# US 2021/0281402 A1 · Multi-party security computing method and apparatus, and electronic device

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 2021/0281402 A1
- Document ID: US20210281402A1
- Status: Published application
- Kind: A1
- Application number: 17/330,819
- Filed: 2021-05-26
- Published: 2021-09-09
- Earliest claimed: 2018-08-14
- Assignees: Advanced New Technologies Co., Ltd.
- Applicants: Advanced New Technologies Co., Ltd.
- Inventors: Lichun LI; Shan YIN; Huazhong WANG; Wenzhen LIN
- Web page: https://patentgrep.com/patent/US20210281402A1

## CPC

- G06F 21/6245: {Protecting personal data, e.g. for financial or medical purposes}
- H04L 9/0869: {involving random numbers or seeds}
- G06F 21/71: to assure secure computing or processing of information
- H04L 9/0819: {Key transport or distribution, i.e. key establishment techniques where one party creates or otherwise obtains a secret value, and securely transfers it to the other(s) (network architectures or network communication protocols for key distribution in a packet data network H04L63/062)}
- H04L 9/085: {Secret sharing or secret splitting, e.g. threshold schemes}
- H04L 9/50: {using hash chains, e.g. blockchains or hash trees}
- H04L 2209/46: Secure multiparty computation, e.g. millionaire problem
- G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N)
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)

## Abstract

Embodiments of a secure multi-party computation method applicable to any computing node deployed in a distributed network are provided. A plurality of computing nodes is deployed in the distributed network. The plurality of computing nodes jointly participates in a secure multi-party computation based on private data respectively held by the computing nodes. The method includes: generating a computing parameter related to private data held by one computing node based on a secure multi-party computation algorithm; transmitting the computing parameter to other computing nodes participating in the secure multi-party computation for the other computing nodes to perform the secure multi-party computation based on collected computing parameters transmitted by the computing nodes participating in the secure multi-party computation; and creating an audit log corresponding to the computing parameter, the audit log recording description information related to the computing parameter.

## Claims

### Claim 1

A secure multi-party computation method, comprising:
generating, by a first computing node and based on a secure multi-party computation algorithm, first computing parameters, the first computing node and a second computing node deployed in a distributed network and jointly participating in a secure multi-party computation based on data respectively held on each of the first computing node and the second computing node, wherein the first computing parameters are related to the data held by the first computing node and comprise first ciphertext data for the secure multi-party computation;
obtaining, by the first computing node, second computing parameters from the second computing node, the second computing parameters related to the data held by the second computing node and comprising second ciphertext data for the secure multi-party computation;
performing, by the first computing node, the secure multi-party computation based on the second computing parameters;
generating, by the first computing node, an audit log recording description information related to the first computing parameters, the description information comprising a key corresponding to the first ciphertext data;
determining, by the first computing node, whether the key recorded in the audit log is a known key held by the second computing node; and
determining, in response to determining that the key is the known key held by the second computing node, by the first computing node, that the first computing parameters contain a risk of privacy leakage; or
determining, in response to determining that the key is not the known key held by the second computing node, by the first computing node, that the first computing parameters do not contain the risk of privacy leakage.

### Claim 2 (depends on 1)

The method of claim 1, wherein the distributed network is a blockchain network, and the first computing node and the second computing node are node devices in the blockchain network.

### Claim 3 (depends on 2)

The method of claim 2, wherein the key recorded in the audit log is an encryption key related to the first ciphertext data.

### Claim 4 (depends on 3)

The method of claim 3, wherein the audit log further comprises:
a decryption key for decrypting the first ciphertext data; and
original cleartext data of the first ciphertext data.

### Claim 5 (depends on 4)

The method of claim 4, further comprising:
performing a security verification on the first ciphertext data by:
decrypting, based on the decryption key, the first ciphertext data to obtain decrypted cleartext data;
determining whether the decrypted cleartext data is consistent with the original cleartext data; and
determining, in response to determining that the decrypted cleartext data is consistent with the original cleartext data, the first ciphertext data does not contain the risk of privacy leakage; or
determining, in response to determining that the decrypted cleartext data is not consistent with the original cleartext data, the first ciphertext data contains the risk of privacy leakage.

### Claim 6 (depends on 2)

The method of claim 2, further comprising:
transmitting, by the first computing node, the first computing parameters to the second computing node for the second computing node to perform the secure multi-party computation based on the first computing parameters.

### Claim 7 (depends on 2)

The method of claim 2, wherein an operation logic corresponding to the secure multi-party computation is represented as a gate circuit, the first computing node corresponds to one or more operation gates in the gate circuit, and the data held by the first computing node is used as input data of the one or more operation gates.

### Claim 8 (depends on 7)

The method of claim 7, wherein the operation logic is represented by a truth table comprising a plurality of input values and corresponding output values, and wherein the first ciphertext data is obtained by:
generating random numbers to replace the input values and output values in the truth table; and
using the random numbers replacing the input values as an encryption key to encrypt the random numbers replacing the output values to obtain the first ciphertext data.

### Claim 9

A first computing node, comprising a processor and a non-transitory computer-readable memory coupled to the processor, and configured with instructions executable by the processor to cause the processor to perform operations comprising:
generating, based on a secure multi-party computation algorithm, first computing parameters, the first computing node and a second computing node deployed in a distributed network and jointly participating in a secure multi-party computation based on data respectively held on each of the first computing node and the second computing node, wherein the first computing parameters are related to the data held by the first computing node and comprise first ciphertext data for the secure multi-party computation;
obtaining second computing parameters from the second computing node, the second computing parameters related to the data held by the second computing node and comprising second ciphertext data for the secure multi-party computation;
performing the secure multi-party computation based on the second computing parameters;
generating an audit log recording description information related to the first computing parameters, the description information comprising a key corresponding to the first ciphertext data;
determining whether the key recorded in the audit log is a known key held by the second computing node; and
determining, in response to determining that the key is the known key held by the second computing node, that the first computing parameters contain a risk of privacy leakage; or
determining, in response to determining that the key is not the known key held by the second computing node, that the first computing parameters do not contain the risk of privacy leakage.

### Claim 10 (depends on 9)

The computing node of claim 9, wherein the distributed network is a blockchain network, and the first computing node and the second computing node are node devices in the blockchain network.

### Claim 11 (depends on 10)

The computing node of claim 10, wherein the key recorded in the audit log is an encryption key related to the first ciphertext data.

### Claim 12 (depends on 11)

The computing node of claim 11, wherein the audit log further comprises:
a decryption key for decrypting the first ciphertext data; and
original cleartext data of the first ciphertext data.

### Claim 13 (depends on 12)

The computing node of claim 12, wherein the operations further comprise:
performing a security verification on the first ciphertext data by:
decrypting, based on the decryption key, the first ciphertext data to obtain decrypted cleartext data;
determining whether the decrypted cleartext data is consistent with the original cleartext data; and
determining, in response to determining that the decrypted cleartext data is consistent with the original cleartext data, the first ciphertext data does not contain the risk of privacy leakage; or
determining, in response to determining that the decrypted cleartext data is not consistent with the original cleartext data, the first ciphertext data contains the risk of privacy leakage.

### Claim 14 (depends on 10)

The computing node of claim 10, wherein the operations further comprise:
transmitting the first computing parameters to the second computing node for the second computing node to perform the secure multi-party computation based on the first computing parameters.

### Claim 15 (depends on 10)

The computing node of claim 10, wherein an operation logic corresponding to the secure multi-party computation is represented as a gate circuit, the first computing node corresponds to one or more operation gates in the gate circuit, and the data held by the first computing node is used as input data of the one or more operation gates.

### Claim 16 (depends on 15)

The computing node of claim 15, wherein the operation logic is represented by a truth table comprising a plurality of input values and corresponding output values, and wherein the first ciphertext data is obtained by:
generating random numbers to replace the input values and output values in the truth table; and
using the random numbers replacing the input values as an encryption key to encrypt the random numbers replacing the output values to obtain the first ciphertext data.

### Claim 17

A non-transitory computer-readable storage medium storing instructions executable by a processor, wherein the processor and the non-transitory computer-readable storage medium are installed in a first computing node, the first computing node and a second computing node are deployed in a distributed network and jointly participating in a secure multi-party computation based on data respectively held on each of the first computing node and the second computing node, and, upon being executed by the processor, the instructions cause the processor to perform operations comprising:
generating, based on a secure multi-party computation algorithm, first computing parameters, wherein the first computing parameters are related to the data held by the first computing node and comprise first ciphertext data for the secure multi-party computation;
obtaining second computing parameters from the second computing node, the second computing parameters related to the data held by the second computing node and comprising second ciphertext data for the secure multi-party computation;
performing the secure multi-party computation based on the second computing parameters;
generating an audit log recording description information related to the first computing parameters, the description information comprising a key corresponding to the first ciphertext data;
determining whether the key recorded in the audit log is a known key held by the second computing node; and
determining, in response to determining that the key is the known key held by the second computing node, that the first computing parameters contain a risk of privacy leakage; or
determining, in response to determining that the key is not the known key held by the second computing node, that the first computing parameters do not contain the risk of privacy leakage.

### Claim 18 (depends on 17)

The non-transitory computer-readable storage medium of claim 17, wherein the distributed network is a blockchain network, and the first computing node and the second computing node are node devices in the blockchain network.

### Claim 19 (depends on 18)

The non-transitory computer-readable storage medium of claim 18, wherein the key recorded in the audit log is an encryption key related to the first ciphertext data.

### Claim 20 (depends on 19)

The non-transitory computer-readable storage medium of claim 19, wherein the audit log further comprises:
a decryption key for decrypting the first ciphertext data; and
original cleartext data of the first ciphertext data.