Prio: Private, Robust, and Scalable Computation of Aggregate Statistics

Abstract

This paper presents Prio, a privacy-preserving system for the collection of aggregate statistics. Each Prio client holds a private data value (e.g., its current location), and a small set of servers compute statistical functions over the values of all clients (e.g., the most popular location). As long as at least one server is honest, the Prio servers learn nearly nothing about the clients' private data, except what they can infer from the aggregate statistics that the system computes. To protect functionality in the face of faulty or malicious clients, Prio uses secret-shared non-interactive proofs (SNIPs), a new cryptographic technique that yields a hundred-fold performance improvement over conventional zero-knowledge approaches. Prio extends classic private aggregation techniques to enable the collection of a large class of useful statistics. For example, Prio can perform a least-squares regression on high-dimensional client-provided data without ever seeing the data in the clear.

Extended version of NSDI 2017 paper by the same name

Cited by in corpus (13)

• PrivFL: Practical Privacy-preserving Federated Regressions on High-dimensional Data over Mobile Networks
• Dopamine: Differentially Private Federated Learning on Medical Data
• Encode, Shuffle, Analyze Privacy Revisited: Formalizations and Empirical Evaluation
• Secure Federated Submodel Learning
• Zeph: Cryptographic Enforcement of End-to-End Data Privacy
• PRECAD: Privacy-Preserving and Robust Federated Learning via Crypto-Aided Differential Privacy
• SOTERIA: In Search of Efficient Neural Networks for Private Inference
• Masked LARk: Masked Learning, Aggregation and Reporting worKflow
• Safepaths: Vaccine Diary Protocol and Decentralized Vaccine Coordination System using a Privacy Preserving User Centric Experience
• Multi-Central Differential Privacy
• Obscure: Information-Theoretically Secure, Oblivious, and Verifiable Aggregation Queries on Secret-Shared Outsourced Data -- Full Version
• Private, Fair, and Verifiable Aggregate Statistics for Mobile Crowdsensing in Blockchain Era
• Sharing in a Trustless World: Privacy-Preserving Data Analytics with Potentially Cheating Participants