Secure multi-party computation methods, apparatuses, and systems

Patent metadata

Field	Value
Publication number	US-12438703-B2
Application number	US-202318298241-A
Country	US
Kind code	B2
Filing date	Apr 10, 2023
Priority date	Apr 12, 2022
Publication date	Oct 7, 2025
Grant date	Oct 7, 2025

Abstract

Embodiments of this specification provide computer-implemented methods, apparatuses, computer-readable media, and systems for secure multi-party computation. In an example secure multi-party computation method, a first party encrypts a first plaintext segment of target data by using a homomorphic encryption algorithm based on a public key held by the first party in a first key pair to obtain a first ciphertext segment. A second plaintext segment of the target data is owned by a second party. The first party sends the first ciphertext segment to the second party. The second party performs a homomorphic addition operation in the homomorphic encryption algorithm on the first ciphertext segment and the second plaintext segment of the target data to obtain ciphertext data of the target data. The ciphertext data is decrypted based on a private key in the first key pair.

First claim

What is claimed is:

1. A computer-implemented method for secure multi-party computation method, comprising:
encrypting, by a first device of a first party, a first plaintext segment of target data by using a homomorphic encryption algorithm based on a public key held by the first party in a first key pair to obtain a first ciphertext segment, wherein a second plaintext segment of the target data is held by a second party; and
sending, by the first device of the first party, the first ciphertext segment to a second device of the second party, wherein a homomorphic addition operation in the homomorphic encryption algorithm is performed on the first ciphertext segment and the second plaintext segment of the target data to obtain ciphertext data of the target data, and wherein the homomorphic addition operation in the homomorphic encryption algorithm is performed on the first ciphertext segment and the second plaintext segment of the target data by operations comprising:
encrypting the second plaintext segment based on the public key by using the homomorphic encryption algorithm to obtain a second ciphertext segment; and
performing an inter-ciphertext operation corresponding to the homomorphic addition operation in the homomorphic encryption algorithm on the first ciphertext segment and the second ciphertext segment.

2. The computer-implemented method according to claim 1 , wherein the ciphertext data is decrypted based on a private key in the first key pair.

3. The computer-implemented method according to claim 1 , further comprising:
performing, by the second device of the second party, the homomorphic addition operation in the homomorphic encryption algorithm on the first ciphertext segment and the second plaintext segment of the target data to obtain the ciphertext data of the target data.

4. The computer-implemented method according to claim 1 , wherein before the encrypting a first plaintext segment of target data, the computer-implemented method further comprises:
generating, by the first device of the first party, the first key pair for the homomorphic encryption algorithm.

5. The computer-implemented method according to claim 1 , further comprising:
sending, by the first device of the first party, the public key to the second device of the second party.

6. The computer-implemented method according to claim 1 , wherein the homomorphic encryption algorithm comprises one of following: Paillier algorithm, Okamoto-Uchiyama (OU) algorithm, or Damgård-Jurik (DJ) algorithm.

7. A computer-implemented method, performed by a second device of a second party, comprising:
receiving a first ciphertext segment from a first device of a first party, wherein the first ciphertext segment is obtained by encrypting a first plaintext segment of target data by using a homomorphic encryption algorithm based on a public key held by the first party in a first key pair; and
performing a homomorphic addition operation in the homomorphic encryption algorithm on the first ciphertext segment and a second plaintext segment of the target data to obtain ciphertext data of the target data, wherein the homomorphic addition operation in the homomorphic encryption algorithm is performed on the first ciphertext segment and the second plaintext segment of the target data by operations comprising:
encrypting the second plaintext segment based on the public key by using the homomorphic encryption algorithm to obtain a second ciphertext segment; and
performing an inter-ciphertext operation corresponding to the homomorphic addition operation in the homomorphic encryption algorithm on the first ciphertext segment and the second ciphertext segment.

8. The computer-implemented method according to claim 7 , wherein the ciphertext data is decrypted based on a private key in the first key pair.

9. The computer-implemented method according to claim 7 , further comprising:
receiving the public key from the first device of the first party.

10. The computer-implemented method according to claim 7 , wherein the homomorphic encryption algorithm comprises one of following: Paillier algorithm, Okamoto-Uchiyama (OU) algorithm, or Damgård-Jurik (DJ) algorithm.

11. A computer-implemented method, comprising:
generating, by a second device of a second party, a first random number for ciphertext data owned by the second party;
determining, by the second device of the second party based on the first random number, a second segment of target data corresponding to the ciphertext data, wherein the ciphertext data corresponds to data obtained by encrypting the target data using a homomorphic encryption algorithm based on a first public key of a first party;
performing, by the second device of the second party, a homomorphic addition operation in the homomorphic encryption algorithm based on the ciphertext data and the first random number; and
providing, by the second device of the second party, an encryption operation result to a first device of the first party.

12. The computer-implemented method according to claim 11 , further comprising:
obtaining, by the first device of the first party, a first segment of the target data by decrypting the encryption operation result based on a first private key corresponding to the first public key.

13. The computer-implemented method according to claim 11 , wherein the determining a second segment of target data corresponding to the ciphertext data comprises:
determining the first random number as the second segment of the target data.

14. The computer-implemented method according to claim 13 , wherein the performing a homomorphic addition operation in the homomorphic encryption algorithm based on the ciphertext data and the first random number comprises:
performing the homomorphic addition operation in the homomorphic encryption algorithm on the ciphertext data and an opposite number of the first random number.

15. The computer-implemented method according to claim 11 , wherein the determining a second segment of target data corresponding to the ciphertext data comprises:
determining an opposite number of the first random number as the second segment of the target data.

16. The computer-implemented method according to claim 15 , wherein the performing a homomorphic addition operation in the homomorphic encryption algorithm based on the ciphertext data and the first random number comprises:
performing the homomorphic addition operation in the homomorphic encryption algorithm on the ciphertext data and the first random number.

17. The computer-implemented method according to claim 16 , wherein the performing the homomorphic addition operation in the homomorphic encryption algorithm on the ciphertext data and the first random number comprises:
performing a plaintext-ciphertext operation corresponding to the homomorphic addition operation in the homomorphic encryption algorithm on the ciphertext data and the first random number.

18. The computer-implemented method according to claim 16 , wherein the performing the homomorphic addition operation in the homomorphic encryption algorithm on the ciphertext data and the first random number comprises:
encrypting the first random number based on the first public key by using the homomorphic encryption algorithm to obtain a ciphertext random number; and
performing an inter-ciphertext operation corresponding to the homomorphic addition operation in the homomorphic encryption algorithm on the ciphertext data and the ciphertext random number.

19. The computer-implemented method according to cl

Assignees

• Alipay Hangzhou Inf Tech Co Ltd

Inventors

• Lu Yufei
• Wang Lei
• Yu Chaofan
• Tan Jin

Classifications

• H04L9/0869

  involving random numbers or seeds · CPC title

• H04L9/008 Primary

  involving homomorphic encryption · CPC title

• H04L9/0825 Primary

  using asymmetric-key encryption or public key infrastructure [PKI], e.g. key signature or public key certificates · CPC title

• H04L9/085

  Secret sharing or secret splitting, e.g. threshold schemes · CPC title

• H04L2209/46

  Secure multiparty computation, e.g. millionaire problem · CPC title