Secure Computation Servers Reducing Communication Traffic

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

In secure computation systems, the increase in communication traffic due to parallel bit-injections (or paddings) leads to inefficiencies, particularly when the degree of parallelism is high, resulting in significant communication traffic increases.

Innovation Solution

A secure computation system with multiple secure computation servers connected through a network, utilizing shared pseudo random number generators, seed storage, pre-generated random numbers, and inner product calculations to manage and process shares efficiently, reducing communication traffic by performing operations independently of inputs and masking processes.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Productivity

If bit-injections (or paddings) are performed in parallel to increase processing throughput, then productivity is improved, but communication traffic increases significantly (O(k^2))

Engineering Contradiction:
Improveprocessing throughputVSAvoidcommunication traffic
Core Design Contradiction:
ProductivityVSQuantity of substance

Solution Approach 1:

The patent applies preliminary action by pre-generating random numbers and preparing processing data before the actual bit-injection operations. Secure computation servers perform preprocessing steps including generating random numbers, creating masks, and preparing intermediate values in advance. This allows the actual bit-injection operations to proceed more efficiently with reduced communication overhead, as much of the data preparation is already completed before parallel processing begins.

Inventive Principle:
Principle #10Preliminary action

2Productivity

If the degree of parallelism is increased to handle more operations simultaneously, then productivity is improved, but communication traffic increases significantly

Engineering Contradiction:
Improvedegree of parallelismVSAvoidcommunication traffic
Core Design Contradiction:
ProductivityVSQuantity of substance

Solution Approach 1:

The patent merges multiple communication operations into fewer, more efficient exchanges. Instead of each secure computation server communicating separately with every other server for each bit-injection operation, the system combines communication steps so that servers exchange aggregated data and coordinated intermediate results. This merging of communication operations reduces the overall communication traffic from O(k^2) to O(k) while maintaining the parallel processing capability.

Inventive Principle:
Principle #5Merging (Combining)

3Reliability

If multiple secure computation servers are used to distribute data processing, then reliability is improved through fraud detection, but device complexity increases

Engineering Contradiction:
Improvefraud detection capabilityVSAvoidsystem complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent implements multi-functionality by designing secure computation servers that perform multiple roles: data processing, fraud detection, random number generation, and communication coordination. Each server is equipped with capabilities to generate and verify masks, perform bit-injection operations, detect fraud through cryptographic verification, and manage communication protocols. This universal design allows the system to maintain high reliability through distributed fraud detection while managing complexity through standardized multi-functional server components.

Inventive Principle:
Principle #6Universality (Multi-functionality)

Data Source

PatentUS12135830B2Secure computation system, secure computation server apparatus, secure computation method, and secure computation program
Publication Date: 2024.11.05 NEC CORP
  • US12135830B2 patent drawing
  • US12135830B2 patent drawing
  • US12135830B2 patent drawing

AI summary

Each of a secure computation server apparatuses includes a random number generation part that generates random numbers using a pseudo random number generator shared among the secure computation server apparatuses; a seed storage part that shares and stores a seed(s) used for generating random numbers in the random number generation part; a pre-generated random number storage part that stores random numbers generated by the random number generation part; a share value storage part that stores a share(s) to be a target of processing; a logical operation part that computes a carry to be transmitted and received among the secure computation server apparatuses using the random numbers and the share(s) to be a target of processing; an inner product calculation part that removes a mask from the carry; and an arithmetic operation part that performs a processing of erasing the carry to obtain a processing result.