IP Library Granted Patent US 11,050,561
Granted Patent B2
US 11,050,561 · App. 17/086,385 · Granted Jun 29, 2021

Multi-party security computing method and apparatus, and electronic device

Inventors: Lichun Li (Hangzhou, CN); Shan Yin (Hangzhou, CN); Huazhong Wang (Hangzhou, CN); Wenzhen Lin (Hangzhou, CN)
Assignee: ADVANCED NEW TECHNOLOGIES CO., LTD.
H04L9/0869H04L9/0819H04L2209/38H04L2209/46
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 11,050,561
App. No.
17/086,385
Granted
Jun 29, 2021
Kind
B2
Abstract

Embodiments of a secure multi-party computation method applicable to any computing node deployed in a distributed network are provided. A plurality of computing nodes are deployed in the distributed network. The plurality of computing nodes jointly participate in a secure multi-party computation based on private data respectively held by the computing nodes. The method includes: generating a computing parameter related to private data held by one computing node based on a secure multi-party computation algorithm; transmitting the computing parameter to other computing nodes participating in the secure multi-party computation for the other computing nodes to perform the secure multi-party computation based on collected computing parameters transmitted by the computing nodes participating in the secure multi-party computation; and creating an audit log corresponding to the computing parameter, the audit log recording description information related to the computing parameter.

Claims (68)

1. A secure multi-party computation method, applicable to one computing node of a plurality of computing nodes deployed in a distributed network, the plurality of computing nodes jointly participating in a secure multi-party computation based on data held on each of the plurality of computing nodes, the method comprising:

generating, by the one computing node and based on a secure multi-party computation algorithm, a computing parameter related to the data held by the one computing node, wherein the computing parameter comprises a random number participating in the secure multi-party computation;

transmitting, by the one computing node, the computing parameter to other computing nodes of the plurality of computing nodes participating in the secure multi-party computation for the other computing nodes to perform the secure multi-party computation based on computing parameters transmitted by the computing nodes participating in the secure multi-party computation;

creating, by the one computing node, an audit log corresponding to the computing parameter generated by the one computing node, the audit log recording description information related to the computing parameter, wherein the description information comprises a random number generation rule corresponding to the random number participating in the secure multi-party computation; and

performing, based on the audit log corresponding to the computing parameter generated by the one computing node, a privacy audit on the computing parameter transmitted by the computing node participating in the secure multi-party computation, to determine whether the computing parameter transmitted by the computing node contains a risk of privacy leakage, by:

determining, based on the random number generation rule recorded in the audit log and corresponding to the random number transmitted by the computing node participating in the secure multi-party computation, whether the random number is constructed based on the data held by the other computing nodes; and

determining, in response to a determination that the random number is constructed based on the data held by the other computing nodes, that the computing parameter transmitted by the computing node contains the risk of privacy leakage, or

determining, in response to a determination that the random number is not construed based on the data held by the other computing nodes, that the computing parameter transmitted by the computing node does not contain the risk of privacy leakage.

2. The method of claim 1 , further comprising:

collecting, by the one computing node, computing parameters transmitted by the other computing nodes participating in the secure multi-party computation, and performing the secure multi-party computation based on the collected computing parameters transmitted by the other computing nodes; and

creating an audit log corresponding to the computing parameters transmitted by the other computing nodes and recording description information related to the computing parameters, and storing the audit log corresponding to the computing parameters transmitted by the other computing nodes.

3. The method of claim 1 , wherein the computing parameter generated by the one computing node further comprises:

ciphertext data participating in the secure multi-party computation.

4. The method of claim 3 , wherein the description information related to the computing parameter further comprises:

a key corresponding to the ciphertext data participating in the secure multi-party computation.

5. The method of claim 4 , further comprising:

transmitting the audit log corresponding to the computing parameter generated by the one computing node to a third-party audit node for the audit node to perform a privacy audit on the computing parameter transmitted by the computing node participating in the secure multi-party computation, to determine whether the computing parameter transmitted by the computing node contains a risk of privacy leakage.

6. The method of claim 5 , wherein the performing, based on the audit log corresponding to the computing parameter generated by the one computing node, a privacy audit on the computing parameter transmitted by the computing node participating in the secure multi-party computation, to determine whether the computing parameter transmitted by the computing node contains a risk of privacy leakage further comprises:

determining, based on the key recorded in the audit log and corresponding to the ciphertext data transmitted by the computing node participating in the secure multi-party computation, whether the key is a known key held by the other computing nodes; and

determining, in response to a determination that the key is a known key held by the other computing nodes, that the computing parameter transmitted by the computing node contains the risk of privacy leakage; or

determining, in response to a determination that the key is not a known key held by the other computing nodes, that the computing parameter transmitted by the computing node does not contain the risk of privacy leakage.

7. The method of claim 1 , wherein the distributed network is a blockchain network, and the plurality of computing nodes are nodes devices in the blockchain network.

8. A secure multi-party computation apparatus, comprising a processor and a non-transitory computer-readable memory coupled to the processor, and configured with instructions executable by the processor to perform operations, comprising:

generating, based on a secure multi-party computation algorithm, a computing parameter related to data held by one computing node of a plurality of computing nodes, wherein the plurality of computing nodes are deployed in a distributed network and jointly participating in a secure multi-party computation based on data held on each of the plurality of computing nodes, and the computing parameter comprises a random number participating in the secure multi-party computation;

transmitting the computing parameter to other computing nodes of the plurality of computing nodes participating in the secure multi-party computation for the other computing nodes to perform the secure multi-party computation based on computing parameters transmitted by the computing nodes participating in the secure multi-party computation;

creating an audit log corresponding to the computing parameter generated by the one computing node, the audit log recording description information related to the computing parameter, wherein the description information comprises a random number generation rule corresponding to the random number participating in the secure multi-party computation; and

performing, based on the audit log corresponding to the computing parameter generated by the one computing node, a privacy audit on the computing parameter transmitted by the computing node participating in the secure multi-party computation, to determine whether the computing parameter transmitted by the computing node contains a risk of privacy leakage, by:

determining, based on the random number generation rule recorded in the audit log and corresponding to the random number transmitted by the computing node participating in the secure multi-party computation, whether the random number is constructed based on the data held by the other computing nodes; and

determining, in response to a determination that the random number is constructed based on the data held by the other computing nodes, that the computing parameter transmitted by the computing node contains the risk of privacy leakage, or

determining, in response to a determination that the random number is not construed based on the data held by the other computing nodes, that the computing parameter transmitted by the computing node does not contain the risk of privacy leakage.

9. The apparatus of claim 8 , wherein the operations further comprise:

collecting computing parameters transmitted by the other computing nodes participating in the secure multi-party computation, and performing the secure multi-party computation based on the collected computing parameters transmitted by the other computing nodes; and

creating an audit log corresponding to the computing parameters transmitted by the other computing nodes and recording description information related to the computing parameters, and storing the audit log corresponding to the computing parameters transmitted by the other computing nodes.

10. The apparatus of claim 8 , wherein the computing parameter generated by the one computing node further comprises:

ciphertext data participating in the secure multi-party computation.

11. The apparatus of claim 10 , wherein the description information related to the computing parameter further comprises:

a key corresponding to the ciphertext data participating in the secure multi-party computation.

12. The apparatus of claim 11 , wherein the operations further comprise:

transmitting the audit log corresponding to the computing parameter generated by the one computing node to a third-party audit node for the audit node to perform a privacy audit on the computing parameter transmitted by the computing node participating in the secure multi-party computation, to determine whether the computing parameter transmitted by the computing node contains a risk of privacy leakage.

13. The apparatus of claim 12 , wherein the performing, based on the audit log corresponding to the computing parameter generated by the one computing node, a privacy audit on the computing parameter transmitted by the computing node participating in the secure multi-party computation, to determine whether the computing parameter transmitted by the computing node contains a risk of privacy leakage further comprises:

determining, based on the key recorded in the audit log and corresponding to the ciphertext data transmitted by the computing node participating in the secure multi-party computation, whether the key is a known key held by the other computing nodes; and

determining, in response to a determination that the key is a known key held by the other computing nodes, that the computing parameter transmitted by the computing node contains the risk of privacy leakage; or

determining, in response to a determination that the key is not a known key held by the other computing nodes, that the computing parameter transmitted by the computing node does not contain the risk of privacy leakage.

14. The apparatus of claim 8 , wherein the distributed network is a blockchain network, and the plurality of computing nodes are nodes devices in the blockchain network.

15. A non-transitory computer-readable storage medium having instructions stored thereon executable by a processor to cause the processor to perform operations comprising:

generating, based on a secure multi-party computation algorithm, a computing parameter related to data held by one computing node of a plurality of computing nodes, wherein the plurality of computing nodes are deployed in a distributed network and jointly participating in a secure multi-party computation based on data held on each of the plurality of computing nodes, and the computing parameter comprises a random number participating in the secure multi-party computation;

transmitting the computing parameter to other computing nodes of the plurality of computing nodes participating in the secure multi-party computation for the other computing nodes to perform the secure multi-party computation based on computing parameters transmitted by the computing nodes participating in the secure multi-party computation;

creating an audit log corresponding to the computing parameter generated by the one computing node, the audit log recording description information related to the computing parameter, wherein the description information comprises a random number generation rule corresponding to the random number participating in the secure multi-party computation; and

performing, based on the audit log corresponding to the computing parameter generated by the one computing node, a privacy audit on the computing parameter transmitted by the computing node participating in the secure multi-party computation, to determine whether the computing parameter transmitted by the computing node contains a risk of privacy leakage, by:

determining, based on the random number generation rule recorded in the audit log and corresponding to the random number transmitted by the computing node participating in the secure multi-party computation, whether the random number is constructed based on the data held by the other computing nodes; and

determining, in response to a determination that the random number is constructed based on the data held by the other computing nodes, that the computing parameter transmitted by the computing node contains the risk of privacy leakage, or

determining, in response to a determination that the random number is not construed based on the data held by the other computing nodes, that the computing parameter transmitted by the computing node does not contain the risk of privacy leakage.

16. The storage medium of claim 15 , wherein the operations further comprise:

collecting computing parameters transmitted by the other computing nodes participating in the secure multi-party computation, and performing the secure multi-party computation based on the collected computing parameters transmitted by the other computing nodes; and

creating an audit log corresponding to the computing parameters transmitted by the other computing nodes and recording description information related to the computing parameters, and storing the audit log corresponding to the computing parameters transmitted by the other computing nodes.

17. The storage medium of claim 15 , wherein the computing parameter generated by the one computing node further comprises:

ciphertext data participating in the secure multi-party computation.

18. The storage medium of claim 17 , wherein the description information related to the computing parameter further comprises:

a key corresponding to the ciphertext data participating in the secure multi-party computation.

19. A non-transitory computer-readable storage medium having instructions stored thereon executable by a processor to cause the processor to perform operations comprising:

generating, based on a secure multi-party computation algorithm, a computing parameter related to data held by one computing node of a plurality of computing nodes, wherein the plurality of computing nodes are deployed in a distributed network and jointly participating in a secure multi-party computation based on data held on each of the plurality of computing nodes, and the computing parameter comprises ciphertext data participating in the secure multi-party computation;

transmitting, by the one computing node, the computing parameter to other computing nodes of the plurality of computing nodes participating in the secure multi-party computation for the other computing nodes to perform the secure multi-party computation based on computing parameters transmitted by the computing nodes participating in the secure multi-party computation;

creating, by the one computing node, an audit log corresponding to the computing parameter generated by the one computing node, the audit log recording description information related to the computing parameter, wherein the description information comprises a key corresponding to the ciphertext data participating in the secure multi-party computation; and

performing, based on the audit log corresponding to the computing parameter generated by the one computing node, a privacy audit on the computing parameter transmitted by the computing node participating in the secure multi-party computation, to determine whether the computing parameter transmitted by the computing node contains a risk of privacy leakage, by:

determining, based on the key recorded in the audit log and corresponding to the ciphertext data transmitted by the computing node participating in the secure multi-party computation, whether the key is a known key held by the other computing nodes; and

determining, in response to a determination that the key is a known key held by the other computing nodes, that the computing parameter transmitted by the computing node contains the risk of privacy leakage; or

determining, in response to a determination that the key is not a known key held by the other computing nodes, that the computing parameter transmitted by the computing node does not contain the risk of privacy leakage.

20. The storage medium of claim 19 , wherein the distributed network is a blockchain network, and the plurality of computing nodes are nodes devices in the blockchain network.

Assignments (1)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Oct 31, 2020
From: LI, LICHUN; YIN, SHAN; WANG, HUAZHONG; LIN, WENZHEN
To: ADVANCED NEW TECHNOLOGIES CO., LTD.
Reel/Frame 054644/0506 →
Priority Claims (1)
CN 201810925182.1 · Aug 14, 2018 · national
Continuity (2)
Continuation PCTCN2019092217 · Jun 21, 2019
Related Publication 20210051008A1 · Feb 18, 2021