Secure remote aggregation

A system for aggregation of a performance indicator of a device comprising:

• the device, wherein the device is configured to concatenate a respective first data item to a plurality of second data items and is configured to encrypt the plurality of concatenated second data items relevant for the computation of the performance indicator of the device using a first encryption key, wherein the first encryption key is based on an additive homomorphic encryption scheme,
• a sending unit configured to send the encrypted concatenated second data items to a computation cluster;
• the computation cluster being configured to compute the performance indicator of the at least one device using the encrypted concatenated second data items and configured to compute an aggregate value regarding the performance indicator by summing up the encrypted concatenated second data items;
• and
• a sending unit configured to send the aggregate value to a server of the service provider of the device,
• wherein the system further comprises the server of the service being configured to decrypt the aggregate value using a second encryption key, and
• wherein the system further comprises a verification unit being configured to verify the decrypted result by checking whether the decrypted sum computed by summing up the encrypted concatenated second data items comprises a predetermined value.

A computer readable media for aggregation of a performance indicator of a device comprising:

• concatenating a respective first data item to a plurality of second data items in the device;
• encrypting the plurality of concatenated second data items relevant for computing the performance indicator using a first encryption key in the device, wherein the first encryption key is based on an additive homomorphic encryption scheme;
• sending the encrypted concatenated second data items to a computation cluster;
• computing the performance indicator on the computation cluster using the encrypted concatenated second data items and computing an aggregate value regarding the performance indicator by summing up the encrypted concatenated second data items;
• sending the aggregate value to a server of a service provider of the device;
• decrypting the aggregate value using a second encryption key on the server of the service provider;
• and
• verifying the decrypted result by checking whether the decrypted sum computed by summing up the encrypted concatenated second data items comprises a predetermined value.