发表机构
Vrije Universiteit Amsterdam; Centrum Wiskunde & Informatica; Southwest University; Yangtze Delta Region Institute of Tsinghua University; University of Trento（阿姆斯特丹自由大学; 荷兰数学与计算机科学研究学会; 西南大学; 清华大学长三角研究院; 特伦托大学）
机构由 AI 辅助整理，请以论文原文为准。AI 中文总结
本文提出CRSF协议，解决现有隐私保护传感器融合协议的合谋与拜占庭操纵缺陷，实现安全与性能的实用权衡，经Google Cloud评估验证其有效性。
AI 中文摘要
隐私保护传感器融合技术可让不可信服务器对分布式传感器测量值计算聚合结果，且不会泄露单个输入或最终输出。近期基于乱码电路的协议在传感器-服务器-客户端架构中实现了该功能，但仍易受传感器-服务器合谋及传感器参与的拜占庭操纵影响。这些缺陷可能损害诚实传感器的隐私、错误排除诚实传感器、破坏融合结果，削弱协议安全保障。本文提出CRSF，一种抗合谋的传感器融合协议，解决上述缺陷，同时提供隐私性、带显式弃权（不执行）的正确性及活性。CRSF引入基于实用拜占庭容错（PBFT）的传感器提交协商阶段，采用服务器特定、状态依赖的标签发布机制，结合电路输入标签的阈值保护，防止拜占庭服务器单方面操纵传感器参与，也防止可容许的传感器-服务器联盟获取足够秘密材料损害诚实传感器隐私。我们实现CRSF并将其在线执行时间与最相关的现有基线对比，在Google Cloud上评估无故障及代表性故障执行下的在线协议总计算与通信成本。在多种容错融合电路及最多261个传感器的场景中，CRSF在鲁棒安全性与协议性能间实现了高度实用的权衡。
英文摘要
Privacy-preserving sensor fusion enables an untrusted server to compute an aggregate result over distributed sensor measurements without learning either individual inputs or the final output. Recent garbled-circuit-based protocols provide an efficient realization of this functionality in a sensor--server--client architecture, but remain vulnerable to sensor--server collusion and Byzantine manipulation of sensor participation. These weaknesses can compromise honest-sensor privacy, incorrectly exclude honest sensors, and corrupt the computed fusion result, thereby undermining the security guarantees expected from the protocol. We present CRSF, a collusion-resilient sensor-fusion protocol that addresses these weaknesses while providing privacy, correctness with explicit abort, and liveness. CRSF introduces a Practical Byzantine Fault Tolerance (PBFT)-based agreement phase for sensor submissions and uses server-specific, status-dependent label release with threshold protection of circuit-input labels. This design prevents any Byzantine server from unilaterally manipulating sensor participation and prevents any admissible sensor-server coalition from obtaining enough secret material to compromise honest-sensor privacy. We implement CRSF and compare its online execution time with the most relevant state-of-the-art baseline. Our Google Cloud evaluation measures the total computation and communication cost of the online protocol under fault-free and representative faulty executions. Across a range of fault-tolerant fusion circuits and up to 261 sensors, CRSF demonstrates a highly practical trade-off between robust security and protocol performance.
