Server-Assisted Secure Two-Party Matrix Inversion

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing two-party secure matrix inversion computation methods face challenges with high computational overhead, data privacy leakage, and loss of precision due to reliance on cryptographic techniques and outsourced cloud services, which increase the risk of collusion and reduce reliability.

Innovation Solution

A server-assisted secure two-party inversion computation method using a three-party matrix multiplication protocol (3PMP) with data random obfuscation, involving three semi-honest auxiliary computing nodes to split and aggregate matrix results, ensuring secure and reliable computation without colluding with each other, and employing secret sharing, oblivious transfer, and fully homomorphic encryption.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If homomorphic encryption is used for secure matrix inversion, then data privacy is protected, but computational efficiency decreases

Engineering Contradiction:
Improvedata privacy protectionVSAvoidcomputational efficiency
Core Design Contradiction:
ReliabilityVSProductivity

Solution Approach 1:

The patent segments the secure matrix inversion computation into multiple independent phases: matrix multiplication phase, inversion phase, and result aggregation phase. Each phase is executed separately with dedicated protocols, allowing optimization of each segment while maintaining overall security. The computation is divided among multiple servers that work in parallel, reducing the burden on any single server and improving overall efficiency.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The patent introduces random matrices as intermediary elements that facilitate secure computation without requiring direct homomorphic encryption operations. These random matrices act as mediators that allow servers to perform computations on encrypted data through standard linear algebra operations, significantly reducing computational overhead compared to direct homomorphic encryption.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Ease of operation

If third-party cloud service providers are used for outsourcing computation, then computational burden on users is reduced, but risk of privacy leakage increases due to collusion attacks

Engineering Contradiction:
Improvecomputational outsourcingVSAvoidprivacy security
Core Design Contradiction:
Ease of operationVSReliability

Solution Approach 1:

The patent divides the cloud computing infrastructure into multiple independent servers that each hold only a portion of the computational task and data. No single server has access to the complete private data or can complete the entire computation alone, preventing collusion attacks from compromising security. The segmentation is achieved through distributed matrix operations where each server processes specific matrix blocks.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

Different servers are assigned different local qualities or roles in the computation process. Some servers perform multiplication operations, others perform inversion operations, and each operates on locally stored data portions. This local specialization ensures that even if one server is compromised, the damage is limited to its specific computational domain.

Inventive Principle:
Principle #3Local quality

3Reliability

If large prime number encryption is used, then security is enhanced, but ciphertext size increases causing loss of numerical precision

Engineering Contradiction:
Improveencryption securityVSAvoidnumerical precision
Core Design Contradiction:
ReliabilityVSMeasurement precision

Solution Approach 1:

The patent changes the parameter space by working in the rational number field Q rather than finite fields modulo large primes. This allows the use of standard floating-point arithmetic with maintained precision while achieving security through protocol design rather than cryptographic encoding. The security is derived from the computational difficulty of the underlying mathematical problems in the rational field.

Inventive Principle:
Principle #35Parameter changes

Solution Approach 2:

The patent replaces the cryptographic mechanical system (large prime number encryption) with a protocol-based security mechanism. Instead of relying on the mathematical properties of large primes for security, the system uses carefully designed interaction protocols among multiple servers that collectively provide security guarantees without requiring large prime encodings.

Inventive Principle:
Principle #28Mechanics substitution (Replace mechanical system)

4Reliability

If OT1n oblivious transfer protocols are used for secure two-party computation, then data privacy is protected, but communication overhead and computational complexity increase significantly

Engineering Contradiction:
Improvedata privacy protectionVSAvoidcommunication overhead
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent extracts and removes the need for complex oblivious transfer protocols by using a different security model based on semi-honest auxiliary servers. The security is achieved by designing the computation protocol to inherently protect privacy through the structure of matrix operations and the distribution of computational tasks, rather than layering oblivious transfer on top of the computation.

Inventive Principle:
Principle #2Taking out (Extraction)

Solution Approach 2:

The patent uses random matrix copies as placeholders and intermediate representations that allow computation to proceed without requiring direct access to sensitive data. These copied matrices serve as substitutes that maintain the mathematical structure needed for computation while containing no sensitive information, eliminating the need for complex privacy-preserving communication protocols.

Inventive Principle:
Principle #26Copying

Data Source

PatentUS20250021620A1Server-assisted secure two-party inversion computation method, system and apparatus
Publication Date: 2025.01.16 BEIHANG UNIV
  • US20250021620A1 patent drawing
  • US20250021620A1 patent drawing
  • US20250021620A1 patent drawing

AI summary

A server-assisted secure two-party inversion computation method, system, and apparatus are disclosed, relating to the field of data security. The method includes the following steps: the participant node A, the participant node Bob, the auxiliary computing node P, the auxiliary computing node Q, and the auxiliary computing node S perform a third three-party matrix multiplication based on a secure three-party matrix multiplication protocol 3PMP, and a result of the three-party matrix multiplication is randomly split into private matrices, which are then sent to a party requesting the secure two-party inversion computation, to obtain a final result of the two-party inversion computation. The present disclosure has characteristics such as parallelism, security, reliability, and the ability to effectively resist collusion among a plurality of server nodes.