Patent ID: 11902429
Assignee: ROBERT BOSCH GMBH
Field: Digital communication (Electrical engineering)
Classification: CPC H | IPC H

Claim 11:
12. A system for providing a distributed data processing service for performing a secure multiparty computation of a function on at least first and second items of private input data, comprising:
at least first and second client terminals;
at least first and second computing engines; and
a communication network configured to communicatively couple the at least first and second client terminals and the at least first and second computing engines;
wherein the at least first and second computing engines are configured to establish a binding to provide the distributed data processing service;
wherein the at least first and second computing engines include first, and second cryptographic engines configured to provide a distributed cryptographic generation service configured to provide a plurality of cryptographic primitives required during an online phase of the secure multiparty computation;
wherein a proportion of the cryptographic primitives are generated during an offline phase prior to the secure multiparty computation, and the plurality of cryptographic primitives are stored by a distributed cryptographic data store service provided by corresponding at least first and second cryptographic data stores managed by the first and second computing engines, respectively;
wherein the distributed data processing service is configured to obtain service invocations of a secure multiparty computation and at least first and second items of private input data;
wherein the first and second computing engines are configured to store the at least first and second items of private input data using a distributed object store service of the distributed data processing service provided by at least first and second object store engines managed by the first and second computing engines, respectively;
wherein the first and second computing engines (are configured to perform, during the online phase, a distributed secure multiparty computation on at least the first and second items of private input data using a distributed multiparty computation service of the distributed data processing service provided by first and second multiparty computing engines managed by the first and second computing engines, respectively, wherein the first multiparty computing engine performs the secure multiparty computation together with at least the second multiparty computing engine; and
wherein at least one result of the secure multiparty computation is stored via the distributed object store service, and/or output to at least the first or the second client terminals;
wherein the system is configured to use the cryptographic primitives by:
transmitting, from the first computing engine to at least the second computing engine, a cryptographic primitive reservation request;
marking the cryptographic primitives in the cryptographic data store of the second computing engine referenced by the cryptographic primitive reservation as reserved;
activating, in the first and second computing engines, the cryptographic primitives referenced by the cryptographic primitive reservation when the first computing engine determines that the cryptographic primitive reservation has been successfully shared with at least the second computing engine;
once the requested cryptographic primitives have been sent to the first computing engine, marking the corresponding cryptographic primitives in the second computing engine as consumed.