Token-Based Secure Multiparty Computing Framework Using Restricted Operating Environment
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Cloud-based multiparty computing environments face challenges in securing data from unauthorized access by untrusted parties, with existing cryptographic solutions being slow and impractical.
Innovation Solution
A token-based secure multiparty computing framework is implemented, which launches a restricted operating environment within a server to process user data using a guest agent or executor pool, ensuring that data is processed without accessing external components, thereby isolating it from untrusted parties.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If cryptographic based multiparty computation solutions are used, then data security is improved, but computation speed deteriorates
Solution Approach 1:
The system segments the computing environment into isolated containers for each computation task, separating secure data processing from the external network environment. This allows cryptographic security to be applied only where needed within each container while maintaining overall system productivity.
Solution Approach 2:
The patent introduces a host agent as an intermediary between the external network and the computation containers. The host agent manages token-based authentication and controls access to isolated computing environments, enabling secure data processing without requiring all system components to implement complex cryptographic protocols, thus maintaining computation speed.
2Productivity
If data is made accessible during computation in cloud based servers, then computation efficiency is improved, but security against unauthorized access deteriorates
Solution Approach 1:
The system divides the cloud computing environment into isolated containers, each handling specific computation tasks with controlled data access. This segmentation allows efficient data processing within each container while preventing unauthorized access between containers and to the external network.
Solution Approach 2:
The patent creates an inert computing environment through isolated containers that are restricted from external network access. Within this controlled environment, data can be freely accessed and processed for computation efficiency, while the isolation itself provides the security barrier against unauthorized access.
3Reliability
If a restricted operating environment is launched for each computation task, then security is improved, but system complexity increases
Solution Approach 1:
The host agent serves multiple functions: token generation, container management, authentication verification, and network access control. This universal component reduces overall system complexity by consolidating security management functions that would otherwise be distributed across multiple specialized components.
Solution Approach 2:
The system uses template-based container configurations that can be replicated for each computation task. Instead of creating entirely new security environments from scratch, the system copies and instantiates standardized container templates, reducing the complexity of managing multiple restricted operating environments.
Data Source
AI summary
According to one embodiment, in response to a request received at a host agent of a server from a user device of a user over a network to process user data, a system transmits a token representing the request to an executor pool having a pool of a number of executors. The system receives by the host agent executable image(s) of an executor from the executor pool, where the executor pool allocated the executor from the pool of executors in response to successfully verifying the token. The system launches a restricted operating environment within the server, including providing the executable image(s) of the executor and the user data to the restricted operating environment. The system executes the executable image(s) of the executor within the restricted operating environment, where the executor, when executed, is to process the user data without accessing an external component external to the restricted operating environment.