CAREER: Practical Oblivious Computation

数字数据的爆炸式增长带来了大量的机会。大规模收集和挖掘数据的能力继续催生新的应用程序并改变我们的生活。然而，隐私问题被视为数据共享和分析的主要障碍。该项目开发了一个实用的“遗忘计算”框架，它允许对敏感数据进行一般计算，但不会泄露数据。所提出的工作需要结合算法和编程语言的镜头。在编程语言方面，建议的工作设计了友好的编程抽象，以促进将程序编译成有效的，不经意的表示。在算法方面，所提出的工作设计了有效的遗忘算法，以广泛表征现实任务。由此产生的框架，即ObliVM，允许非专业开发人员编写像今天这样的程序，并且ObliVM自动生成相应的遗忘计算实现。ObliVM支持几种不同的架构来实现遗忘计算，包括基于可信硬件的架构和基于加密安全计算的架构。ObliVM提供了一个统一的编程框架，这样开发人员就可以编写一个程序，而不管后端架构是什么——通过一个通用的中间表示，这个程序可以被编译成基于可信硬件或基于加密的后端架构。ObliVM可以促进在现实场景中部署遗忘计算，并允许企业和个人在没有暴露风险的情况下将敏感数据货币化。

The explosion of digital data carries a wealth of opportunities. The ability to collect and mine data at scale continues to enable new applications and transform our lives. However, privacy concerns are seen as a major hurdle towards data sharing and analytics. This project develops a practical framework for "oblivious computation", which allows general computation over sensitive data, but without disclosing the data. The proposed work takes a combined algorithms and programming language lens. On the programming language side, the proposed work designs friendly programming abstractions that facilitate the compilation of programs into efficient, oblivious representations. On the algorithms side, the proposed work designs efficient oblivious algorithms for a wide characterization of realistic tasks. The resulting framework, ObliVM, allows non-expert developers to write programs much as they do today, and ObliVM automatically generates the corresponding oblivious computation implementation. ObliVM supports several different architectures for implementing oblivious computation, including those based on trusted hardware and those based on cryptographic secure computation. ObliVM offers a unified programming framework such that a developer can write a program irrespective of the backend architecture -- through a universal intermediate representation, this program can be compiled to either a trusted hardware-based or a cryptography-based backend architecture. ObliVM can facilitate the deployment of oblivious computation in real-life scenarios, and allow businesses and individuals to monetize sensitive data without the risk of exposure.