多方隐私集合交集计算技术综述  

A Survey of Multi-party Private Set Intersection

作　　者：高莹 王玮 GAO Ying;WANG Wei(School of Cyber Science and Technology,Beihang University,Beijing 100191,China;Zhongguancun Laboratory,Beijing 100094,China;Key Laboratory of Aerospace Network Security,Ministry of Industry and Information Technology,Beijing 100191,China)

机构地区：[1]北京航空航天大学网络空间安全学院,北京100191 [2]中关村实验室,北京100094 [3]空天网络安全工业和信息化部重点实验室,北京100191

出　　处：《电子与信息学报》2023年第5期1859-1872,共14页Journal of Electronics & Information Technology

基　　金：国家自然科学基金(61932011,61972017);北京市自然科学基金(M21033)。

摘　　要：随着互联网、大数据等新技术的快速发展,越来越多的分布式数据需要多方协作处理,隐私保护技术由此面临更大的挑战。安全多方计算是一种重要的隐私保护技术,可为数据的安全高效共享问题提供解决方案。作为安全多方计算的一个重要分支,隐私集合交集(PSI)计算技术可以在保护参与方的数据隐私性前提下计算两个或多个参与者私有数据集的交集,按照参与方数目可分为两方PSI和多方PSI。随着私人数据共享规模的扩大,多于两个参与方的应用场景越来越常见。多方PSI具有与两方PSI相似的技术基础但又有本质的不同。该文首先讨论了两方PSI的研究进展,其次详细梳理多方PSI技术的发展历程,将多方PSI技术依据应用场景的不同分为传统多方PSI技术以及门限多方PSI技术,并在不同场景下按照协议所采用密码技术和功能进行更细致的划分;对典型多方PSI协议进行分析,并对相关密码技术、敌手模型以及计算与通信复杂度进行对比。最后,给出了多方PSI技术的研究热点和未来发展方向。With the rapid development of new technologies,such as the Internet and big data,more and more distributed data need to be processed by multiple parties.Therefore,privacy protection technology is facing greater challenges.Secure multi-party computation is an important privacy protection technology,which can provide solutions for the secure and efficient sharing of data.As an important branch of secure multi-party computation,Private Set Intersection(PSI)technology can calculate the intersection of private data sets of two or more participants under the premise of protecting the data privacy of participants.It can be divided into two-party PSI and multi-party PSI according to the number of participants.With the expansion of private data sharing scale,application scenarios with more than two participants are more and more common.Multi party PSI has the same technical basis as the two party PSI,but has essential differences.Firstly,the research progress of the two-party PSI is discussed.Then the development processes of multi-party PSI are analyzed in detail.The multi-party PSI is divided into traditional multi-party PSI and threshold multi-party PSI according to the different scenarios.At the same time,protocols in different scenarios are divided more carefully according to the different basic cryptographic protocols they used and their different functions.The typical protocols are analyzed,and the cryptographic protocols,security model,computation and communication complexity of the protocols are discussed.Finally,the research hotspots and future development directions of multi-party PSI are pointed out.

关 键 词：隐私集合交集 不经意传输 不经意伪随机函数 加法同态加密 零秘密分享 

分 类 号：TN918[电子电信—通信与信息系统] TP309.2[电子电信—信息与通信工程]