Systems and methods for privacy-preserving inventory matching

A non-transitory computer readable storage medium, including instructions stored thereon, wherein the instructions, when read and executed by one or more computers, cause the one or more computers to perform steps comprising:

• generating, at a first client application, a first public key;
• generating, at a second client application, a second public key;
• receiving, at the first client application, the second public key;
• receiving, at the second client application, the first public key;
• computing, by the first client application, a first common key based on the first public key and the second public key;
• computing, by the second client application, a second common key based on the first public key and the second public key;
• generating, at the first client application, a first masked submission, wherein the first masked submission includes a first masked long value and a first masked short value for a symbol generated using the first common key;
• submitting the first masked submission to an operator server;
• generating, by the second client application, a second masked submission, wherein the second masked submission includes a second masked long value and a second masked short value for the symbol generated using the second common key;
• submitting the second masked submission to the operator server;
• aggregating, by the operator server, the first masked submission and the second masked submission, wherein the aggregating includes:
• canceling the first common key and the second common key against each other;
• and
• providing a first sum based on the first masked submission and a second sum based on the second masked submission;
• identifying, by the operator server, a number of shares of the symbol that can be traded based on the first sum based on the first masked submission and the second sum based on the second masked submission;
• and
• conducting a trade of the identified number of shares between the first client application and the second client application.