Enabling New Applications via Cryptographic Tools for Data In-Use

通过加密工具为使用中的数据启用新应用程序

• 批准号: RGPIN-2020-07014
• 负责人: Gorbunov, Sergey
• 金额: $ 2.91万
• 依托单位: University of Waterloo
• 依托单位国家: 加拿大
• 项目类别: Discovery Grants Program - Individual
• 财政年份: 2021
• 资助国家: 加拿大
• 起止时间: 2021-01-01 至 2022-12-31
• 项目状态: 已结题
• 来源: https://www.nserc-crsng.gc.ca/ase-oro/Details-Detailles_eng.asp?id=741547
• 关键词: Enabling; New; Applications; via; Cryptographic

Cryptography is a foundational science that enables the design of tools, protocols, and systems that protect communications, data, programs, financial transactions, and more. Classical cryptographic mechanisms served us well to transmit data securely from one user to another even when an adversary compromises the communication medium between the users. However, in recent years, we are seeing a fundamental shift in the global computing model. In the new model, users have lightweight mobile devices, laptops, or Internet-of-Things devices. These devices feed data from remote agents (e.g., cloud providers, public ledgers) and query these agents to perform computations over the data. But can these models truly scale to their potentials without data and computations privacy? Can we enable new types of applications if trust and privacy features were enabled by default into these environments? My long-term research program is to develop new theoretical models, constructions, and systems that enable new applications by protecting data in-use and computations in untrusted and distributed environments. These new applications will have built-in privacy and security properties and empower users and organizations to gain control of their personal data, share, and operate on it in securely. In this project I will: (1) design new security models, methods and algorithms for secure computation over encrypted data, (2) construct new algorithms for secure processing of machine learning and AI, and (3) build systems and new applications that enable secure data and program processing in untrusted environments. Research is still at the frontiers of what modern cryptography can offer to protect future systems. The algorithms and systems built during this research will enable researchers and industry practitioners to construct new types of applications with build-in trust and security guarantees. Applications of these solutions will span domains classifying from secure machine learning processing to databases, distributed systems, and distributed ledger technologies. During the course of this research, I will train undergraduate and graduate students to build new cryptographic primitives, develop new models and systems, and enable them to help secure the national infrastructure and data of Canadian citizens.

密码学是一门基础科学，它能够设计出保护通信、数据、程序、金融交易等的工具、协议和系统，即使在对手妥协的情况下，经典密码机制也能很好地将数据从一个用户安全地传输到另一个用户。然而，近年来，我们看到全球计算模式发生了根本性转变，用户拥有轻型移动设备、笔记本电脑或物联网设备。来自远程代理（例如，云提供商、公共分类账）并查询这些代理以对数据执行计算，但是如果没有数据和计算隐私，这些模型能否真正发挥其潜力？如果启用了信任和隐私功能，我们是否可以启用新型应用程序？我的长期研究计划是开发新的理论模型、结构和系统，通过保护不可信和分布式环境中使用的数据和计算来启用新的应用程序。安全属性和赋权用户和组织能够安全地控制、共享和操作其个人数据。在这个项目中，我将：（1）设计新的安全模型、方法和算法，用于加密数据的安全计算，（2）构建新的算法。用于机器学习和人工智能的安全处理，以及（3）构建可在不受信任的环境中实现安全数据和程序处理的系统和新应用程序，研究仍然处于现代密码学可以提供的保护未来系统的前沿。在这项研究期间建立的项目将使研究人员能够和行业从业者构建具有内置信任和安全保证的新型应用程序，这些解决方案的应用程序将跨越从安全机器学习处理到数据库、分布式系统和分布式账本技术等领域。将培训本科生和研究生构建新的加密原语，开发新的模型和系统，并使他们能够帮助保护加拿大公民的国家基础设施和数据。