多密钥隐私保护决策树评估方案  

Multi-key privacy protection decision tree evaluation scheme

作　　者：曹来成[1] 李运涛 吴蓉 郭显[1] 冯涛[1] CAO Laicheng;LI Yuntao;WU Rong;GUO Xian;FENG Tao(School of Computer and Communication,Lanzhou University of Technology,Lanzhou 730050,China)

机构地区：[1]兰州理工大学计算机与通信学院,兰州730050

出　　处：《清华大学学报（自然科学版）》2022年第5期862-870,共9页Journal of Tsinghua University(Science and Technology)

基　　金：国家自然科学基金资助项目(61562059,61461027)。

摘　　要：为了保护机器学习中决策树数据和模型的隐私,并减少计算和通信开销,提出了一种多密钥隐私保护决策树评估(multi-key privacy-preserving decision tree evaluation,MPDE)方案。利用分布式双陷门公钥密码(distributed two-trapdoor public-key crypto,DT-PKC)系统对所有数据进行加密。基于跨域安全加法协议实现来自不同公钥加密的两个密文的加法,改进原有的安全比较协议以支持多用户多密钥,保护了请求信息、分类结果和决策树模型的隐私。引入可信第三方密钥生成中心,减少了实体之间的通信开销,且在密钥分发完后离线。采用服务代理商代替用户与云服务器交互,降低了用户与云服务器之间的通信开销和用户的计算开销。安全与性能分析表明该方案具有高隐私性和高效性。同时,仿真实验显示该方案具有更低的计算开销。A multi-key privacy-preserving decision tree evaluation(MPDE) scheme was developed to protect the privacy of decision tree data and models in machine learning and to reduce the computational and communications overhead. A distributed two-trapdoor public-key crypto(DT-PKC) was used to encrypt all the data. A secure addition-across-domains protocol was then used to add two ciphertexts from different public key cryptography systems. In addition, the original security comparison protocol was improved to support multi-user, multi-key systems to protect the privacy of the requested information, classification results and decision tree model. A trusted third party key generation center was introduced to reduce the communication overhead between entities which is completely offline after the key distribution. A service agent was then used to interact with the cloud server instead of the users which reduced the communications overhead between the user and the cloud server. Security and performance analyses show that the scheme is efficient and ensures privacy. Simulations show that the scheme has less computational overhead than previous schemes.

关 键 词：机器学习 云计算 决策树 多密钥 同态加密 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]