Secure multi-party computation
AssigneeAlipay (Hangzhou) Information Technology Co., Ltd.
InventorsTao Wei, Yulong Zhang, Ran Duan, Zhenfei Zhang
Life of this patent
Estimating the term…
Abstract
Some embodiments of this specification provide a secure multi-party computation method and apparatus. According to the method in these embodiments, first, a TEE node cluster including K TEE nodes is joined based on a quantity N of data owners; then, a trusted execution environment is created in the TEE nodes, and a basic algorithm for secure K-party computation is loaded into the trusted execution environment; next, at least one data fragment is obtained from the trusted execution environment; and finally, secure K-party computation is performed by using the basic algorithm for secure K-party computation and the obtained data fragment.
Claims14
A secure multi-party computation method, applied to a trusted execution environment (TEE) node, comprising:
- joining a TEE node cluster comprising K TEE nodes based on a quantity N of data owners;
- creating a trusted execution environment, and loading a basic algorithm for secure K-party computation into the trusted execution environment;
- obtaining at least one data fragment from the trusted execution environment, wherein the data fragment comprises:
- the data fragment obtained by a data owner by splitting original data that is owned by the data owner, and is sent to the TEE node, or the data fragment obtained by another TEE node in the TEE node cluster by computing the split original data that is sent by the data owner, and is sent to the TEE node;
- and
- performing secure K-party computation by using the basic algorithm for secure K-party computation and the obtained data fragment, wherein
- N is a positive integer greater than 1, and K is a positive integer greater than 1.
(canceled)
(canceled)
(canceled)
(canceled)
(canceled)
(canceled)
A computing device, comprising a memory and a processor, wherein the memory stores executable instructions that, in response to execution by the processor, cause the computing device to:
- join a TEE node cluster comprising K TEE nodes based on a quantity N of data owners;
- create a trusted execution environment, and loading a basic algorithm for secure K-party computation into the trusted execution environment;
- obtain at least one data fragment from the trusted execution environment, wherein the data fragment comprises:
- the data fragment obtained by a data owner by splitting original data that is owned by the data owner, and is sent to the TEE node, or the data fragment obtained by another TEE node in the TEE node cluster by computing the split original data that is sent by the data owner, and is sent to the TEE node;
- and
- perform secure K-party computation by using the basic algorithm for secure K-party computation and the obtained data fragment, wherein
- N is a positive integer greater than 1, and K is a positive integer greater than 1.
A non-transitory computer-readable storage medium having stored therein instructions that, when executed by a processor of a computing device, cause the computing device to:
- join a TEE node cluster comprising K TEE nodes based on a quantity N of data owners;
- create a trusted execution environment, and loading a basic algorithm for secure K-party computation into the trusted execution environment;
- obtain at least one data fragment from the trusted execution environment, wherein the data fragment comprises:
- the data fragment obtained by a data owner by splitting original data that is owned by the data owner, and is sent to the TEE node, or the data fragment obtained by another TEE node in the TEE node cluster by computing the split original data that is sent by the data owner, and is sent to the TEE node;
- and
- perform secure K-party computation by using the basic algorithm for secure K-party computation and the obtained data fragment, wherein
- N is a positive integer greater than 1, and K is a positive integer greater than 1.
Dependencies are inferred from the claim text.