Trusted Execution Environment for Multi-Party Computation

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Current multi-party computation (MPC) techniques, relying on homomorphic encryption and secret sharing circuits, consume excessive computing resources and require numerous small data packet exchanges, making them impractical for wide area network-based computing environments like cloud or edge computing.

Innovation Solution

Integration of a trusted execution platform (TEP) with an MPC framework, utilizing secure channels and enclaves to protect sensitive data and computations, decoupling input-output operations from the computation function and ensuring secure communication through attestation and provisioning services.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If homomorphic encryption and secret sharing circuits are used for multi-party computation, then data security is improved, but computing resource consumption increases significantly

Engineering Contradiction:
Improvedata securityVSAvoidcomputing resource consumption
Core Design Contradiction:
ReliabilityVSUse of energy by moving object

Solution Approach 1:

The patent introduces a trusted execution environment (TEE) as an intermediary between the computation function and external parties. The TEE provides a secure enclave that performs computations on encrypted data without requiring complex homomorphic encryption operations, thereby maintaining data security while significantly reducing computing resource consumption. The TEE acts as a mediator that combines the security benefits of encryption with the efficiency of conventional computation.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Reliability

If secret sharing circuits are used for multi-party computation, then data security is improved, but network communication efficiency deteriorates due to numerous small data packet exchanges

Engineering Contradiction:
Improvedata securityVSAvoidnetwork communication efficiency
Core Design Contradiction:
ReliabilityVSProductivity

Solution Approach 1:

The patent merges multiple small data packet exchanges into fewer, larger communication operations by utilizing the trusted execution environment. The TEE allows for batch processing of data and consolidates communication rounds, reducing the number of network interactions required while maintaining the security properties of secret sharing. This combining approach significantly improves network communication efficiency.

Inventive Principle:
Principle #5Merging (Combining)

3Reliability

If homomorphic encryption circuits are used for multi-party computation, then data security is improved, but device complexity increases due to large volume and depth of encryption circuits

Engineering Contradiction:
Improvedata securityVSAvoidencryption circuit complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent extracts the complex homomorphic encryption circuitry and replaces it with a trusted execution environment that provides equivalent security through hardware-based isolation and cryptographic primitives. The TEE offloads the computational burden of complex encryption operations to a specialized secure processing unit, thereby reducing the complexity of the overall system while maintaining data security guarantees.

Inventive Principle:
Principle #2Taking out (Extraction)

Data Source

PatentUS20230396434A1Multi-party computation framework based on trusted execution environment
Publication Date: 2023.12.07 DELL PROD LP
  • US20230396434A1 patent drawing
  • US20230396434A1 patent drawing
  • US20230396434A1 patent drawing

AI summary

Techniques for integrating a trusted execution platform with a multi-party computation framework are disclosed. For example, a method comprises receiving a plurality of keys from a plurality of parties, wherein respective ones of the plurality of keys correspond to respective ones of the plurality of parties. The respective ones of the plurality of keys are used in connection with establishing one or more secure channels for communicating with the respective ones of the plurality of parties. The method further comprises receiving respective data inputs from the respective ones of the plurality of parties over the one or more secure channels, and sending the respective data inputs to a computation function to compute at least one output based on the respective data inputs. The at least one output is sent over the one or more secure channels to at least one party of the plurality of parties.