender, (x,s x ,y,t y ) is the random number obtained by the receiver, (a 0 ,b 0 ,c 0 ) and (a 1 ,b 1 ,c 1 ) is a binary multiplication triple, p, p', q and q' are process parameters, It is the XOR operation in binary operation.

[0017] Furthermore, the binary multiplication triple satisfies the following formula:

[0018]

[0019] Among them, a 0 , b 0 , c 0 , a 1 , b 1 , c 1 Represents random bits, and ∧ is the AND operation in binary operations.

[0020] Furthermore, the random number (s 0 ,s 1 ,t 0 ,t 1 ) are all subjected to the modulo 2 operation, and the receiver obtains s x and t y It also undergoes the modulo 2 operation.

[0021] The sender and the receiver adopt a randomly selected random oblivious transmission scheme in the RROT service module, wherein the sender obtains two completely random bit strings and the receiver receives a random bit and a message corresponding to the bit.

[0022] The data obtained in the service layer is stored in the storage layer in the form of a Redis cluster.

[0023] Furthermore, the RROT service module, the BMT service module and the online service module are all connected to the storage layer and perform data storage.

[0024] Furthermore, the BMT service module is connected to the online service module and the storage layer at the same time.

[0025] A binary multiplication pair generation control device based on ROT comprises a memory, a processor and a program. The program is stored in the memory and executed by the processor. The processor implements the control method when executing the program.

[0026] A storage medium for generating binary multiplication pairs based on ROT includes a program, and when the program is executed, the control method is realized.

[0027] If the offline service module generates too much random number information, the information is exported from Redis to a file or a database.

[0028] Compared with the prior art, the present invention has the following beneficial effects:

[0029] 1. Compared with the scheme based on semi-homomorphic encryption (PHE), the computational efficiency of the present invention is much higher than that of the scheme based on PHE. Taking the existing mature PHE scheme Paillier encryption as an example, it takes about 0.1ms-1ms to complete a semi-homomorphic operation. Therefore, the computational time to generate a BMT is at least 0.5ms. However, the technology described in this scheme only requires hash functions and XOR operations to complete. The computational efficiency of common hash functions such as SHA1 and SHA256 is about 1 microsecond to 10 microseconds. Therefore, the present invention effectively improves the efficiency of generating binary multiplication pairs.

[0030] 2. Compared with the ROT-based solution, the ROT solution requires both parties to complete two data transmissions of at least 256 bits to complete the generation of the BMT pair, while the solution in the present invention only requires RROT communication in the offline phase, so there will be a 256-fold reduction in the communication volume, that is, it can be completed without any communication, effectively reducing the network transmission volume of privacy computing and improving the transmission performance of the privacy network.

[0031] 3. The decoupling of RROT in the BMT generation process in the present invention is also a very important and critical step, which directly leads to major changes in the system architecture and the improvement of the scalability of the entire service process (when the performance requirements of RROT service or BMT service increase, the computing / storage performance of the corresponding service can be increased according to the corresponding needs), effectively improving the scalability of privacy computing. BRIEF DESCRIPTION OF THE DRAWINGS

[0032] Figure 1 It is a structural schematic diagram of the present invention. DETAILED DESCRIPTION

[0033] The present invention is described in detail below in conjunction with the accompanying drawings and specific embodiments. This embodiment is implemented based on the technical solution of the present invention, and provides a detailed implementation method and specific operation process, but the protection scope of the present invention is not limited to the following embodiments.

[0034] Example

[0035] like Figure 1 As shown, a binary multiplication pair generation control method based on random oblivious transmission requires minimal online communication. The service layer and the storage layer perform the calculation of binary multiplication pairs in privacy computing. The service layer includes an offline service module and an online service module. The offline service module includes a RROT service module and a BMT service module. Specifically, the following steps are included:

[0036] S1. The sender and receiver generate mutually related random numbers through the RROT service module;

[0037] S2, the sender and the receiver decouple the two sets of generated interrelated random numbers through the BMT service module to obtain a binary multiplication triplet;

[0038] S3, the binary multiplication triplet is sent to the online service module for privacy calculation.

[0039] The process of the BMT service module decoupling to obtain the binary multiplication triplet is as follows:

[0040] S21, sender P 0 make p=s 0 , the receiver P 1 Let a 1 =x,q=s x ;

[0041] S22, sender P 0 make p'=t 0 , the receiver P 1 Let b 1 =y,q'=t y ;

[0042] S23, sender P 0 make Receiver P 1 make

[0043] Among them, (s 0 ,s 1 ,t 0 ,t 1 ) is the random number obtained by the sender, (x,s x ,y,t y) is the random number obtained by the receiver, (a 0 ,b 0 ,c 0 ) and (a 1 ,b 1 ,c 1 ) is a binary multiplication triple, p, p', q and q' are process parameters, It is the XOR operation in binary operation.

[0044] Binary multiplication triplets satisfy the following formula:

[0045]

[0046] Among them, a 0 , b 0 , c 0 , a 1 , b 1 , c 1 Represents random bits, and ∧ is the AND operation in binary operations.

[0047] The random number (s) obtained by the sender 0 ,s 1 ,t 0 ,t 1 ) are all modulo 2, and the receiver obtains s x and t y It also undergoes the modulo 2 operation.

[0048] The sender and the receiver use a randomly selected random oblivious transmission scheme in the RROT service module, where the sender obtains two completely random bit strings and the receiver receives a random bit and the message corresponding to the bit.

[0049] The data obtained in the service layer is stored in the storage layer in the form of a Redis cluster.

[0050] The RROT service module, BMT service module and online service module are all connected to the storage layer and store data.

[0051] The BMT service module is connected to both the online service module and the storage layer.

[0052] A binary multiplication pair generation control device based on ROT comprises a memory, a processor and a program. The program is stored in the memory and executed by the processor. The processor implements a control method when executing the program.

[0053] A binary multiplication pair generation storage medium based on ROT includes a program, and the program implements a control method when being executed.

[0054] If the offline service module generates too much random number information, this information will be exported from Redis to a file or database.

[0055] In specific implementation, the service layer consists of the offline RROT service module and the BMT service module. Among these two services, the RROT service module provides offline services for the BMT service module. When BMT needs to be called by the online service module, it can also be calculated directly through the BMT stored in the Redis cluster of the storage layer.

[0056] In addition, it should be noted that the specific embodiments described in this specification may be named differently, and the above contents described in this specification are merely examples of the structure of the present invention. Any equivalent changes or simple changes made based on the structure, features and principles of the present invention are included in the protection scope of the present invention. Those skilled in the art of the present invention may make various modifications or supplements to the specific examples described or adopt similar methods, as long as they do not deviate from the structure of the present invention or exceed the scope defined by the claims, they should all fall within the protection scope of the present invention.

Claims

1. A binary multiplication pair generation control method based on random oblivious transfer (ROT). It is characterized in that The specific steps include: S1. The sender and the receiver generate mutually related random numbers through the RROT service module of the offline service module in the service layer; S2. The sender and the receiver obtain binary multiplication triples based on the two sets of interrelated random numbers generated by the BMT service module of the offline service module in the service layer and save them to the storage layer; S3, the binary multiplication triples are sent to the online service module of the service layer for privacy calculation; The process of the BMT service module decoupling to obtain the binary multiplication triplet is specifically as follows: S21. Sender make , , the receiver make , ; S22. Sender make , , the receiver make , ; S23. Sender make , the receiver make ; in, is the random number obtained by the sender, is the random number obtained by the receiver, and is a binary multiplication triple, , , and is the process parameter, It is the XOR operation in binary operation; The binary multiplication triples satisfy the following formula: in, represents random bits, It is the AND operation in binary operation.

2. According to claim 1, a binary multiplication pair generation control method based on random oblivious transmission (ROT), It is characterized in that The random number obtained by the sender After the modulo operation of 2, the receiver obtains and It also undergoes the modulo 2 operation.

3. The method for controlling the generation of binary multiplication pairs based on random oblivious transmission (ROT) according to claim 1, It is characterized in that The sender and the receiver adopt a randomly selected random oblivious transmission scheme in the RROT service module, wherein the sender obtains two completely random bit strings and the receiver receives a random bit and a message corresponding to the bit.

4. The method for controlling the generation of binary multiplication pairs based on random oblivious transmission (ROT) according to claim 1, It is characterized in that The data obtained in the service layer is stored in the storage layer in the form of a Redis cluster.

5. The method for controlling the generation of binary multiplication pairs based on random oblivious transmission (ROT) according to claim 4, It is characterized in that The RROT service module, the BMT service module and the online service module are all connected to the storage layer and store data.

6. A binary multiplication pair generation control method based on random oblivious transmission (ROT) according to claim 5, It is characterized in that The BMT service module is connected to both the online service module and the storage layer.

7. A binary multiplication pair generation control device based on random oblivious transfer ROT, It is characterized in that The invention comprises a memory, a processor and a program, wherein the program is stored in the memory and executed by the processor, and the processor implements the control method described in any one of claims 1 to 6 when executing the program.

8. A binary multiplication pair generation storage medium based on random oblivious transfer (ROT), It is characterized in that The invention comprises a program, which implements the control method described in any one of claims 1 to 6 when being executed.

Images