Secure Computation System Reducing Communication Overhead

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing secure computation methods require a large communication amount for preprocessing, particularly for secure multiplication operations involving fixed-point numbers, due to the need for independent distribution and sharing of random bits and integers, which results in significant communication overhead.

Innovation Solution

A secure computation system that uses an additive secret sharing scheme to distribute data, sign, and carry values of fixed-point numbers, allowing for the generation of extended fixed-point numbers and their multiplication results while maintaining security, and adjusts digit numbers to optimize communication efficiency.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If independent distribution protocols (TrancPr) and random sharing protocols (PRandBit, PRandInt) are used for secure multiplication preprocessing, then security is maintained, but communication amount becomes very large

Engineering Contradiction:
ImprovesecurityVSAvoidcommunication amount
Core Design Contradiction:
ReliabilityVSQuantity of substance

Solution Approach 1:

The patent combines the distribution protocol TrancPr with random sharing protocols PRandBit and PRandInt into a single integrated preprocessing step. Instead of executing these protocols independently as done in prior art, the invention merges them to share communication resources and reduce redundant transmissions, thereby maintaining security while significantly reducing the overall communication amount for secure multiplication preprocessing

Inventive Principle:
Principle #5Merging (Combining)

Solution Approach 2:

The patent performs all necessary preprocessing operations (distribution and random sharing) in advance before the actual secure multiplication takes place. By consolidating these preliminary actions into a single coordinated phase, the system reduces the communication burden during the critical multiplication operation itself, achieving both security and communication efficiency

Inventive Principle:
Principle #10Preliminary action

2Reliability

If several hundred-bit communication is required per bit for (2,3) threshold scheme preprocessing, then security is ensured, but overall communication efficiency deteriorates

Engineering Contradiction:
ImprovesecurityVSAvoidcommunication efficiency
Core Design Contradiction:
ReliabilityVSProductivity

Solution Approach 1:

The patent merges multiple communication-intensive operations into a single coordinated preprocessing phase, reducing the redundant communication rounds that cause the several hundred-bit overhead per bit in traditional (2,3) threshold schemes. This integration maintains the security guarantees while dramatically improving communication efficiency

Inventive Principle:
Principle #5Merging (Combining)

3Ease of operation

If PRandBit and PRandInt are executed before multiplication for preprocessing, then secure computation is enabled, but communication overhead increases significantly

Engineering Contradiction:
Improvesecure computation capabilityVSAvoidcommunication overhead
Core Design Contradiction:
Ease of operationVSQuantity of substance

Solution Approach 1:

The patent merges the execution of PRandBit and PRandInt protocols with the distribution protocol TrancPr into a single integrated preprocessing operation. This consolidation enables secure computation capability while reducing the communication overhead that results from executing these protocols as separate, independent steps

Inventive Principle:
Principle #5Merging (Combining)

Data Source

PatentUS11042358B2Secure computation system, secure computation method, secure computation apparatus, distribution information generation apparatus, and methods and programs therefor
Publication Date: 2021.06.22 NEC CORP
  • US11042358B2 patent drawing
  • US11042358B2 patent drawing
  • US11042358B2 patent drawing

AI summary

A secure computation system is provided. The system includes a distribution information generation apparatus that generates data distribution values, sign distribution values and carry distribution values from at least two fixed-point numbers by distributing each of the at least two fixed-point numbers using an additive secret sharing scheme; and a secure computation apparatus group including at least two secure computation apparatuses. The secure computation apparatus group includes: a secure digit extender; and a secure multiplier.