Hash tree computation device
    1.
    发明授权

    公开(公告)号:US11546166B2

    公开(公告)日:2023-01-03

    申请号:US16451718

    申请日:2019-06-25

    IPC分类号: H04L29/06 H04L9/32

    摘要: Some embodiments are directed to a hash tree computation device. The hash tree computation device computes a top hash of a hash tree. A hash preimage of a leaf node of the hash tree comprises a type of the leaf node. A hash preimage of an internal node of the hash tree comprises a type count comprising a number of descendants of the internal node having a given type. The hash tree computation device computes the top hash by computing hashes of a current node and of its ancestors, where a hash of an ancestor is computed based on its type count, the type count being computed from types or type counts of its descendants.

    EVALUATION OF EVENTS USING A FUNCTION

    公开(公告)号:US20210144127A1

    公开(公告)日:2021-05-13

    申请号:US16954826

    申请日:2018-12-14

    IPC分类号: H04L29/06

    摘要: 2017PF01995 61 Abstract Evaluation of events using a function According to an aspect, there is provided a first node for evaluating an event using a function. A corresponding computer-implemented method of operating a first node to 5 evaluate an event using a function is also provided. The function is evaluated by two parties using garbled circuits, with each party garbling a circuit representing the function, and evaluating the circuit garbled by the other party. 10

    Evaluation of a monitoring function

    公开(公告)号:US11790094B2

    公开(公告)日:2023-10-17

    申请号:US17578549

    申请日:2022-01-19

    摘要: According to one aspect, there is provided a server for use in evaluating a monitoring function to determine if a trigger condition is satisfied. The server comprises a processing unit and a memory unit. The memory unit is for storing a current monitoring state Ss of the server or an encrypted current monitoring state S of the monitoring function, the current monitoring state Ss of the server relating to the current monitoring state S of the monitoring function that is based on an evaluation of one or more previous events. The processing unit is configured to receive an indication of a first event from a first client node and evaluate the monitoring function to determine if the first event satisfies the trigger condition. The evaluation is performed using a privacy-preserving computation, PPC, with the server providing the current monitoring state Ss of the server as a first private input to the PPC or the encrypted current monitoring state S of the monitoring function as a first input to the PPC, and the first client node providing the first event or an encryption thereof as a private input to the PPC. The evaluation of the monitoring function provides an encrypted updated monitoring state S′ of the monitoring function or an updated monitoring state Ss′ of the server as an output of the monitoring function and an indication of whether the first event satisfies the trigger condition.

    OBLIVIOUS OUTSOURCING OF FILE STORAGE
    4.
    发明申请

    公开(公告)号:US20190272379A1

    公开(公告)日:2019-09-05

    申请号:US16334060

    申请日:2017-09-19

    摘要: Various embodiments described herein relate to a system for providing file access while keeping both the accessing client and storage server from gaining any information about file contents or access patterns which they are not authorized to obtain. According to various embodiments, a key server instructs the storage server to retrieve a list of files, shuffle and re-encrypt the files in the list, and then send the list to the client. According to some embodiments, the key server also provides the client with information used to access the requested file from the list, re-encrypts the files in the lists again, reshuffles the list, and transmits the list back to the storage server to be recommitted to storage.

    MULTI-PARTY COMPUTATION SYSTEM FOR LEARNING A CLASSIFIER

    公开(公告)号:US20190073608A1

    公开(公告)日:2019-03-07

    申请号:US16122942

    申请日:2018-09-06

    IPC分类号: G06N99/00 G06F17/30

    摘要: Some embodiments are directed to a computation system for learning a classifier from a data set and associated classification data. The system comprises multiple data devices and multiple computation devices. The data set and associated classification data is stored across the multiple data devices. Classifier parameters of the classifier are learned iteratively from the data set. The learning comprises computing local error terms for the classifier from the associated classification data and from classifier results obtained from applying the classifier with the current classifier parameters to the local part of the data set, and providing the local error term as a private input to the multiple computation devices for a multi-party computation among the multiple computation devices.

    Nodes and methods of operating the same

    公开(公告)号:US11818249B2

    公开(公告)日:2023-11-14

    申请号:US16757549

    申请日:2018-11-28

    IPC分类号: H04L9/08

    摘要: Various embodiments include a first node for providing a function to a second node for evaluation, the first node configured to form a first plurality of garbled circuits for the function, each circuit being formed from a circuit representing the function and a respective set of wire keys and including one or more logic operations, one or more input wires for inputting data into the circuit and one or more output wires for outputting the result of the function, wherein each respective set of wire keys comprises a respective subset of wire keys for each input wire and each output wire, each subset of wire keys comprising a plurality of wire keys, each wire key in the plurality being associated with a possible value for the wire; and publish a first list of the first plurality of garbled circuits for the function for access by a plurality of second nodes.

    Distributing a computation output

    公开(公告)号:US11646876B2

    公开(公告)日:2023-05-09

    申请号:US16633992

    申请日:2018-07-31

    IPC分类号: H04L9/08 G06F7/02 H04L9/32

    摘要: According to an aspect, there is provided a method of operating a first computing node to distribute a computation output, the method comprising: determining a first random mask; providing the first random mask as a private input to a computation by a first evaluator node and a second evaluator node; receiving, from each of the first evaluator node and the second evaluator node, a respective masked computation output, wherein each masked computation output is a function of an output of the computation and the first random mask; if the received respective masked computation outputs match, determining the output of the computation from the received masked computation output and the first random mask; and sending information to the first evaluator node and the second evaluator node to enable the first evaluator node and the second evaluator node to determine the output of the computation from the respective masked computation output.

    Batch-wise distributed preprocessing information verification

    公开(公告)号:US11368311B2

    公开(公告)日:2022-06-21

    申请号:US16610674

    申请日:2018-05-03

    IPC分类号: H04L9/32 H04L9/00 H04L9/08

    摘要: Some embodiments are directed to a dealer device for batch-wise provisioning of preprocessing information for a multiparty computation and an evaluator device for batch-wise distributed verification with one or more other evaluator devices of the preprocessing information. The preprocessing information comprises multiple random values and multiple message authentication codes for blinding and integrity checking respectively in the multi-party computation. The multiple random values and a set of proof values together define a checking polynomial. The dealer device computes proof values wherein the checking polynomial is identical to zero. The evaluator device obtains secret-shares of the random values, proof values, and message authentication codes. The evaluator device checks by a distributed computation with the one or more other evaluator devices that an evaluation of the checking polynomial in a random evaluation point is zero, thus verifying that multiple polynomial checking equations are satisfied on the multiple random values.

    Pinocchio/Trinocchio on authenticated data

    公开(公告)号:US11088823B2

    公开(公告)日:2021-08-10

    申请号:US16475421

    申请日:2017-12-29

    摘要: According to an aspect, there is provided a first node for use in a system, the system comprising one or more trusted source nodes, one or more worker nodes and a verifier node, wherein the first node is configured to determine a trusted input commitment key for a trusted input to be input into a computation that is to be evaluated by the one or more worker nodes, wherein the trusted input commitment key is for use by the one or more trusted source nodes in forming a trusted input commitment of one or more trusted inputs; determine a computation evaluation key for use by the one or more worker nodes in determining a proof that a computation on one or more trusted inputs is correct and that the one or more trusted inputs were used in the computation, wherein the computation evaluation key comprises key material for one or more trusted input wires that are for inputting the one or more trusted inputs into the computation, wherein the key material is derived from a trapdoor value, one or more polynomials evaluated in a point corresponding to the trapdoor value that are independent of polynomials representing the computation, and one or more polynomials evaluated in a point corresponding to the trapdoor value that represent the computation; determine a computation verification key for use by the verifier node in verifying the result of the computation by the one or more worker nodes; and publish the trusted input commitment key, the computation evaluation key and the computation verification key. A corresponding method of operating a first node is provided. Other aspects also provide a trusted source node, a worker node and a verifier node, and methods of operating the same.