Computer-implemented system and method for establishing distributed secret shares in a private data aggregation scheme

摘要

A probabilistic system and method facilitates the sharing of a secret among participating users in a private way. The secret shares satisfy the condition that their sum equal a predefined number that is chosen by a third party aggregator. Without interacting with any other user, each user computes a secret share according to a predefined probability density function. If enough parties join, their secret shares can be combined by the aggregator with relative efficiency into a secret with a high likelihood of success.

主权项

1. A computer-implemented system for establishing distributed secret shares in a private data aggregation scheme, comprising the steps of:
an aggregator server comprising a processor and memory within which code for execution by the processor is stored, further comprising:
a random generator maintained in the memory and chosen at random from a cyclic group of a set of prime order defined over a range of values of private data; anda distribution function over the cyclic group and a set of statistical parameters bounding the distribution function, also maintained in the memory; a plurality of participant computers each comprising a processor and memory within which code for execution by the processor is stored, for each participant computer further comprising:
one of the values of the private data maintained in the memory;a state initialization module configured in the participant computer to receive the set of prime order, the statistical parameters and the random generator from the aggregator server;a secret share module configured in the participant computer to create a secret share by a probabilistic random sampling of the distribution function bounded by the statistical parameters; andan encryption module configured in the participant computer to encrypt the private data value held by the participant computer into encrypted data using the participant computer's secret share; the aggregator server further comprising:
an aggregation module configured in the aggregator server to combine the encrypted data of each participant computer into an encrypted aggregate using the aggregator's secret share; anda decryption module configured in the aggregator server to find a decrypted aggregate.