Enabling New Applications via Cryptographic Tools for Data In-Use

通过加密工具为使用中的数据启用新应用程序

• 批准号: RGPIN-2020-07014
• 负责人: Gorbunov, Sergey
• 金额: $ 2.91万
• 依托单位: University of Waterloo
• 依托单位国家: 加拿大
• 项目类别: Discovery Grants Program - Individual
• 财政年份: 2020
• 资助国家: 加拿大
• 起止时间: 2020-01-01 至 2021-12-31
• 项目状态: 已结题
• 来源: https://www.nserc-crsng.gc.ca/ase-oro/Details-Detailles_eng.asp?id=718643
• 关键词: Enabling; New; Applications; via; Cryptographic

Cryptography is a foundational science that enables the design of tools, protocols, and systems that protect communications, data, programs, financial transactions, and more. Classical cryptographic mechanisms served us well to transmit data securely from one user to another even when an adversary compromises the communication medium between the users. However, in recent years, we are seeing a fundamental shift in the global computing model. In the new model, users have lightweight mobile devices, laptops, or Internet-of-Things devices. These devices feed data from remote agents (e.g., cloud providers, public ledgers) and query these agents to perform computations over the data. But can these models truly scale to their potentials without data and computations privacy? Can we enable new types of applications if trust and privacy features were enabled by default into these environments? My long-term research program is to develop new theoretical models, constructions, and systems that enable new applications by protecting data in-use and computations in untrusted and distributed environments. These new applications will have built-in privacy and security properties and empower users and organizations to gain control of their personal data, share, and operate on it in securely. In this project I will: (1) design new security models, methods and algorithms for secure computation over encrypted data, (2) construct new algorithms for secure processing of machine learning and AI, and (3) build systems and new applications that enable secure data and program processing in untrusted environments. Research is still at the frontiers of what modern cryptography can offer to protect future systems. The algorithms and systems built during this research will enable researchers and industry practitioners to construct new types of applications with build-in trust and security guarantees. Applications of these solutions will span domains classifying from secure machine learning processing to databases, distributed systems, and distributed ledger technologies. During the course of this research, I will train undergraduate and graduate students to build new cryptographic primitives, develop new models and systems, and enable them to help secure the national infrastructure and data of Canadian citizens.

密码学是一门基础科学，可以设计保护通信、数据、程序、金融交易等的工具、协议和系统。即使对手破坏了用户之间的通信介质，经典的加密机制也能很好地将数据从一个用户安全地传输到另一个用户。然而，近年来，我们看到全球计算模式发生了根本性转变。在新模型中，用户拥有轻型移动设备、笔记本电脑或物联网设备。这些设备从远程代理（例如云提供商、公共分类账）提供数据并查询这些代理以对数据执行计算。 但是，在没有数据和计算隐私的情况下，这些模型能否真正发挥其潜力？如果在这些环境中默认启用信任和隐私功能，我们是否可以启用新型应用程序？ 我的长期研究计划是开发新的理论模型、结构和系统，通过保护不可信和分布式环境中使用的数据和计算来实现新的应用程序。这些新应用程序将具有内置的隐私和安全属性，使用户和组织能够安全地控制、共享和操作其个人数据。在这个项目中，我将：（1）设计新的安全模型、方法和算法，用于加密数据的安全计算，（2）构建用于机器学习和人工智能安全处理的新算法，以及（3）构建在不可信环境中实现安全数据和程序处理的系统和新应用程序。 现代密码学保护未来系统的研究仍处于前沿。本研究期间构建的算法和系统将使研究人员和行业从业者能够构建具有内置信任和安全保证的新型应用程序。这些解决方案的应用将涵盖从安全机器学习处理到数据库、分布式系统和分布式账本技术等各个领域。 在这项研究过程中，我将培训本科生和研究生构建新的密码原语，开发新的模型和系统，并使他们能够帮助保护加拿大公民的国家基础设施和数据。