arXivDaily arXiv每日学术速递 周一至周五更新
arXiv 2302.01733cs.CRcs.DBcs.IR
收藏

承诺型私有信息检索

Committed Private Information Retrieval

Quang Cao, Hong Yen Tran, Son Hoang Dau, Xun Yi, Emanuele Viterbo, Chen Feng, Yu-Chih Huang, Jingge Zhu, Stanislav Kruglik, Han Mao Kiah

AI总结:

本文提出承诺型PIR方案,通过将线性映射承诺与任意线性PIR方案结合,实现即使全部服务器合谋也能验证检索结果正确性,并通过实现证明其实际可行性。

摘要:

私有信息检索(PIR)方案允许客户端从 k 个服务器中检索 n 个数据项 x_1, x_2, …, x_n 中的某一项 x_i,且即使当 t < k 个服务器合谋并试图获知 i 时,也不泄露 i 是什么。这样的 PIR 方案被称为 t-私有的。如果即使当 v ≤ k 个服务器合谋并试图通过发送被篡改的数据来欺骗客户端时,客户端仍能验证所检索到的 x_i 的正确性,则该 PIR 方案是 v-可验证的。以往关于 PIR 的文献大多假设 v < k,从而留下了所有服务器全部合谋的情形未被解决。我们提出一种通用构造,将线性映射承诺(LMC)与任意线性 PIR 方案相结合,生成一个 k-可验证的 PIR 方案,称为承诺型 PIR 方案。该方案保证即使在最坏情况下,即所有服务器都处于攻击者控制之下时,尽管隐私不可避免地丧失,客户端也不会被欺骗而接受一个不正确的 x_i。我们通过基于 Lai-Malavolta LMC 和三种著名 PIR 方案,并使用 GMP 库以及当前最快的椭圆曲线配对 C 库 blst 来实现承诺型 PIR 方案,从而证明了我们所提方案的实用性。

英文摘要:

A private information retrieval (PIR) scheme allows a client to retrieve a data item $x_i$ among $n$ items $x_1,x_2,\ldots,x_n$ from $k$ servers, without revealing what $i$ is even when $t < k$ servers collude and try to learn $i$. Such a PIR scheme is said to be $t$-private. A PIR scheme is $v$-verifiable if the client can verify the correctness of the retrieved $x_i$ even when $v \leq k$ servers collude and try to fool the client by sending manipulated data. Most of the previous works in the literature on PIR assumed that $v < k$, leaving the case of all-colluding servers open. We propose a generic construction that combines a linear map commitment (LMC) and an arbitrary linear PIR scheme to produce a $k$-verifiable PIR scheme, termed a committed PIR scheme. Such a scheme guarantees that even in the worst scenario, when all servers are under the control of an attacker, although the privacy is unavoidably lost, the client won't be fooled into accepting an incorrect $x_i$. We demonstrate the practicality of our proposal by implementing the committed PIR schemes based on the Lai-Malavolta LMC and three well-known PIR schemes using the GMP library and blst, the current fastest C library for elliptic curve pairings.

机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。

↑