Multi-party secure summation method and system

Abstract

The invention provides a multi-party security summation method and system, belongs to the technical field of multi-party security calculation, and is used for solving the problem that the task of multi-party security calculation of the sum of all data in a data group is difficult to achieve in the related technology. Each participant randomly splits own original data into agreed first preset integer parts; each participant respectively substitutes the split original data into at least two agreed preset functions to obtain at least two substituted function values, the preset functions are first preset integer element functions, the sum of all the preset functions is the sum of independent variables multiplied by a second preset constant, and the second preset constant is non-zero; the participant sends all the substituted function values to the target party, so that the target party calculates the sum of all the function values; and the sum of all function values calculated by the target party is divided by an agreed second preset constant to be equal to the sum of the original data held by all the participants, so that multi-party security summation can be realized.

Description

Technical Field

[0001] The present application relates to the technical field of multi-party secure computing, and in particular to a method and system for multi-party secure summation. Background Art

[0002] Multi-party secure computing is to solve the problem of collaborative computing between a group of mutually distrusting parties to protect privacy. Secure multi-party computing must ensure the independence of inputs and the correctness of calculations, while not leaking input values ​​to other members participating in the calculation. It mainly aims at the problem of how to securely calculate an agreed function without a trusted third party. Secure multi-party computing plays an important role in scenarios such as electronic elections, electronic voting, electronic auctions, secret sharing, and threshold signatures. In actual multi-party secure computing tasks, providing targeted secure multi-party computing algorithms with the goal of achieving computing tasks is a problem that technicians in this field have been working to solve. Summary of the invention

[0003] The present application provides a method and system for secure multi-party summation, which can accomplish the task of secure multi-party calculation of the sum of all data in a data group.

[0004] In a first aspect, the present application provides a method for multi-party secure summation. The multi-party includes a target party and multiple participating parties, and the method includes: as one of the participating parties, Randomly split the original data held by itself into the agreed first preset integer number of parts; Substituting the split original data into at least two predetermined preset functions respectively to obtain at least two substituted function values, wherein the predetermined functions are all first predetermined integer-valued functions, and the sum of all the predetermined functions is the sum of each independent variable times a second predetermined constant, and the second predetermined constant is non-zero; All function values ​​are sent to the target party, so that the target party obtains the sum of the original data of all participants by dividing the sum of all function values ​​of all participants by the agreed second preset constant.

[0005] In a second aspect, the present application provides a method for multi-party secure summation. The multi-party includes a target party and multiple participating parties, and the method includes: as the target party, Receive all function values ​​sent by all participants, where the function values ​​are obtained by each participant randomly splitting the original data held by the participant into agreed first preset integer parts, and substituting the split original data into at least two agreed preset functions, where the preset functions are all first preset integer element functions, and the sum of all preset functions is the sum of each independent variable times a second preset constant, where the second preset constant is non-zero; The sum of all function values ​​divided by the agreed second preset constant is equal to the sum of the original data held by all participants.

[0006] In a third aspect, the present application provides a method for secure summation of multiple parties. The multiple parties include a target party and multiple participating parties, and the method includes: Each participant randomly splits the original data held by it into the agreed first preset integer number of parts; Each participant substitutes the split original data into at least two agreed preset functions respectively to obtain at least two substitution function values, wherein the preset functions are all first preset integer-value functions, and the result of the sum of all the preset functions is the sum of each independent variable times a second preset constant, and the second preset constant is non-zero; The participant sends all the substituted function values ​​to the target party so that the target party calculates the sum of all the function values; The target party calculates that the sum of all function values ​​divided by the agreed second preset constant is equal to the sum of the original data held by all participating parties.

[0007] Furthermore, there are m preset functions, and the jth preset function , where , is the second preset constant.

[0008] Furthermore, there are two preset functions, the first preset function is , the second preset function is , where p+1 is the second preset constant.

[0009] Furthermore, the first preset integer is not less than 5.

[0010] In a fourth aspect, the present application provides a multi-party secure summation system. The system includes a target party and multiple participants, the participants apply any one of the methods described in the first aspect above, and / or the target party applies any one of the methods described in the second aspect above, and / or the system applies any one of the methods described in the third aspect above.

[0011] By adopting the above technical solution, multi-party secure sum calculation can be achieved to ensure that the original data held by the participants is not leaked.

[0012] It should be understood that the contents described in the Summary of the Invention are not intended to limit the key or important features of the embodiments of the present application, nor are they intended to limit the scope of the present application. Other features of the present application will become easily understood through the following description. BRIEF DESCRIPTION OF THE DRAWINGS

[0013] The above and other features, advantages and aspects of the embodiments of the present application will become more apparent with reference to the following detailed description in conjunction with the accompanying drawings. In the accompanying drawings, the same or similar reference numerals represent the same or similar elements, wherein: Figure 1 A flowchart of a multi-party secure summation method in an embodiment of the present application is shown. DETAILED DESCRIPTION

[0014] In order to make the purpose, technical solution and advantages of the embodiments of the present application clearer, the technical solution in the embodiments of the present application will be clearly and completely described below in conjunction with the drawings in the embodiments of the present application. Obviously, the described embodiments are part of the embodiments of the present application, not all of the embodiments. Based on the embodiments in the present application, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of this application.

[0015] In addition, the term "and / or" in this article is only a description of the association relationship between the associated objects, indicating that there can be three relationships. For example, A and / or B can represent: A exists alone, A and B exist at the same time, and B exists alone. In addition, the character " / " in this article generally indicates that the associated objects before and after are in an "or" relationship.

[0016] The present application provides a method and system for secure multi-party summation, which can calculate the sum of original data held by multiple participants while ensuring that the original data held by the participants is not leaked.

[0017] In a first aspect, the present application provides a multi-party secure summation system, which includes a target party and multiple participants, wherein the participants hold original data, and the target party may be one of the participants or other parties other than the participants.

[0018] The system implements multi-party secure computing and is specifically introduced in accordance with the disclosure of the second aspect of this application.

[0019] In a second aspect, the present application provides a method for multi-party secure summation. The method can be performed by Figure 1 The participants and target parties cooperate in the execution.

[0020] Figure 1 A flowchart of a multi-party secure summation method in an embodiment of the present application is shown.

[0021] Reference Figure 1 , the method specifically comprises the following steps: S110: Each participant randomly splits the original data held by itself into an agreed first preset integer number of parts; S120: Each participant substitutes the split original data into at least two agreed preset functions respectively to obtain at least two substitution function values, wherein the preset functions are all first preset integer-variable functions, and the sum of all the preset functions is the sum of each independent variable times a second preset constant, and the second preset constant is non-zero; S130: The participant sends all substituted function values ​​to the target party, so that the target party calculates the sum of all function values; S140: The target party calculates that the sum of all function values ​​divided by the agreed second preset constant is equal to the sum of the original data held by all participating parties.

[0022] Specifically, there are m preset functions, and the jth preset function , where , is the second preset constant.

[0023] In one example, there are two preset functions, the first preset function is , the second preset function is , where p+1 is a second preset constant. The first preset integer is not less than 5.

[0024] The following integrates the above content to introduce a specific example.

[0025] Suppose there are n participants, and the participants agree on a first preset integer p, n is not less than 2, and p is not less than 5; each participant randomly splits the original data held by itself into p parts, and obtains p split data, and the sum of the p split data is equal to the original data. The split function is defined here , where d represents the original data, Indicates split data.

[0026] Assume that the original data of the nth participant is , , ..., , The corresponding p split data are , , ..., , The corresponding p split data are , , ..., , ..., The corresponding p split data are , , ..., .

[0027] Define two p-ary functions, , , each participant substitutes the original data held by itself into the two functions respectively and obtains the function values.

[0028] Then n participants are substituted into The obtained function values ​​are ; ; ... ; n participants enter The obtained function values ​​are ; ; ... ; These function values ​​are clear numerical results that can be sent to the target party, who can calculate the sum of the original data held by the participants based on the following steps: calculate ; calculate ; calculate That is, it is equal to p+1 times the original data held by the n participants. Dividing it by p+1 gives the sum of the original data held by the n parties.

[0029] The average of the original data held by n participants can also be calculated.

[0030] In a third aspect, the present application provides a method for multi-party secure summation. The multi-party includes a target party and multiple participating parties, and the method includes: as one of the participating parties, Randomly split the original data held by itself into the agreed first preset integer number of parts; Substituting the split original data into at least two predetermined preset functions respectively to obtain at least two substituted function values, wherein the predetermined functions are all first predetermined integer-valued functions, and the sum of all the predetermined functions is the sum of each independent variable times a second predetermined constant, and the second predetermined constant is non-zero; All function values ​​are sent to the target party, so that the target party obtains the sum of the original data of all participants by dividing the sum of all function values ​​of all participants by the agreed second preset constant.

[0031] In a fourth aspect, the present application provides a method for multi-party secure summation. The multi-party includes a target party and multiple participating parties, and the method includes: as the target party, Receive all function values ​​sent by all participants, where the function values ​​are obtained by each participant randomly splitting the original data held by the participant into agreed first preset integer parts, and substituting the split original data into at least two agreed preset functions, where the preset functions are all first preset integer element functions, and the sum of all preset functions is the sum of each independent variable times a second preset constant, where the second preset constant is non-zero; The sum of all function values ​​divided by the agreed second preset constant is equal to the sum of the original data held by all participants.

[0032] Since the overall multi-party secure summation method has been clearly introduced, the third and fourth aspects as partial methods executed by the participating party and the target party will not be disclosed repeatedly.

[0033] It should be noted that, for the aforementioned method embodiments, for the sake of simplicity of description, they are all expressed as a series of action combinations, but those skilled in the art should be aware that the present application is not limited by the described order of actions, because according to the embodiments of the present application, certain steps can be performed in other orders or simultaneously. Secondly, those skilled in the art should also be aware that the embodiments described in the specification are all optional embodiments, and the actions and modules involved are not necessarily required by the present application.

[0034] The above description is only a preferred embodiment of the present application and an explanation of the technical principles used. Those skilled in the art should understand that the scope of disclosure involved in the present application is not limited to the technical solution formed by a specific combination of the above technical features, but should also cover other technical solutions formed by any combination of the above technical features or their equivalent features without departing from the aforementioned disclosed concept. For example, the above features are replaced with the technical features with similar functions disclosed in this application (but not limited to) by each other to form a technical solution.

Claims

1. A multi-party secure summation method, characterized in that: The multiple parties include a target party and multiple participating parties, and the method includes: as one of the participating parties, Randomly split the original data held by itself into the agreed first preset integer number of parts; Substituting the split original data into at least two predetermined preset functions respectively to obtain at least two substituted function values, wherein the predetermined functions are all first predetermined integer-valued functions, and the sum of all the predetermined functions is the sum of each independent variable times a second predetermined constant, and the second predetermined constant is non-zero; All function values ​​are sent to the target party, so that the target party obtains the sum of the original data of all participants by dividing the sum of all function values ​​of all participants by the agreed second preset constant.

2. A multi-party secure summation method, characterized in that: The multiple parties include a target party and multiple participating parties, and the method includes: as the target party, Receive all function values ​​sent by all participants, where the function values ​​are obtained by each participant randomly splitting the original data held by the participant into agreed first preset integer parts, and substituting the split original data into at least two agreed preset functions, where the preset functions are all first preset integer element functions, and the sum of all preset functions is the sum of each independent variable times a second preset constant, where the second preset constant is non-zero; The sum of all function values ​​divided by the agreed second preset constant is equal to the sum of the original data held by all participants.

3. A multi-party secure summation method, characterized in that: The multiple parties include a target party and multiple participating parties, and the method includes: Each participant randomly splits the original data held by it into the agreed first preset integer number of parts; Each participant substitutes the split original data into at least two agreed preset functions respectively to obtain at least two substitution function values, wherein the preset functions are all first preset integer-value functions, and the result of the sum of all the preset functions is the sum of each independent variable times a second preset constant, and the second preset constant is non-zero; The participant sends all the substituted function values ​​to the target party so that the target party calculates the sum of all function values; The target party calculates that the sum of all function values ​​divided by the agreed second preset constant is equal to the sum of the original data held by all participating parties.

4. The multi-party secure summation method according to any one of claims 1 to 3, characterized in that: There are m preset functions, and the jth preset function , where , is the second preset constant.

5. The multi-party secure summation method according to any one of claims 1 to 3, characterized in that: There are two preset functions. The first preset function is , the second preset function is , where p+1 is the second preset constant.

6. The multi-party secure summation method according to any one of claims 1 to 3, characterized in that: The first preset integer is not less than 5.

7. A multi-party secure summation system, characterized in that: The system includes a target party and multiple participants, the participants apply the method described in any one of claims 1 and 4-6, and / or the target party applies the method described in any one of claims 2 and 4-6, and / or the system applies the method described in any one of claims 3 and 4-6.

Images