/Patent Tracker
GoogleGranted patentSecurity & privacyInterest 4/10

Google patents method for secure data processing using split secrets

Google describes a system that combines multi-party computation with a trusted execution environment to process data securely. It splits data into secret shares across multiple systems, allowing calculations to happen without any single party seeing the full raw data.

Why it mattersThis approach could help companies analyze sensitive information together without exposing private details to any single participant.

In the filing’s own words

Methods, systems, and apparatus, including computer programs encoded on a computer storage medium, for using cryptography, secure MPC, and a TEE to perform computations in ways that preserve data privacy and protect the security of data of each party that is involved in the computation process. In one aspect, a first MPC system of a cluster of MPC systems receives, from a computing system, a first secret share of input data. The first MPC system sends, to an application running in a TEE separate from the cluster of MPC systems, first secret shares of a set of data items generated based at least in part on the first secret share of the input data. The application is configured to generate secret shares of application output data. The first MPC system performs, in collaboration with the one or more second MPC systems of the cluster, one or more secure multi-party computations.

What exactly they claim (claim 1)

1. A computer-implemented method comprising: receiving, from a computing system and by a first multi-party computation (MPC) system of a cluster of MPC systems, a first secret share of input data; sending, by the first MPC system and to an application running in a trusted execution environment (TEE) separate from the cluster of MPC systems, first secret shares of a set of data items generated based at least in part on the first secret share of the input data, wherein the application is configured to generate secret shares of application output data, the secret shares of the application output data generated based on one or more computations using plaintext values of the set of data items, the plaintext values of the set of data items being generated using (i) the first secret shares of the set of data items and (ii) respective second secret shares of the set of data items provided by one or more second MPC systems of the cluster; performing, by the first MPC system in collaboration with the one or more second MPC systems of the cluster, one or more secure multi-party computations using: (i) the first secret share of the input data, (ii) a respective second secret share of the input data received by each of the one or more second MPC systems, (iii) a first secret share of the output data received from the application by the first MPC system, and (iv) a respective second secret share of the output data received from the application by each of the one or more second MPC systems; and sending, by the first MPC system, a first secret share of result data resulting from the one or more secure multi-party computations to at least one of (i) the computing system or (ii) one or more additional computing systems different from the computing system.

Facts

Company
Google (Google LLC)
Official title
Secure computation using multi-party computation and a trusted execution environment
Patent number
US12732341B2
Application number
18695676
Filed
Nov 30, 2022
Granted
Sep 8, 2026
Inventors
2
Claims
19

Classified under

H04L 9/008 Electricity & electronicsH04L 9/0618 Electricity & electronicsH04L 9/085 Electricity & electronics
Read the full filing (official PDF) ↗ Open in the Patent Tracker

More from Google in Security & privacy

Summaries are simplified from the filing’s own abstract and first claim. A patent filing is not a product announcement.
Patent data and drawings: U.S. Patent and Trademark Office (USPTO). Nebula is not affiliated with or endorsed by the USPTO.