Multi-party computation system using segmented decryption keys
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional multi-party computation systems rely on trusted third parties, which are vulnerable to cybersecurity breaches and reluctant to share data due to privacy concerns, making it difficult to perform computations on aggregated data without revealing sensitive information.
Innovation Solution
A system generates a shared key using keys from multiple parties, allowing each party to encrypt their data, perform computations on aggregated encrypted data, and jointly decrypt the results without revealing individual data to others, ensuring privacy and security.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If a trusted third party is used to aggregate and process data, then data aggregation and computation can be performed, but the third party becomes vulnerable to cybersecurity breaches and privacy concerns
Solution Approach 1:
The patent segments the decryption process into multiple shares distributed across different party devices. Instead of relying on a single trusted third party to hold and process all data, the system divides the decryption key into multiple shares that can only combine to reveal the full decryption. This segmentation eliminates the single point of failure and prevents any one entity from accessing all data, directly addressing the security vulnerability of trusted third parties.
Solution Approach 2:
The patent introduces encrypted data and shared decryption keys as intermediaries between parties. Each party encrypts their data using a shared key, and the results are aggregated in encrypted form. The decryption process requires multiple intermediaries (shares from different parties) to combine and reveal the full result. This intermediary mechanism allows data aggregation without requiring a trusted third party to access plaintext data.
2Productivity
If parties share data for computation, then computational results can be obtained, but individual party data may be revealed to others
Solution Approach 1:
The patent segments the decryption process into multiple shares distributed across different party devices. Instead of relying on a single trusted third party to hold and process all data, the system divides the decryption key into multiple shares that can only combine to reveal the full decryption. This segmentation eliminates the single point of failure and prevents any one entity from accessing all data, directly addressing the security vulnerability of trusted third parties.
Solution Approach 2:
The patent introduces encrypted data and shared decryption keys as intermediaries between parties. Each party encrypts their data using a shared key, and the results are aggregated in encrypted form. The decryption process requires multiple intermediaries (shares from different parties) to combine and reveal the full result. This intermediary mechanism allows data aggregation without requiring a trusted third party to access plaintext data.
3Reliability
If data is encrypted before aggregation, then privacy is protected during transmission, but computation on aggregated data becomes more complex
Solution Approach 1:
The patent introduces encrypted data and shared decryption keys as intermediaries between parties. Each party encrypts their data using a shared key, and the results are aggregated in encrypted form. The decryption process requires multiple intermediaries (shares from different parties) to combine and reveal the full result. This intermediary mechanism allows data aggregation without requiring a trusted third party to access plaintext data.
Data Source
AI summary
Some embodiments relate to a system for performing a multi-party computation among a plurality of parties. The system receives encrypted data sets generated by devices associated with the plurality of parties, wherein each of the encrypted data sets is generated by a respective one of the devices by encrypting data using a key shared among the devices. The system performs a computation on an aggregate of the encrypted data sets to obtain an encrypted result of the computation. The system transmits the encrypted result of the computation to at least two of the devices. The system receives partially decrypted shares of the encrypted result generated by the at least two devices, wherein each of the partially decrypted shares is generated by a respective one of the least two devices by partially decrypting the encrypted result using a private key of the respective device. The system generates a decrypted result of the computation using the partially decrypted shares of the encrypted result.


