Privacy-Preserving Time-Series Data Aggregation via Zero-Sum Key Encryption
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Data-processing applications face challenges in gathering statistical data from multiple participants while ensuring the privacy of individual contributors, as participants may not trust data aggregators with their information, especially in scenarios where raw data could be damaging or sensitive.
Innovation Solution
A system that determines private keys for users and a data aggregator such that their sum is zero, allowing users to encrypt their data without revealing individual values, enabling the aggregator to compute aggregate statistics without decrypting individual data, using secure multi-party protocols and hash functions to ensure privacy and integrity.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Measurement precision
If data aggregators gather raw data from participants to compute aggregate statistics, then statistical accuracy is improved, but participant privacy is compromised
Solution Approach 1:
The patent introduces an encryption scheme as an intermediary mechanism between participants and the data aggregator. Participants encrypt their data using public keys before sending to the aggregator, and the aggregator uses secret keys to decrypt only the aggregate statistics. This intermediary encryption layer allows the aggregator to compute accurate statistics without directly accessing or exposing individual raw data, thus resolving the contradiction between statistical accuracy and privacy protection.
2Loss of information
If data aggregators access individual data values, then data completeness is improved, but trust requirements increase
Solution Approach 1:
The patent segments the data processing function into two distinct parts: encryption performed by participants using their own private keys, and decryption of aggregate statistics performed by the aggregator using secret keys. This segmentation allows the aggregator to access complete aggregate data without needing to trust participants' individual data handling, while participants maintain control over their own data encryption. The cryptographic keys act as segmented access controls that reduce mutual trust requirements.
3Reliability
If participants share raw data with aggregators, then statistical reliability is improved, but security risks increase
Solution Approach 1:
The patent applies preliminary action by having participants encrypt their data with public keys before transmitting to the aggregator. This pre-encryption step ensures that even if the transmitted data is intercepted or accessed unauthorizedly, the individual data remains secure. The encryption is performed in advance of any potential security breach, eliminating the security risk associated with sharing raw data while maintaining statistical reliability through proper cryptographic practices.
Data Source
AI summary
A private stream aggregation (PSA) system contributes a user's data to a data aggregator without compromising the user's privacy. The system can begin by determining a private key for a local user in a set of users, wherein the sum of the private keys associated with the set of users and the data aggregator is equal to zero. The system also selects a set of data values associated with the local user. Then, the system encrypts individual data values in the set based in part on the private key to produce a set of encrypted data values, thereby allowing the data aggregator to decrypt an aggregate value across the set of users without decrypting individual data values associated with the set of users, and without interacting with the set of users while decrypting the aggregate value. The system also sends the set of encrypted data values to the data aggregator.