Cryptographic agility for multi-level privacy-preserving data aggregation

A system for cryptographic agility for multi-level privacy-preserving data aggregation, comprising:

• at least one memory;
• and
• at least one processor coupled to the at least one memory, the at least one processor and the at least one memory configured to:
• receive a request from an application for dynamic cryptographic technique selection related to a data aggregation process, wherein the data aggregation process involves a first aggregator device and a second aggregator device performing one or more computations on data provided from multiple endpoints;
• determine, based on contextual information related to the request, that the second aggregator device is associated with a confidential computing component and that the first aggregator device is not associated with any confidential computing component;
• select one or more homomorphic encryption techniques for protecting the data while in use by the first aggregator device based on the determining that the first aggregator device is not associated with any confidential computing component;
• select a confidential computing technique for protecting the data while in use by the second aggregator device based on the determining that the second aggregator device is associated with the confidential computing component;
• and
• provide a response to the application based on the selecting of the one or more homomorphic encryption techniques and the selecting of the confidential computing technique, wherein the one or more homomorphic encryption techniques and the confidential computing technique are used to protect the data during computations related to the data aggregation process.

A non-transitory computer readable medium storing instructions that, when executed by one or more processors, cause the one or more processors to:

• receive a request from an application for dynamic cryptographic technique selection related to a data aggregation process, wherein the data aggregation process involves a first aggregator device and a second aggregator device performing one or more computations on data provided from multiple endpoints;
• determine, based on contextual information related to the request, that the second aggregator device is associated with a confidential computing component and that the first aggregator device is not associated with any confidential computing component;
• select one or more homomorphic encryption techniques for protecting the data while in use by the first aggregator device based on the determining that the first aggregator device is not associated with any confidential computing component;
• select a confidential computing technique for protecting the data while in use by the second aggregator device based on the determining that the second aggregator device is associated with the confidential computing component;
• and
• provide a response to the application based on the selecting of the one or more homomorphic encryption techniques and the selecting of the confidential computing technique, wherein the one or more homomorphic encryption techniques and the confidential computing technique are used to protect the data during computations related to the data aggregation process.