WO2020223917A1

WO2020223917A1 - Method and apparatus for implementing secure multi-party computation, and computer device and storage medium

Info

Publication number: WO2020223917A1
Application number: PCT/CN2019/085940
Authority: WO
Inventors: 黄高峰; 李升林; 孙立林; 谢翔
Original assignee: 云图有限公司
Priority date: 2019-05-08
Filing date: 2019-05-08
Publication date: 2020-11-12

Abstract

A method and apparatus for implementing secure multi-party computation, and a computer device and a storage medium. The method comprises: a proxy server receives a computation request sent by a first MPC node (S301), wherein the first MPC node is one of a plurality of MPC nodes, and a callback function of each of the plurality of MPC nodes is registered in the proxy server; in response to the computation request, the proxy server sends the computation request to each MPC node by calling the callback function of each MPC node (S302); in the case of determining that each MPC node receives the computation request, the proxy server sends a computation start notification to each MPC node by calling the callback function of each MPC node (S303), wherein the computation start notification is used for indicating each MPC node to execute the secure multi-party computation. According to the method, the secure multi-party computation cooperation service can be constructed in a more flexible and configurable manner, and the task cooperation efficiency and the computation efficiency are effectively improved.

Description

Method, device, computer equipment and storage medium for realizing secure multi-party computing

Technical field

This application relates to the technical field of secure multi-party computing, and in particular to a method, device, computer equipment, and storage medium for implementing secure multi-party computing.

Background technique

Secure Multi-Party Computation (MPC) means that in a distributed network, multiple users need to work together to complete a task, and each user holds some private data as input to the task, and they hope to complete it together The calculation of these data requires that each user cannot know any input information of other users except the calculation result. Secure multi-party computing is to solve the problem of collaborative computing between a group of untrusted parties under the premise of protecting privacy. Secure multi-party computing must ensure the independence of input and the correctness of the calculation, while not leaking each input data to the participants. Other members of the calculation. Secure multi-party computing plays an important role in scenarios such as electronic elections, electronic voting, electronic auctions, secret sharing, and threshold signatures.

However, the task collaboration efficiency between the nodes participating in the calculation in the current secure multi-party calculation is low, which results in low calculation efficiency.

In view of the above problems, no effective solutions have been proposed yet.

Summary of the invention

The embodiments of the present application provide a method for implementing secure multi-party computing to solve the problem of low task collaboration efficiency between nodes participating in computing in the prior art.

The embodiment of the present application provides a method for implementing secure multi-party computing, including: a proxy server receives a calculation request sent by a first MPC node, where the first MPC node is one MPC node among multiple MPC nodes, and the proxy server is registered There are callback functions for each MPC node in multiple MPC nodes; in response to a calculation request, the proxy server sends a calculation request to each MPC node by calling the callback function of each MPC node; in the case where it is determined that each MPC node has received the calculation request, The proxy server sends a calculation start notification to each MPC node by calling the callback function of each MPC node, where the calculation start notification is used to instruct each MPC node to perform secure multi-party calculation.

In one embodiment, the proxy server registers the callback function of each MPC node in the multiple MPC nodes, including: the proxy server receives a callback registration request sent by each MPC node in the multiple MPC nodes, and the callback registration request carries the corresponding MPC node User information and callback function, the user information is used to identify the corresponding MPC node; in response to the callback registration request, the proxy server registers the user information and the callback function of each MPC node among the multiple MPC nodes.

In one embodiment, the user information includes at least one of the following: user ID, task ID, port ID, public key, and distribution password.

In one embodiment, each MPC node performs secure multi-party calculation, including: in response to a calculation start notification, establishing a direct connection between each MPC node; each MPC node performs secure multi-party calculation according to a preset MPC protocol, where each MPC node Directly transfer intermediate data between calculations.

In one embodiment, each MPC node executes secure multi-party computing, including: in response to the calculation start notification, each MPC node establishes an indirect connection through a proxy server; each MPC node performs secure multi-party computing according to a preset MPC protocol, where, Each MPC node forwards and calculates intermediate data through a proxy server.

In one embodiment, the proxy server forwards the calculation intermediate data, including: the proxy server receives the encrypted calculation intermediate data sent by the second MPC node, where the encrypted calculation intermediate data is generated by the second MPC node according to the third MPC node The second MPC node and the third MPC node are two MPC nodes among multiple MPC nodes; the proxy server encrypts the received data by calling the callback function of the third MPC node. The latter calculation intermediate data is sent to the third MPC node, where the third MPC node decrypts the received calculation intermediate data according to its own private key to obtain the decrypted calculation intermediate data.

In one embodiment, after each MPC node executes the secure multi-party calculation, the method further includes: the proxy server receives the result distribution request sent by the fourth MPC node, where the fourth MPC node is the MPC node that obtains the calculation result among the MPC nodes ; In response to the result distribution request, the proxy server distributes the calculation result.

In an embodiment, before the proxy server receives the result distribution request sent by the fourth MPC node, the method further includes: the fourth MPC node determines whether to distribute the obtained calculation result; after determining whether to distribute the obtained calculation result In this case, the fourth MPC node sends a result distribution request to the proxy server, and the result distribution request carries the calculation result.

In one embodiment, the proxy server receives data and/or requests sent by multiple MPC nodes via a firewall, and sends data and/or requests to multiple MPC nodes via the firewall.

The embodiment of the present application also provides a device for realizing secure multi-party computing, which is located in the proxy server, and includes: a receiving module for receiving a calculation request sent by a first MPC node, where the first MPC node is among multiple MPC nodes For one MPC node in the Proxy Server, the callback function of each MPC node in multiple MPC nodes is registered in the proxy server; the first callback module is used to send a calculation request to each MPC node by calling the callback function of each MPC node in response to a calculation request; The second callback module is used to send a calculation start notification to each MPC node by calling the callback function of each MPC node when it is determined that each MPC node has received the calculation request. The calculation start notification is used to instruct each MPC node to execute Safe multi-party calculations.

An embodiment of the present application further provides a computer device including a processor and a memory for storing executable instructions of the processor, and the processor implements the method for implementing secure multi-party computing described in any of the foregoing embodiments when the processor executes the instructions A step of.

The embodiments of the present application also provide a computer-readable storage medium on which computer instructions are stored, which when executed, implement the steps of the method for implementing secure multi-party computing described in any of the foregoing embodiments.

In the embodiment of the present application, a method for implementing secure multi-party computing is provided. A proxy server registered with the callback function of each MPC node among multiple MPC nodes receives a calculation request, and in response to the calculation request, calls each MPC node's The callback function sends a calculation request to each MPC node, and when it is determined that each MPC node has received the calculation request, the callback function of each MPC node is called to send a calculation start notification to each MPC node, so that each MPC node performs secure multi-party calculation. In the above solution, the computing task coordination between the MPC nodes is performed through the proxy server, so that a more flexible and configurable way can be used to construct computing collaboration services, thereby achieving secure multi-party computing between MPC nodes, effectively improving the efficiency of task collaboration and Safe multi-party calculation efficiency. Through the above-mentioned solution, the existing technical problems of low task collaboration efficiency and low computational efficiency of secure multi-party computing are solved, and the technical effects of effectively improving the efficiency and flexibility of task collaboration and improving the efficiency of secure multi-party computing are achieved.

Description of the drawings

The drawings described here are used to provide a further understanding of the application, constitute a part of the application, and do not constitute a limitation to the application. In the attached picture:

FIG. 1 shows a schematic diagram of an application scenario of a method for implementing secure multi-party computing in an embodiment of the present application;

FIG. 2 shows a schematic diagram of the system architecture of a method for implementing secure multi-party computing in an embodiment of the present application;

FIG. 3 shows a flowchart of a method for implementing secure multi-party computing in an embodiment of the present application;

FIG. 4 shows a sequence diagram of a method for implementing secure multi-party computing in an embodiment of the present application;

FIG. 5 shows a sequence diagram of a method for implementing secure multi-party computing in an embodiment of the present application;

FIG. 6 shows a schematic diagram of a device for implementing secure multi-party computing in an embodiment of the present application;

Fig. 7 shows a schematic diagram of a computer device in an embodiment of the present application.

Detailed ways

The principle and spirit of the present application will be described below with reference to several exemplary embodiments. It should be understood that these embodiments are only provided to enable those skilled in the art to better understand and then implement the application, but not to limit the scope of the application in any way. On the contrary, these embodiments are provided to make the disclosure of this application more thorough and complete, and to fully convey the scope of the disclosure to those skilled in the art.

Those skilled in the art know that the implementation manners of this application can be implemented as a system, apparatus, method, or computer program product. Therefore, the disclosure of the present application can be specifically implemented in the following forms, namely: complete hardware, complete software (including firmware, resident software, microcode, etc.), or a combination of hardware and software.

The embodiment of the present application provides a method for implementing secure multi-party computing. Fig. 1 shows a schematic diagram of an application scenario of the method. In Figure 1, a proxy server and multiple MPC nodes are schematically shown (in this application, the number of MPC nodes can be 2, 3, or more than 3, and Figure 1 only schematically shows 3 MPC nodes: MPC node 1, MPC node 2, and MPC node 3). As shown in Figure 1, user callbacks of multiple MPC nodes are registered in the proxy server, and user callbacks include user information and callback functions. The proxy server communicates with each MPC node. The proxy server can receive the calculation request sent by any one of the multiple MPC nodes, and in response to the calculation request, send the calculation request to each MPC node by calling the callback function of each MPC node, and confirm that each MPC node successfully receives In the case of a calculation request, a calculation start notification is sent to each MPC node by calling the callback function of each MPC node, and each MPC node performs a secure multi-party calculation in response to the calculation start notification.

The foregoing proxy server may be a single server, a server cluster, or a cloud server, etc., and the specific composition is not limited in this application. The above-mentioned MPC node may be a desktop computer, a notebook, a mobile phone terminal, a PDA, etc., as long as it is a device that can communicate with a proxy server and has computing capabilities. The present application does not limit the appearance and formation of the MPC node.

FIG. 2 shows a schematic diagram of a system architecture of a method for implementing secure multi-party computing in the implementation of this application. In Fig. 2, two MPC nodes are schematically shown: MPC node 1 and MPC node 2. As shown in Figure 2, each MPC node may include MPC APP (application), MPC SDK (MPC software development kit), MPC CORE (MPC core), and Data Client/Service (data client/server). Among them, MPC APP can receive secure multi-party computing requests input by users. MPC SDK is used to provide computing task service interface for MPC APP to use, including registration callback, initiating invitation and other operations, which need to call data communication services provided by Data Client/Service. MPC CORE is used to provide MPC protocol to achieve core computing tasks and perform secure multi-party computing. Data Client/Service provides input and output data client or server capabilities, and acts as a communication entity for secure multi-party computing. The firewall is used to provide reliable, safe and efficient application firewall services. The proxy server is used to provide user registration services, process computing requests, negotiate secure multi-party computing, and can provide data channel agents, communicate with data clients through requests and callbacks, and provide computing collaboration services.

In the above solution, each MPC node has a data client, and the data client can communicate with the proxy server or the opposite MPC node. For the MPC calculation intermediate data transmission method, the MPC node can use one of the following methods: proxy transmission mode and direct transmission mode. Among them, in the proxy transmission mode, the MPC node has the capability of a data client, which relies on the transfer service provided by the proxy server to send data, and then the proxy server sends the data to the opposite MPC node through a callback. In the proxy transmission mode, multiple MPC nodes can be in different networks, and the proxy service is equivalent to a public network proxy, providing data transfer to realize data exchange between MPC nodes. Since the intermediate calculation data is sent to the proxy server in the proxy forwarding mode, you can consider using the public and private key mechanism to encrypt the calculation intermediate data using the public key of the MPC node as the receiver, and then forward the message through the proxy server to further ensure the calculation of the data Privacy. In the direct transmission mode, the MPC node opens the data service, directly establishes a communication connection with the opposite MPC node, and can directly receive the intermediate calculation data sent by the opposite MPC node or directly send the intermediate calculation data to the opposite MPC node. It will not leak to a third-party proxy server, so data privacy is higher. In practical applications, one of these two transmission modes can be flexibly selected according to the actual situation.

Please refer to FIG. 3, which shows a flowchart of a method for implementing secure multi-party computing in an embodiment of the present application. Although this application provides method operation steps or device structures as shown in the following embodiments or drawings, the method or device may include more or fewer operation steps or module units based on conventional or no creative labor. . In steps or structures where there is no necessary causal relationship logically, the execution order of these steps or the module structure of the device is not limited to the execution order or module structure shown in the description of the embodiments of this application and the drawings. When the described method or module structure is applied to an actual device or terminal product, it can be executed sequentially or in parallel according to the method or module structure connection shown in the embodiments or drawings (for example, parallel processor or multi-threaded processing Environment, even distributed processing environment).

Specifically, as shown in FIG. 3, the method for implementing secure multi-party computing provided by an embodiment of the present application may include the following steps:

Step 301: The proxy server receives a calculation request sent by a first MPC node, where the first MPC node is one MPC node among multiple MPC nodes, and the proxy server registers a callback function of each MPC node among the multiple MPC nodes.

Specifically, the proxy server is registered with the callback function of each of the multiple MPC nodes participating in the secure multi-party calculation. The callback function may include but is not limited to at least one of the following: an invitation callback function, a preparation callback function, a data callback function, and a result callback function. The proxy server may receive the calculation request sent by the first MPC node among the multiple MPC nodes. The calculation request may be a calculation invitation request.

Step 302: In response to the calculation request, the proxy server sends the calculation request to each MPC node by calling the callback function of each MPC node.

Specifically, after receiving the calculation request, in response to the calculation request, the proxy server can send a calculation request to each MPC node including the first MPC node by invoking the invitation callback function of each MPC node, so as to invite each MPC node to participate in the secure multi-party Calculation.

Step 303: When it is determined that each MPC node has received the calculation request, the proxy server sends a calculation start notification to each MPC node by calling the callback function of each MPC node, where the calculation start notification is used to instruct each MPC node to perform secure multi-party Calculation.

Specifically, after sending the calculation request to each MPC node, the proxy server determines whether each MPC node has received the calculation request. Since the proxy server sends the calculation request by calling the callback function, the proxy server can determine whether each MPC node has received the calculation request according to whether the callback function is executed successfully. In the case where it is determined that each MPC node has received the calculation request, the proxy server may send a calculation start notification to each MPC node by calling the preparation callback function of each MPC node. The calculation start notification is used to inform that each MPC node is ready to start secure multi-party calculation. Each MPC node executes secure multi-party calculation in response to the calculation start notification.

In the implementation method of secure multi-party computing in the above embodiment, a proxy server registered with the callback function of each MPC node among multiple MPC nodes receives a calculation request, and in response to the calculation request, calls the callback function of each MPC node to each MPC node. Send a calculation request, and when it is determined that each MPC node has received the calculation request, call the callback function of each MPC node to send a calculation start notification to each MPC node, so that each MPC node performs secure multi-party calculation. In the above solution, the computing task coordination between the MPC nodes is performed through the proxy server, so that a more flexible and configurable way can be used to construct computing collaboration services, thereby achieving secure multi-party computing between MPC nodes, effectively improving the efficiency of task collaboration and Safe multi-party calculation efficiency. Through the above-mentioned solution, the existing technical problems of low task collaboration efficiency and low computational efficiency of secure multi-party computing are solved, and the technical effects of effectively improving the efficiency and flexibility of task collaboration and improving the efficiency of secure multi-party computing are achieved.

Further, in some embodiments of the present application, the proxy server registering the callback function of each MPC node in the multiple MPC nodes may include: the proxy server receives the callback registration request sent by each MPC node in the multiple MPC nodes, and the callback registration request The user information and callback function of the corresponding MPC node are carried, and the user information is used to identify the corresponding MPC node; in response to the callback registration request, the proxy server registers the user information and the callback function of each MPC node among the multiple MPC nodes. In some embodiments of the present application, the user information may include at least one of the following: user ID, task ID, port ID, public key, and distribution password. Among them, the proxy server can verify each MPC node according to the assigned password, and after the verification is passed, the user callback registration of the MPC node will be performed. Through the above method, the callback function and user information of each MPC node can be registered in the proxy server, so that when the MPC node receives the calculation invitation, the calculation request and the calculation start notification are sent to each MPC node through the callback, so that each MPC node executes safely. Multi-party calculations.

Considering that the intermediate calculation data can be transmitted between the MPC nodes through the direct transmission mode, therefore, in some embodiments of the present application, each MPC node performs secure multi-party calculations, which may include: in response to the calculation start notification, between the MPC nodes Establish a direct connection; each MPC node executes secure multi-party calculations according to the preset MPC protocol, among which the intermediate data of calculation is directly transmitted between each MPC node. Among them, when a direct connection is established between each MPC node, the connection information, service address, and port IP address of the opposite end are obtained, so as to facilitate subsequent direct transmission and calculation of intermediate data. Through the above method, when each MPC node performs secure multi-party calculation, the intermediate calculation data is directly transmitted without forwarding through a proxy server, which can better protect data privacy.

Considering that each MPC node may be in a different network and cannot directly establish a communication connection, therefore, the intermediate calculation data can be forwarded through the proxy server, that is, the intermediate calculation data can be transmitted through the proxy transmission mode. Therefore, in some embodiments of the present application, each MPC node performing secure multi-party computing may include: in response to the calculation start notification, each MPC node establishes an indirect connection through a proxy server; each MPC node performs security according to a preset MPC protocol Multi-party calculations, where each MPC node forwards intermediate calculation data through a proxy server. Among them, the proxy server provides the public network IP, so that multiple MPC nodes in different networks establish communication connections through the proxy server to realize internal and external network communication. It can also be used to monitor network quality, perform traffic monitoring, and bandwidth monitoring. Through the above method, indirect connections can be established between multiple MPC nodes in different networks through a proxy server, so that multiple MPC nodes in different networks can cooperate to perform secure multi-party computing.

In the proxy forwarding mode, the intermediate calculation data is forwarded through the proxy server. To protect data privacy, the intermediate calculation data can be encrypted before forwarding. Therefore, in some embodiments of the present application, the proxy server forwarding the calculation intermediate data may include: the proxy server receives the encrypted calculation intermediate data sent by the second MPC node, where the encrypted calculation intermediate data is generated by the second MPC node It is obtained by encrypting the intermediate calculation data according to the public key of the third MPC node. The second MPC node and the third MPC node are two of the multiple MPC nodes; the proxy server calls the callback function of the third MPC node The received encrypted intermediate calculation data is sent to the third MPC node, where the third MPC node decrypts the received intermediate calculation data according to its own private key to obtain the decrypted intermediate calculation data. Through the above method, the intermediate calculation data is encrypted and then forwarded, which can protect data privacy in the proxy transmission mode.

After each MPC node performs a secure multi-party calculation, one of the MPC nodes generally obtains the calculation result. In order to distribute the calculation result to other MPC nodes, the calculation result can be distributed through a proxy server. Therefore, in some embodiments of the present application, after each MPC node executes the secure multi-party calculation, it may also include: the proxy server receives the result distribution request sent by the fourth MPC node, where the fourth MPC node is the acquisition in each MPC node The MPC node of the calculation result; in response to the result distribution request, the proxy server distributes the calculation result. Through the above method, the calculation result can be distributed through the proxy server.

Further, in some embodiments of the present application, before the proxy server receives the result distribution request sent by the fourth MPC node, it may further include: the fourth MPC node determines whether to distribute the obtained calculation result; In the case of distributing the calculation result of, the fourth MPC node sends a result distribution request to the proxy server, and the result distribution request carries the calculation result. Among them, the fourth MPC node can determine whether the obtained calculation result needs to be distributed according to the configuration file or code. In the case of determining that the obtained calculation result is to be distributed, the fourth MPC node sends a result distribution request to the proxy server. The calculation result is carried in the distribution request. Through the above method, whether to distribute the calculation result can be determined as needed.

To ensure the security of data communication, data can be sent or received via a firewall. Therefore, in some embodiments of the present application, the proxy server may receive data and/or requests sent by multiple MPC nodes via a firewall, and may send data and/or requests to multiple MPC nodes via the firewall. Through the above method, a reliable, safe and efficient application firewall service can be provided to further protect data privacy and data security.

The above method will be described below in combination with two specific embodiments. However, it is worth noting that the specific embodiments are only for better describing the application, and do not constitute an improper limitation of the application.

Please refer to FIG. 4 and FIG. 5, which respectively show a sequence diagram of the method for implementing secure multiparty computing in the direct transmission mode and a sequence diagram of the method for implementing secure multiparty computing in the proxy transmission mode. Two MPC nodes are shown as examples in both Fig. 4 and Fig. 5.

As shown in Figure 4, the method for implementing secure multi-party computing may include the following steps:

Step 1. MPC node 1 and MPC node 2 are pre-processed, and MPC APP loads related configurations, prepares the computing environment, and caches the Boolean circuit calculated by MPC, etc.;

Step 2: MPC node 1 and MPC node 2 respectively send user callback registration requests to the proxy server, and the proxy server responds to the user callback registration request and registers the user callbacks of MPC node 1 and MPC node 2 to the proxy server;

Step 3: MPC node 1 sends an MPC calculation invitation to the proxy server;

Step 4. In response to the MPC calculation invitation, the proxy server sends an invitation callback to MPC node 1 and MPC node 2;

Step 5. The proxy server sends a preparation callback to the MPC node 1 and the MPC node 2 when it determines that all invitation callbacks are executed successfully;

Step 6, MPC node 1 and MPC node 2 establish a direct connection in response to preparing a callback, and perform MPC calculation. During the MPC calculation process, MPC node 1 and MPC node 2 directly transmit intermediate calculation data;

Step 7. After the MPC node 2 obtains the calculation result, if it is determined that the calculation result does not need to be distributed, execute step 9; if it is determined to send the calculation result to the MPC node 1, execute step 8;

Step 8. The MPC node 2 sends the calculation result to the proxy server, and the proxy server sends the calculation result to the MPC node 1 through the calculation result callback;

Step 9, end.

As shown in Figure 5, the method for implementing secure multiparty computing includes the following steps:

Step 3: MPC node 1 sends an MPC calculation invitation to the proxy server;

Step 6, MPC node 1 and MPC node 2 respond to the preparation of the callback, establish an indirect connection through the proxy server, and perform MPC calculation. During the MPC calculation process, MPC node 1 and MPC node 2 transmit intermediate calculation data through proxy server forwarding. , Where the proxy server forwards the data through data callback. Before forwarding the data through the proxy server, the MPC node as the sender encrypts the data according to the public key of the MPC node as the receiver, and the data is received at the MPC node as the receiver After the data, decrypt it according to its own private key to obtain the decrypted data;

Step 9, end.

From the implementation methods of secure multi-party computing in the above two embodiments, it can be seen that the secure multi-party computing method provided in this application can provide multiple ways to establish a communication network, including: public network, intranet, and intranet and public network combination, etc. ; It is also possible to build a reliable data transmission channel by providing firewall services on the channel. This application is responsible for coordinating calculation tasks by setting up a proxy server, such as MPC node registration, calculation invitation, connection establishment, calculation process proxy, etc., which can simplify collaborative processing The process enables the construction of computing collaboration services in a more flexible and configurable manner, provides customizable network configuration capabilities, makes computing scheduling and execution more efficient, thereby improving the efficiency of secure multi-party computing and ensuring data privacy.

Based on the same inventive concept, an implementation device for secure multi-party computing is also provided in an embodiment of the present application, which is located in a proxy server, as described in the following embodiment. Since the problem-solving principle of the device for implementing secure multiparty computing is similar to the method for implementing secure multiparty computing, the implementation of the device for implementing secure multiparty computing can refer to the implementation of secure multiparty computing, and the repetition will not be repeated. As used below, the term "unit" or "module" can be a combination of software and/or hardware that implements predetermined functions. Although the devices described in the following embodiments are preferably implemented by software, hardware or a combination of software and hardware is also possible and conceived. Fig. 6 is a structural block diagram of the device for implementing secure multi-party computing according to an embodiment of the present application. As shown in Fig. 6, it includes: a receiving module 601, a first callback module 602, and a second callback module 603. Description.

The receiving module 601 is configured to receive a calculation request sent by a first MPC node, where the first MPC node is one MPC node among multiple MPC nodes, and a callback function of each MPC node among the multiple MPC nodes is registered in the proxy server.

The first callback module 602 is configured to send a calculation request to each MPC node by calling the callback function of each MPC node in response to the calculation request.

The second callback module 603 is used to send a calculation start notification to each MPC node by calling the callback function of each MPC node when it is determined that each MPC node has received the calculation request, wherein the calculation start notification is used to instruct each MPC node to execute Safe multi-party calculations.

In some embodiments of the present application, the device for implementing secure multi-party computing may further include a registration module, the registration module is used to register the callback function of each MPC node of the multiple MPC nodes in the proxy server, and the registration module may be specifically used In: Receive a callback registration request sent by each MPC node in multiple MPC nodes, the callback registration request carries the user information and callback function of the corresponding MPC node, and the user information is used to identify the corresponding MPC node; in response to the callback registration request, User information and callback functions of each MPC node in each MPC node are registered.

In some embodiments of the present application, the user information may include at least one of the following: user ID, task ID, port ID, public key, and distribution password.

In some embodiments of the present application, each MPC node performing secure multi-party computing may include: in response to a calculation start notification, establishing a direct connection between each MPC node; each MPC node performing secure multi-party computing according to a preset MPC protocol, where: Each MPC node directly transmits and calculates intermediate data.

In some embodiments of the present application, each MPC node performing secure multi-party computing may include: in response to a calculation start notification, establishing an indirect connection between each MPC node through a proxy server; each MPC node performing secure multi-party computing according to a preset MPC protocol , Among them, each MPC node forwards and calculates intermediate data through a proxy server.

In some embodiments of the present application, the device for implementing secure multi-party computing may further include a forwarding module for forwarding intermediate calculation data, and the forwarding module may be specifically configured to: receive the encrypted intermediate calculation data sent by the second MPC node, Among them, the encrypted intermediate calculation data is obtained by the second MPC node after encrypting the intermediate calculation data according to the public key of the third MPC node. The second MPC node and the third MPC node are two of the multiple MPC nodes. MPC node: Send the received encrypted intermediate calculation data to the third MPC node by calling the callback function of the third MPC node, where the third MPC node decrypts the received intermediate calculation data according to its own private key, To obtain the decrypted intermediate data.

In some embodiments of the present application, the device for implementing secure multi-party computing may further include a distribution module, which is specifically configured to: after each MPC node executes secure multi-party computing, receive a result distribution request sent by the fourth MPC node, where , The fourth MPC node is the MPC node that obtains the calculation result among the MPC nodes; in response to the result distribution request, the calculation result is distributed.

In some embodiments of the present application, before the distribution module receives the result distribution request sent by the fourth MPC node, the fourth MPC node determines whether to distribute the obtained calculation result; in the case where it is determined to distribute the obtained calculation result Next, the fourth MPC node sends a result distribution request to the proxy server, and the result distribution request carries the calculation result.

In some embodiments of the present application, the device for implementing secure multi-party computing may receive data and/or requests sent by multiple MPC nodes via a firewall, and may send data and/or requests to multiple MPC nodes via the firewall.

From the above description, it can be seen that the embodiments of the present application achieve the following technical effects: the proxy server registered with the callback function of each MPC node among the multiple MPC nodes receives the calculation request, and in response to the calculation request, calls each MPC The callback function of the node sends a calculation request to each MPC node. When it is determined that each MPC node has received the calculation request, the callback function of each MPC node is called to send a calculation start notification to each MPC node, so that each MPC node performs secure multi-party calculation . In the above solution, the computing task coordination between the MPC nodes is performed through the proxy server, so that a more flexible and configurable way can be used to construct computing collaboration services, thereby achieving secure multi-party computing between MPC nodes, effectively improving the efficiency of task collaboration and Safe multi-party calculation efficiency. Through the above-mentioned solution, the existing technical problems of low task collaboration efficiency and low computational efficiency of secure multi-party computing are solved, and the technical effects of effectively improving the efficiency and flexibility of task collaboration and improving the efficiency of secure multi-party computing are achieved.

The embodiment of the present application also provides a computer device. For details, please refer to the schematic diagram of the structure of a computer device based on the method for implementing secure multi-party computing provided by the embodiment of the present application shown in FIG. 7. The computer device may specifically include an input device 71 , Processor 72, memory 73. Wherein, the memory 73 is used to store processor executable instructions. The processor 72 implements the steps of the method for implementing secure multi-party computing described in any of the foregoing embodiments when executing the instructions.

In this embodiment, the input device may specifically be one of the main devices for information exchange between the user and the computer system. The input device may include a keyboard, a mouse, a camera, a scanner, a light pen, a handwriting input board, a voice input device, etc.; the input device is used to input raw data and programs for processing these numbers into the computer. The input device can also obtain and receive data transmitted from other modules, units, and devices. The processor can be implemented in any suitable way. For example, the processor may take the form of a microprocessor or a processor and a computer-readable medium, logic gates, switches, application specific integrated circuits that store computer-readable program codes (such as software or firmware) executable by the (micro)processor ( Application Specific Integrated Circuit, ASIC), programmable logic controller and embedded microcontroller form, etc. The memory may specifically be a memory device used to store information in modern information technology. The memory can include multiple levels. In a digital system, as long as it can store binary data, it can be a memory; in an integrated circuit, a circuit with a storage function without a physical form is also called a memory, such as RAM, FIFO, etc.; In the system, storage devices in physical form are also called memory, such as memory sticks, TF cards, etc.

In this embodiment, the specific functions and effects implemented by the computer device can be explained in comparison with other embodiments, and will not be repeated here.

The embodiment of the present application also provides a computer storage medium based on a method for realizing secure multi-party computing. The computer storage medium stores computer program instructions, and when the computer program instructions are executed, the computer program instructions described in any of the foregoing embodiments are implemented. Steps of the implementation method of secure multi-party computing.

In this embodiment, the above-mentioned storage medium includes but is not limited to random access memory (Random Access Memory, RAM), read-only memory (Read-Only Memory, ROM), cache (Cache), and hard disk (Hard Disk Drive, HDD) Or memory card (Memory Card). The memory can be used to store computer program instructions. The network communication unit may be an interface set up in accordance with a standard stipulated by the communication protocol and used for network connection communication.

In this embodiment, the specific functions and effects realized by the program instructions stored in the computer storage medium can be explained in comparison with other embodiments, and will not be repeated here.

Obviously, those skilled in the art should understand that the modules or steps of the embodiments of the present application described above can be implemented by a general computing device, and they can be concentrated on a single computing device or distributed among multiple computing devices. Optionally, they can be implemented with program codes executable by a computing device, so that they can be stored in a storage device for execution by the computing device, and in some cases, can be different from here The steps shown or described are executed in the order of, or they are respectively fabricated into individual integrated circuit modules, or multiple modules or steps of them are fabricated into a single integrated circuit module to achieve. In this way, the embodiments of the present application are not limited to any specific hardware and software combination.

It should be understood that the above description is for illustration and not for limitation. By reading the above description, many implementations and many applications beyond the examples provided will be apparent to those skilled in the art. Therefore, the scope of this application should not be determined with reference to the above description, but should be determined with reference to the foregoing claims and the full range of equivalents possessed by these claims.

The foregoing descriptions are only preferred embodiments of the present application, and are not intended to limit the present application. For those skilled in the art, the embodiments of the present application may have various modifications and changes. Any modification, equivalent replacement, improvement, etc. made within the spirit and principle of this application shall be included in the protection scope of this application.

Claims

A method for implementing secure multi-party computing, characterized in that it includes:

The proxy server receives the calculation request sent by the first MPC node, where the first MPC node is one of the multiple MPC nodes, and the proxy server is registered with the callback of each MPC node of the multiple MPC nodes function;

In response to the calculation request, the proxy server sends the calculation request to each MPC node by calling the callback function of each MPC node;

When it is determined that each MPC node has received the calculation request, the proxy server sends a calculation start notification to each MPC node by calling the callback function of each MPC node, wherein the calculation start notification is used to indicate Each MPC node described above performs secure multi-party computation.
The method according to claim 1, wherein the proxy server registering the callback function of each of the multiple MPC nodes comprises:

The proxy server receives a callback registration request sent by each MPC node of the multiple MPC nodes, where the callback registration request carries user information and a callback function corresponding to the MPC node, and the user information is used to identify the corresponding MPC node;

In response to the callback registration request, the proxy server registers the user information and the callback function of each MPC node among the multiple MPC nodes.
The method according to claim 2, wherein the user information includes at least one of the following: user ID, task ID, port ID, public key, and distribution password.
The method according to claim 1, wherein the execution of secure multi-party computation by each MPC node comprises:

In response to the calculation start notification, a direct connection is established between the MPC nodes;

Each MPC node executes secure multi-party calculation according to a preset MPC protocol, wherein the intermediate data for calculation is directly transmitted between each MPC node.
The method according to claim 1, wherein the execution of secure multi-party computation by each MPC node comprises:

In response to the calculation start notification, the MPC nodes establish an indirect connection through the proxy server;

Each MPC node executes secure multi-party calculation according to a preset MPC protocol, wherein the intermediate data of calculation is forwarded between each MPC node through the proxy server.
The method according to claim 5, wherein the forwarding of intermediate calculation data by the proxy server comprises:

The proxy server receives the encrypted intermediate calculation data sent by the second MPC node, where the encrypted intermediate calculation data is encrypted by the second MPC node according to the public key of the third MPC node Obtained later, the second MPC node and the third MPC node are two MPC nodes of the multiple MPC nodes;

The proxy server sends the received encrypted intermediate calculation data to the third MPC node by calling the callback function of the third MPC node, where the third MPC node receives the data according to its own private key pair The intermediate calculation data is decrypted to obtain the intermediate calculation data after decryption.
The method according to claim 1, wherein after each MPC node executes secure multi-party calculation, the method further comprises:

Receiving, by the proxy server, a result distribution request sent by a fourth MPC node, where the fourth MPC node is an MPC node that obtains a calculation result among the MPC nodes;

In response to the result distribution request, the proxy server distributes the calculation result.
The method according to claim 7, wherein before the proxy server receives the result distribution request sent by the fourth MPC node, the method further comprises:

The fourth MPC node determines whether to distribute the obtained calculation result;

When it is determined that the obtained calculation result is to be distributed, the fourth MPC node sends a result distribution request to the proxy server, and the result distribution request carries the calculation result.
The method according to any one of claims 1 to 8, wherein the proxy server receives data and/or requests sent by the multiple MPC nodes via a firewall, and sends the data and/or requests to the multiple MPC nodes via the firewall. The MPC node sends data and/or requests.
A device for realizing secure multi-party computing is characterized in that it is located in a proxy server and includes:

The receiving module is configured to receive a calculation request sent by a first MPC node, where the first MPC node is one MPC node among multiple MPC nodes, and each MPC of the multiple MPC nodes is registered in the proxy server The callback function of the node;

The first callback module is configured to send the calculation request to each MPC node by calling the callback function of each MPC node in response to the calculation request;

The second callback module is configured to send a calculation start notification to each MPC node by calling the callback function of each MPC node when it is determined that each MPC node has received the calculation request, wherein the calculation start notification is used for Instruct each MPC node to perform secure multi-party computation.
A computer device, characterized by comprising a processor and a memory for storing executable instructions of the processor, the processor implementing the steps of the method in any one of claims 1 to 9 when the processor executes the instructions.
A computer-readable storage medium having computer instructions stored thereon, characterized in that, when the instructions are executed, the steps of the method according to any one of claims 1 to 9 are realized.