TPM Gateway for Secure Multiparty Computation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Cloud-based multiparty computing environments face challenges in securing data from unauthorized access by untrusted parties, with existing cryptographic solutions being slow and impractical.
Innovation Solution
A TPM-based secure multiparty computing system utilizing a non-bypassable gateway that sanitizes user data, selects a trusted execution environment worker, and enforces secure execution and data transmission protocols to prevent data leakage to untrusted parties.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If cryptographic based multiparty computation solutions are used, then data security is improved, but computation speed deteriorates
Solution Approach 1:
The patent introduces a gateway as an intermediary component that mediates between untrusted cloud servers and execution services. The gateway enforces security policies, sanitizes inputs/outputs, and manages authentication without requiring complex cryptographic protocols between all parties. This intermediary approach maintains data security while enabling faster computation by avoiding the overhead of cryptographic operations for every data access.
Solution Approach 2:
The patent extracts security-critical functions (authentication, authorization, input/output sanitization) from the computation workflow and places them in a dedicated gateway component. This separation allows the main computation to proceed at high speed on untrusted cloud infrastructure while security checks are performed independently at entry and exit points, eliminating the need for continuous cryptographic verification during computation.
2Adaptability or versatility
If cloud based servers are used for multiparty computing, then accessibility and scalability are improved, but data leakage risk to untrusted parties increases
Solution Approach 1:
The gateway serves as a trusted intermediary between cloud servers and users, enforcing access control policies and sanitizing data flows. It authenticates users, authorizes access to specific execution services, and ensures that inputs and outputs meet security policies before being transmitted to or from untrusted cloud infrastructure, thereby preventing data leakage while maintaining cloud-based accessibility.
Solution Approach 2:
The system implements self-service security mechanisms where the gateway automatically enforces security policies, performs authentication and authorization checks, and sanitizes data without requiring manual intervention. Execution services register themselves with the gateway, which automatically manages their security credentials and access rights, enabling scalable cloud-based access with automated security enforcement.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
Embodiments of the disclosure disclose a system to prevent data of a client from leaking to untrusted parties in a multiparty computation environment. According to one embodiment, in response to a request received at a gateway (e.g., a non-bypassable gateway) of a server from a user device of a user over a network to process user data by an execution service, the system sanitizes the user data by scanning the user data for malicious code. The system selects a trusted execution environment (TEE) worker from a number of TEE workers and initiates an execution of the execution service by the selected TEE worker. The system receives execution results from the selected TEE worker. The system transmits the execution results to the user device of the user over the network.