TPM Gateway for Secure Multiparty Computation

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Cloud-based multiparty computing environments face challenges in securing data from unauthorized access by untrusted parties, with existing cryptographic solutions being slow and impractical.

Innovation Solution

A TPM-based secure multiparty computing system utilizing a non-bypassable gateway that sanitizes user data, selects a trusted execution environment worker, and enforces secure execution and data transmission protocols to prevent data leakage to untrusted parties.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If cryptographic based multiparty computation solutions are used, then data security is improved, but computation speed deteriorates

Engineering Contradiction:
Improvedata securityVSAvoidcomputation speed
Core Design Contradiction:
ReliabilityVSProductivity

Solution Approach 1:

The patent introduces a gateway as an intermediary component that mediates between untrusted cloud servers and execution services. The gateway enforces security policies, sanitizes inputs/outputs, and manages authentication without requiring complex cryptographic protocols between all parties. This intermediary approach maintains data security while enabling faster computation by avoiding the overhead of cryptographic operations for every data access.

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The patent extracts security-critical functions (authentication, authorization, input/output sanitization) from the computation workflow and places them in a dedicated gateway component. This separation allows the main computation to proceed at high speed on untrusted cloud infrastructure while security checks are performed independently at entry and exit points, eliminating the need for continuous cryptographic verification during computation.

Inventive Principle:
Principle #2Taking out (Extraction)

2Adaptability or versatility

If cloud based servers are used for multiparty computing, then accessibility and scalability are improved, but data leakage risk to untrusted parties increases

Engineering Contradiction:
ImproveaccessibilityVSAvoiddata leakage risk
Core Design Contradiction:
Adaptability or versatilityVSObject-affected harmful factors

Solution Approach 1:

The gateway serves as a trusted intermediary between cloud servers and users, enforcing access control policies and sanitizing data flows. It authenticates users, authorizes access to specific execution services, and ensures that inputs and outputs meet security policies before being transmitted to or from untrusted cloud infrastructure, thereby preventing data leakage while maintaining cloud-based accessibility.

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The system implements self-service security mechanisms where the gateway automatically enforces security policies, performs authentication and authorization checks, and sanitizes data without requiring manual intervention. Execution services register themselves with the gateway, which automatically manages their security credentials and access rights, enabling scalable cloud-based access with automated security enforcement.

Inventive Principle:
Principle #25Self-service

Data Source

PatentEP3736718B1A TPM-based secure multiparty computing system using a non-bypassable gateway
Publication Date: 2024.01.31 BAIDU USA LLC
  • EP3736718B1 patent drawingFigure 1
  • EP3736718B1 patent drawingFigure 2
  • EP3736718B1 patent drawingFigure 3

AI summary

Embodiments of the disclosure disclose a system to prevent data of a client from leaking to untrusted parties in a multiparty computation environment. According to one embodiment, in response to a request received at a gateway (e.g., a non-bypassable gateway) of a server from a user device of a user over a network to process user data by an execution service, the system sanitizes the user data by scanning the user data for malicious code. The system selects a trusted execution environment (TEE) worker from a number of TEE workers and initiates an execution of the execution service by the selected TEE worker. The system receives execution results from the selected TEE worker. The system transmits the execution results to the user device of the user over the network.