Method and apparatus for performing multi-party secure computation

Abstract

Embodiments of the present specification provide a multi-party secure computing execution method and device. The method is applied to a first party in the multi-party, and includes: first, according to a target operation currently to be executed in multi-party secure computing, obtaining the communication overhead respectively corresponding to a plurality of optional protocols for implementing the target operation; then, based on the parameter information of the current network environment and the above communication overhead, determining the time cost of executing the respective corresponding protocols in the current network environment; and then selecting the protocol with the lowest time cost from the above plurality of optional protocols as the target protocol for executing the above target operation. In this way, the protocol for executing the target operation can be dynamically selected according to the current network, and the calculation speed can be accelerated.

Description

Technical Field

[0001] This specification relates to the field of data processing technology, and in particular to a method and apparatus for performing multi-party secure computation. Background Technology

[0002] Secure Multi-Party Computation (MPC), also known as multi-party secure computation, is a technique that enables multiple parties to securely compute an agreed-upon function without a trusted third party. In MPC computation, a protocol is typically negotiated beforehand, and then executed to complete the computation.

[0003] However, current practical applications place higher demands on MPC computation. Therefore, a solution is needed to better meet the needs of practical applications, such as effectively reducing computation time. Summary of the Invention

[0004] This specification describes an embodiment of a method and apparatus for performing multi-party secure computation, which accelerates computation by efficiently and dynamically selecting protocols.

[0005] According to the first aspect, a method for executing multi-party secure computation is provided, applied to the first party in a multi-party computation, comprising: obtaining the communication overhead corresponding to each of a plurality of optional protocols for implementing the target operation according to the target operation to be executed in the multi-party secure computation; determining the time cost corresponding to each optional protocol in the current network environment based on parameter information and communication overhead of the current network environment; and selecting the protocol with the lowest time cost from the plurality of optional protocols as the target protocol for executing the target operation.

[0006] In one embodiment, the plurality of optional protocols include a first protocol; obtaining the communication overhead corresponding to each of the plurality of optional protocols for implementing the target operation includes: reading the communication overhead value pre-marked for the first protocol.

[0007] In one embodiment, the plurality of optional protocols include a second protocol; obtaining the communication overhead corresponding to each of the plurality of optional protocols for implementing the target operation includes: obtaining the communication overhead expression corresponding to the second protocol; and determining the corresponding communication overhead based on the communication overhead expression.

[0008] In one specific embodiment, determining the communication overhead expression includes: selecting the unilateral communication overhead expression with the largest output from the unilateral communication overhead expressions determined by each party for each optional protocol, and using it as the communication overhead expression for that optional protocol.

[0009] In a more specific embodiment, the unilateral communication overhead expression is obtained by annotating optional protocols using a domain-specific language (DSL).

[0010] In another specific embodiment, the independent variables in the communication overhead expression include the number of parameter parties of the execution protocol, and / or the number of bits of the ring or domain on which the execution protocol is based; wherein, determining the corresponding communication overhead based on the communication overhead expression includes: determining the variable values ​​of the independent variables according to multi-party security calculations; and substituting the variable values ​​into the communication overhead expression to obtain the communication overhead.

[0011] In one embodiment, communication overhead includes communication volume overhead and communication round overhead.

[0012] In a specific embodiment, the parameter information includes network bandwidth and network latency; wherein, based on the parameter information and communication overhead of the current network environment, the time cost corresponding to each optional protocol in the current network environment is determined, including: calculating the total communication transmission duration based on network bandwidth and communication overhead; calculating the total network delay duration based on network latency and communication round overhead; and determining the time cost based on the total communication transmission duration and the total network delay duration.

[0013] In one embodiment, the first party is a designated party, and the method further includes sending the identifier of the target protocol to the other parties among the multiple parties.

[0014] In one embodiment, it further includes: performing the target operation by jointly executing the target agreement with other parties among the multiple parties.

[0015] According to the second aspect, a method for executing multi-party secure computation is provided, applied to a second party in a multi-party computation, comprising: receiving an identifier of a target protocol corresponding to a target operation to be executed in the multi-party secure computation, wherein the target protocol is selected by a first party using the method provided in the first aspect; and executing the target operation by jointly executing the target protocol with other parties in the multi-party computation.

[0016] According to a third aspect, an execution device for multi-party secure computation is provided, integrated into a first party among the multiple parties, comprising: a communication overhead acquisition unit configured to acquire the communication overhead corresponding to each of multiple optional protocols for implementing the target operation based on the target operation to be executed in the multi-party secure computation; a time cost determination unit configured to determine the time cost corresponding to each optional protocol in the current network environment based on parameter information and communication overhead of the current network environment; and a target protocol selection unit configured to select the protocol with the lowest time cost from the multiple optional protocols as the target protocol for executing the target operation.

[0017] According to the fourth aspect, an execution apparatus for multi-party secure computation is provided, integrated into a second party among the parties, comprising: a protocol identifier receiving unit configured to receive an identifier of a target protocol corresponding to a target operation to be executed in the multi-party secure computation, wherein the target protocol is selected by a first party using the method provided in the first aspect; and a protocol execution unit configured to execute the target operation by jointly executing the target protocol with other parties among the parties.

[0018] According to a fifth aspect, a computer-readable storage medium is provided having a computer program stored thereon, which, when executed in a computer, causes the computer to perform the method of the first or second aspect.

[0019] According to a sixth aspect, a computing device is provided, including a memory and a processor, wherein executable code is stored in the memory, and when the processor executes the executable code, it implements the method of the first aspect or the second aspect.

[0020] The multi-party computation execution method and apparatus disclosed in the embodiments of this specification can dynamically and efficiently select the MPC protocol with the lowest time cost based on the current network environment to execute the target operation to be executed in the secure multi-party computation, thereby accelerating the computation. Attached Figure Description

[0021] To more clearly illustrate the technical solutions of the embodiments of the present invention, the drawings used in the following description of the embodiments will be briefly introduced. Obviously, the drawings described below are only some embodiments of the present invention. For those skilled in the art, other drawings can be obtained based on these drawings without creative effort.

[0022] Figure 1 A schematic diagram illustrating an implementation architecture for multi-party secure computation according to one embodiment is shown.

[0023] Figure 2 A schematic flowchart illustrating an execution method for multi-party secure computation according to one embodiment is shown.

[0024] Figure 3 A schematic flowchart illustrating an execution method for multi-party secure computation according to another embodiment is shown.

[0025] Figure 4 A schematic diagram of the execution device for multi-party secure computation according to one embodiment is shown.

[0026] Figure 5 A schematic diagram of the execution device structure for multi-party secure computation according to another embodiment is shown. Detailed Implementation

[0027] The solution provided in this specification will now be described with reference to the accompanying drawings.

[0028] MPC protocols are often sensitive to latency and throughput, and different protocols exhibit different performance in different environments. However, current multi-party computation (MPC) processes typically select a specific protocol implementation without distinguishing its performance under different environments, resulting in the protocol only exhibiting high performance in specific scenarios.

[0029] Based on the above observations and analysis, the inventors propose an execution scheme for secure multi-party computation that dynamically adapts to the executable protocol with the lowest time cost in response to the current operation in secure multi-party computation. Figure 1 This diagram illustrates an implementation architecture for multi-party secure computation according to one embodiment, such as... Figure 1 As shown, a mapping relationship between operations and implementation protocols in multi-party secure computation is pre-established. This mapping relationship can be maintained jointly by the parties or stored locally by each party. Based on this, in response to the target operation O to be executed in the MPC computation... i Each party or group of parties selects the protocol with the lowest time cost from multiple available protocols as the target protocol A based on the parameter information of the current network environment. i t Subsequently, the multiple parties executed the target protocol P. i t Complete the target operation O i Thus, by efficiently and dynamically selecting the target protocol, the execution time of multi-party secure computation can be effectively reduced.

[0030] The specific implementation steps of the above solution are described below with reference to more embodiments. Figure 2 This diagram illustrates a flowchart of a method for performing secure multi-party computation according to one embodiment, whereby the method is applied to a first party in the multi-party computation. It should be noted that the first party can be any one of the parties; that is, each party executes the method to determine the target protocol in the secure multi-party computation. Alternatively, the first party can be a designated party in the multi-party computation, which determines the target protocol and then sends the protocol identifier to the other parties. It is understood that each party in the multi-party computation can be implemented as a device, platform, server, or device cluster, etc., with computing and processing capabilities.

[0031] like Figure 2 As shown, the method includes the following steps:

[0032] Step S210: Based on the target operation to be executed in the multi-party secure computation, obtain the communication overhead corresponding to each of the multiple optional protocols for implementing the target operation; Step S220: Based on the parameter information of the current network environment and the communication overhead, determine the time cost corresponding to each optional protocol in the current network environment; Step S230: Select the protocol with the lowest time cost from the multiple optional protocols as the target protocol for executing the target operation.

[0033] The steps above are explained in detail below:

[0034] First, in step S210, based on the target operation to be executed in the multi-party secure computation, the communication overhead corresponding to each of the multiple optional protocols that implement the target operation is obtained.

[0035] It is important to understand that multi-party computation (MPC) can involve one or more operations, and the granularity of these operations can be controlled by the operators. For example, operations can include addition, subtraction, division, and secure matrix multiplication. In MPC, each operation must be executed sequentially. For clarity, the operation to be executed will be referred to as the target operation.

[0036] For a given operation, multiple MPC protocols can be defined to implement that operation. In one embodiment, different cryptographic techniques can be used to define the protocols, such as Secret Sharing (SS), Homomorphic Encryption (HE), and Garbled Circuits (GC). In one embodiment, the generation and distribution of random numbers in the Secret Sharing protocol can be performed by an additional server or without one. Therefore, different implementation protocols can be defined for a given operation.

[0037] Different protocols incur different communication overheads. To accelerate computation, it is preferable to pre-annotate the communication overhead expressions (or communication complexity) for each protocol, allowing direct expression invocation in this step for rapid overhead calculation. It's important to understand that the annotation of communication overhead expressions is based on the calculation formulas within the protocol. In one implementation scenario, the protocol is symmetrical, meaning the calculations performed by each participant are symmetrical. In this case, annotation can be completed by any one of the parties. In this symmetrical protocol scenario, in one embodiment, each party annotates its own communication overhead expression; in another embodiment, the first party annotates the expression and sends it to the other parties; in yet another embodiment, the first party receives the annotated communication overhead expression from one of the other parties.

[0038] In another implementation scenario, the protocol is asymmetric, meaning that two or more parties use different calculation formulas. In this case, each party, assuming different roles, needs to annotate its corresponding unilateral communication overhead expression. Then, the unilateral communication overhead expression with the largest output is selected as the communication overhead expression for the protocol. In one embodiment, the expression selection can be performed by the first party and then communicated to the other parties. In another embodiment, the first party can receive the selected communication overhead expression from one of the other parties.

[0039] On the other hand, it is preferable to use a domain-specific language (DSL) suitable for annotation to annotate the communication overhead expressions of optional protocols.

[0040] On the other hand, in one embodiment, the independent variable in the communication overhead expression includes the number of participants in the protocol; it is understood that some protocols support execution by a variable number of participants, while others only support execution by a fixed number of participants. Clearly, the protocol in this embodiment belongs to the former. In another embodiment, the independent variable in the communication overhead expression includes the number of bits in the ring or domain on which the protocol is based; it is understood that rings and domains are fundamental concepts in cryptography and will not be elaborated upon. In yet another embodiment, the independent variable in the communication overhead expression includes arbitrary multi-party protocol security parameters.

[0041] Furthermore, in one embodiment, communication overhead includes communication volume overhead; in this case, the annotated communication overhead expression may include a communication volume overhead expression. In another embodiment, communication overhead includes communication round overhead; in this case, the annotated communication overhead expression may include a communication round overhead expression. In yet another embodiment, communication overhead includes computational overhead; the annotated communication overhead expression may include a computational overhead expression. It should be noted that the independent variables in the communication volume overhead expression, communication round overhead expression, and computational overhead expression may include the aforementioned number of participants or ring bits. Additionally, there are cases where the annotated communication overhead expression is a constant expression; in this case, the communication overhead expression can be directly replaced with a communication overhead value.

[0042] Based on a specific example, the traffic overhead expression comm() and the traffic round overhead expression round() for the two optional protocols corresponding to a certain operation are as follows:

[0043] For protocol f among the two optional protocols, mark it as follows:

[0044] comm(f)=2*log(k)*k+5*k (1)

[0045] round(f) = n + 5 (2)

[0046] For protocol g, the following is noted:

[0047] comm(g)=2*k*k+5*k (3)

[0048] round(g) = 2 (4)

[0049] In equations (1)-(4) above, n represents the number of participants and k represents the number of ring bits.

[0050] Based on the above, in this step, the pre-annotated communication overhead expressions for each optional protocol for the target operation can be obtained. In one embodiment, this step includes: reading the pre-annotated communication overhead value for a first optional protocol among a plurality of optional protocols.

[0051] In another embodiment, this step includes: obtaining the communication overhead expression corresponding to the second protocol among multiple optional protocols, and then determining the corresponding communication overhead based on this communication overhead expression. Specifically, based on the ongoing secure multi-party computation, the variable values ​​of the independent variables in the communication overhead expression are determined, and then substituted into the communication overhead expression to obtain the communication overhead.

[0052] Based on a specific example, assuming that the two optional protocols corresponding to the target operation in this step are the aforementioned protocol f and protocol g, the obtained communication overhead expressions include equations (1) to (4) above. Further, based on the actual ongoing secure multi-party computation, the variable values ​​of the number of participants n and the number of ring bits k are obtained, such as 4 participants and 15 bits, and equations (1)-(3) above are calculated. Thus, the communication overhead shown in Table 1 can be obtained:

[0053] Table 1

[0054] Communication overhead Communication round overhead Protocol f 110M 9 times Protocol g 525M 2 times

[0055] The above determines the communication overhead of each optional protocol for the target operation.

[0056] Next, in step S220, based on the parameter information of the current network environment and the aforementioned communication overhead, the time cost corresponding to each optional protocol in the current network environment is determined.

[0057] In one embodiment, the aforementioned parameter information includes network bandwidth, and the aforementioned communication overhead includes traffic overhead. In this case, the total communication transmission time can be calculated based on the network bandwidth and traffic overhead. For example, the quotient between traffic overhead and network bandwidth can be calculated as the total communication transmission time.

[0058] In another embodiment, the aforementioned parameter information includes network latency, and the aforementioned communication overhead includes communication round overhead. In this case, the total network latency can be calculated based on the network latency and the communication round overhead. For example, the product of the two can be calculated as the total network latency.

[0059] Furthermore, in one embodiment, the total communication transmission time or the total network latency can be directly used as the aforementioned time cost. In another embodiment, the sum of the total communication transmission time and the total network latency can also be used as the aforementioned time cost.

[0060] Based on a specific example, assuming the determined communication overhead is as shown in Table 1, and the current network parameters include a network bandwidth of 100 Mbit / s and a network latency of 0.1s, the communication time cost of protocol f can be calculated as: 110 / 100 + 9 * 0.1 = 2s, and the communication time cost of protocol g is: 525 / 100 + 2 * 0.1 = 5.45s.

[0061] Based on another specific example, assuming the determined communication overhead is as shown in Table 1, and the network bandwidth and network latency included in the current network parameter information are 200 Mbit / s and 0.5s respectively, then the communication time cost of protocol f can be calculated as: 110 / 200 + 9 * 0.5 = 5.05s, and the communication time cost of protocol g is: 525 / 200 + 2 * 0.6 = 3.825s.

[0062] From the above, we can determine the time cost of executing each optional protocol in the current network environment.

[0063] Next, in step S230, the protocol with the lowest time cost is selected from multiple optional protocols as the target protocol for performing the target operation. For example, assuming the time costs of protocol f and protocol g are 2s and 5.45s respectively, protocol f is selected as the target protocol. For another example, assuming the time costs of protocol f and protocol g are 5.05s and 3.825s respectively, protocol g is selected as the target protocol.

[0064] In this way, the selection of the target protocol can be completed. In one embodiment, the first party is the designating party, which, after determining the target protocol, sends the identifier of the target protocol to the other parties. In another embodiment, the other parties can execute locally... Figure 2 The method shown in the figure determines the target protocol.

[0065] According to another embodiment, after this step, the method further includes: the first party can achieve the target operation by jointly executing the target protocol with the other parties among the aforementioned parties.

[0066] In summary, by employing the multi-party computation execution method disclosed in the embodiments of this specification, the MPC protocol with the lowest time cost is dynamically and efficiently selected based on the current network environment to execute the target operation to be executed in the secure multi-party computation, thereby accelerating the computation.

[0067] According to another embodiment, Figure 3 A schematic flowchart illustrating an execution method for multi-party secure computation according to another embodiment is shown, wherein the method is performed by a second party among the parties. It should be noted that this second party can be any party among the parties other than the first party described above. Figure 3 As shown, the method includes the following steps:

[0068] First, in step S310, the identifier of the target protocol corresponding to the target operation to be executed in the multi-party secure computation is received, wherein the target protocol is adopted by the first party. Figure 2 The method shown in the figure is used to select the desired result.

[0069] Then, in step S320, the target operation is performed by jointly executing the target protocol with the other parties among the plurality of parties. Specifically, the corresponding target protocol can be obtained based on the received identifier, and then executed.

[0070] Corresponding to the above execution method, this description also discloses an execution device. Figure 4 A schematic diagram of an execution device for multi-party secure computation according to one embodiment is shown, the device being integrated into a first party of the multi-party computation. Figure 4 As shown, the device 400 includes:

[0071] The communication overhead acquisition unit 410 is configured to acquire the communication overhead corresponding to each of the multiple optional protocols for implementing the target operation, based on the target operation to be executed in the multi-party secure computation. The time cost determination unit 420 is configured to determine the time cost corresponding to executing each optional protocol in the current network environment, based on parameter information of the current network environment and the communication overhead. The target protocol selection unit 430 is configured to select the protocol with the lowest time cost from the multiple optional protocols as the target protocol for executing the target operation.

[0072] In one embodiment, the plurality of optional protocols include a first protocol; the communication overhead acquisition unit 410 is configured to read the communication overhead value pre-labeled for the first protocol.

[0073] In one embodiment, the plurality of optional protocols include a second protocol; the communication overhead acquisition unit 410 includes: an expression acquisition subunit 411, configured to acquire a communication overhead expression corresponding to the second protocol; and a communication overhead determination subunit 412, configured to determine the corresponding communication overhead based on the communication overhead expression.

[0074] In a specific embodiment, the determination of the communication overhead expression mentioned above includes: selecting the unilateral communication overhead expression with the largest output from the unilateral communication overhead expressions determined by each party for each optional protocol, and using it as the communication overhead expression of the optional protocol.

[0075] In a more specific embodiment, the unilateral communication overhead expression is obtained by annotating the optional protocol using a domain-specific language (DSL).

[0076] In another specific embodiment, the independent variables in the communication overhead expression include the number of parameter parties of the execution protocol, and / or the number of bits of the ring or domain on which the execution protocol is based; the communication overhead determination subunit 412 is specifically configured to: determine the variable value of the independent variable based on the multi-party security calculation; and substitute the variable value into the communication overhead expression to obtain the communication overhead.

[0077] In one embodiment, the communication overhead includes communication volume overhead and communication round overhead.

[0078] In a specific embodiment, the parameter information includes network bandwidth and network latency; the time cost determination unit 420 is specifically configured to: calculate the total communication transmission duration based on the network bandwidth and communication overhead; calculate the total network delay duration based on the network latency and communication round overhead; and determine the time cost based on the total communication transmission duration and the total network delay duration.

[0079] In one embodiment, the first party is a designated party, and the apparatus 400 further includes a protocol identifier sending unit 440 configured to send the identifier of the target protocol to the other parties among the multiple parties.

[0080] In one embodiment, the apparatus 400 further includes a target protocol execution unit 450 configured to perform the target operation by jointly executing the target protocol with other parties among the plurality of parties.

[0081] Figure 5 A schematic diagram of an execution device for multi-party secure computation according to another embodiment is shown, the device being integrated into a second party. Figure 5 As shown, the device 500 includes:

[0082] Protocol identifier receiving unit 510 is configured to receive an identifier of a target protocol corresponding to the target operation to be executed in multi-party secure computation, wherein the target protocol adopts... Figure 4 The apparatus shown is obtained; the protocol execution unit 520 is configured to perform the target operation by jointly executing the target protocol with other parties among the plurality of parties.

[0083] According to another embodiment, a computer-readable storage medium is also provided, on which a computer program is stored, which, when executed in a computer, causes the computer to perform a combination Figure 2 or Figure 3 The method described.

[0084] According to another embodiment, a computing device is also provided, including a memory and a processor, wherein the memory stores executable code, and when the processor executes the executable code, it implements a combination... Figure 2 or Figure 3 The methods described herein. Those skilled in the art will recognize that, in one or more of the examples above, the functions described in this invention can be implemented using hardware, software, firmware, or any combination thereof. When implemented in software, these functions can be stored in a computer-readable medium or transmitted as one or more instructions or code on a computer-readable medium.

[0085] The specific embodiments described above further illustrate the purpose, technical solution, and beneficial effects of the present invention. It should be understood that the above description is only a specific embodiment of the present invention and is not intended to limit the scope of protection of the present invention. Any modifications, equivalent substitutions, improvements, etc., made on the basis of the technical solution of the present invention should be included within the scope of protection of the present invention.

Claims

1. A method for performing secure multi-party computation, applied to a first party among the parties, comprising: Based on the target operation to be executed in the multi-party secure computation, obtain the communication overhead corresponding to each of the multiple optional protocols for implementing the target operation, wherein the communication overhead includes communication volume overhead and communication round overhead; Based on the parameter information of the current network environment and the communication overhead, the time cost corresponding to each optional protocol in the current network environment is determined, specifically including: calculating the total communication transmission duration based on the network bandwidth and communication overhead in the parameter information; calculating the total network delay duration based on the network latency and communication round overhead in the parameter information; and determining the time cost based on the total communication transmission duration and the total network delay duration. The protocol with the lowest time cost among the multiple optional protocols is selected as the target protocol for performing the target operation.

2. The method of claim 1, wherein, The plurality of optional protocols include a first protocol; obtaining the communication overhead corresponding to each of the plurality of optional protocols for implementing the target operation includes: Read the communication overhead value pre-marked for the first protocol.

3. The method according to claim 1, wherein, The plurality of optional protocols include a second protocol; obtaining the communication overhead corresponding to each of the plurality of optional protocols for implementing the target operation includes: Obtain the communication overhead expression corresponding to the second protocol; Based on the communication overhead expression, the corresponding communication overhead is determined.

4. The method according to claim 3, wherein, The determination of the communication overhead expression includes: From the unilateral communication overhead expressions determined by each party for each optional protocol, the unilateral communication overhead expression with the largest output is selected as the communication overhead expression for that optional protocol.

5. The method according to claim 4, wherein, The unilateral communication overhead expression is obtained by annotating the optional protocols using a domain-specific language (DSL).

6. The method according to claim 3, wherein, The independent variables in the communication overhead expression include the number of parameter sides of the executed protocol, and / or the number of bits in the ring or domain on which the executed protocol is based; wherein, determining the corresponding communication overhead based on the communication overhead expression includes: Based on the multi-party security calculation, the value of the independent variable is determined; Substituting the variable values ​​into the communication overhead expression yields the communication overhead.

7. The method according to claim 1, wherein, The first party is a designated party, and the method further includes: The identifier of the target protocol is sent to the other parties among the multiple parties.

8. The method according to claim 1, further comprising: The target operation is performed by jointly executing the target protocol with other parties among the multiple parties.

9. A method for performing secure multi-party computation, applied to a second party among the parties, comprising: Receive an identifier of a target protocol corresponding to the target operation to be executed in a multi-party secure computation, wherein the target protocol is selected by the first party using the method described in claim 1; The target operation is performed by jointly executing the target protocol with other parties among the multiple parties.

10. An execution device for multi-party secure computation, integrated into a first party of the multi-party computation, comprising: The communication overhead acquisition unit is configured to acquire the communication overhead corresponding to each of the multiple optional protocols that implement the target operation based on the target operation to be executed in the multi-party secure computation. The communication overhead includes communication volume overhead and communication round overhead. The time cost determination unit is configured to determine the time cost corresponding to each optional protocol in the current network environment based on the parameter information of the current network environment and the communication overhead. The target protocol selection unit is configured to select the protocol with the lowest time cost from the plurality of optional protocols as the target protocol for performing the target operation. The time cost determination unit is specifically configured to: calculate the total communication transmission time based on the network bandwidth and communication overhead in the parameter information; calculate the total network delay time based on the network latency and communication round overhead in the parameter information; and determine the time cost based on the total communication transmission time and the total network delay time.

11. An execution device for multi-party secure computation, integrated into a second party of the multi-party computation, comprising: The protocol identifier receiving unit is configured to receive an identifier of a target protocol corresponding to a target operation to be executed in a multi-party secure computation, wherein the target protocol is obtained using the apparatus as described in claim 10; The protocol execution unit is configured to perform the target operation by jointly executing the target protocol with other parties among the multiple parties.

12. A computer-readable storage medium having a computer program stored thereon, wherein, When the computer program is executed in the computer, it causes the computer to perform the method of any one of claims 1-9.

13. A computing device comprising a memory and a processor, wherein, The memory stores executable code, and when the processor executes the executable code, it implements the method of any one of claims 1-9.

Images