Encrypted signal processing for privacy protection: Conveying the utility of homomorphic encryption and multiparty computation

IEEE Signal Processing Magazine

Volumn 30, Issue 1, 2013, Pages 82-105

  Lagendijk, R L ^a   Erkin, Zekeriya ^b,c   Barni, Mauro ^d  

^a DELFT UNIVERSITY OF TECHNOLOGY   (Netherlands)

^b AARHUS UNIVERSITY   (Denmark)

^c UNIVERSITY OF CALIFORNIA   (United States)

^d UNIVERSITY OF FLORENCE   (Italy)

Author keywords

[No Author keywords available]

Indexed keywords

BIOMETRICS; CRYPTOGRAPHY; DATA HANDLING; DIGITAL STORAGE;

CRYPTOGRAPHIC PRIMITIVES; ENCRYPTED DATA; HO-MOMORPHIC ENCRYPTIONS; HOMOMORPHIC CRYPTOSYSTEM; HOMOMORPHIC-ENCRYPTIONS; MULTIPARTY COMPUTATION; PRIVACY PROTECTION; SECURE MULTI-PARTY COMPUTATION; SIGNAL RECORDING; SIGNAL-PROCESSING;

FACE RECOGNITION;

EID: 85032751121     PISSN: 10535888     EISSN: None     Source Type: Journal    
DOI: 10.1109/MSP.2012.2219653     Document Type: Article

References (110)

1. O. Bowcott. (2008, Oct. 20). Interpol Wants Facial Recognition Database to Catch Suspects. [Online]. Available: http://www.guardian.co.uk/world/2008/ oct/20/interpol-facial-recognition
2. T. Grose. (2008, Feb. 11). When surveillance cameras talk. Time Mag. [Online]. Available: http://www.time.com/time/world/article/0,8599,1711972,00. html
3. M. Magnier. (2008, Aug. 07). Many eyes will watch visitors. Los Angeles Times [Online]. Available: http://articles.latimes.com/2008/aug/07/world/fg- snoop7
4. G. Adomavicius and A. Tuzhilin, "Toward the next generation of recommender systems: A survey of the state-of-The-art and possible extensions," IEEE Trans. Knowledge Data Eng., vol. 17, no. 6, pp. 734-749, 2005. (Pubitemid 40860454)
5. N. Ramakrishnan, B. Keller, B. J. Mirza, A. Y. Grama, and G. Karypis, "Privacy risks in recommender systems," IEEE Internet Comput., vol. 5, no. 6, pp. 54-62, 2001. (Pubitemid 33137916)
6. W. Lu, A. L. Varna, A. Swaminathan, and M. Wu, "Secure image retrieval through feature protection," in Proc. IEEE Int. Conf. Acoust. Speech Signal Processing (ICASSP), Washington, DC, 2009, pp. 1533-1536.
7. S. Rane, S. Wei, and A. Vetro, "Privacy-preserving approximation of L1 distance for multimedia applications," in Proc. IEEE Int. Conf. Multimedia Expo (ICME), 2010, pp. 492-497.
8. J. K. Pillai, V. M. Patel, R. Chellappa, and N. K. Ratha, "Secure and robust IRIS recognition using random projections and sparse representations," IEEE Trans. Pattern Anal. Mach. Intell., vol. 33, no. 9, pp. 1877-1893, Sept. 2011.
9. O. Goldreich, Foundations of Cryptography II. Cambridge, U.K.: Cambridge Univ. Press, 2004.
10. P. Comesana, L. Perez-Freire, and F. Perez-Gonzalez, "Blind Newton sensitivity attack," IEE Proc. Inform. Security, vol. 153, no. 3, pp. 115-125, 2006.
11. C. Fontaine and F. Galand, "A survey of homomorphic encryption for nonspecialists," Eurasip J. Inform. Security, vol. 10.1155/2007/13801, 2007.
12. Z. Erkin, A. Piva, S. Katzenbeisser, R. L. Lagendijk, J. Shokrollahi, G. Neven, and M. Barni, "Protection and retrieval of encrypted multimedia content: When cryptography meets signal processing," Eurasip J. Inform. Security, vol. 0.1155/2007/78943, 2007.
13. T. Bianchi, A. Piva, and M. Barni, "Composite signal representation for fast and storage-efficient processing of encrypted signals," IEEE Trans. Inform. Forensics Sec., vol. 5, no. 1, pp. 180-187, 2010.
14. T. Okamoto and S. Uchiyama, "A new public-key cryptosystem as secure as factoring," in Proc. EUROCRYPT, 1998, pp. 308-318.
15. G. Bassard, D. Chaum, and C. Crepeau, "Minimum disclosure proofs of knowledge," J. Comput. Syst. Sci., vol. 37, no. 2, pp. 156-189, Oct. 1986.
16. O. Goldreich, S. Micali, and A. Wigderson, "Proofs that yield nothing but their validity for all languages in NP have zero-knowledge proof systems," J. ACM, vol. 38, no. 3, pp. 691-729, 1991.
17. Y. Huang, D. Evans, J. Katz, and L. Malka, "Faster secure two-party computation using garbled circuits," in Proc. 20th USENIX Sec. Symp., San Francisco, Aug. 2011.
18. J. B. Nielsen, P. S. Nordholt, C. Orlandi, and S. S. Burra, "A new approach to practical active-secure two-party computation," Cryptology ePrint Archive, vol. arXiv:1202.3052v1 [cs.CR], 2011.
19. T. Bianchi, A. Piva, and M. Barni, "Encrypted domain DCT based on homomorphic encryption," Eurasip J. Inform. Security, vol. 10.1155/2009/716357, 2009.
20. T. Bianchi, A. Piva, and M. Barni, "On the implementation of the discrete Fourier transform in the encrypted domain," IEEE Trans. Inform. Forensics Sec., vol. 4, no. 1, pp. 86-97, Mar. 2009.
21. C. Gentry, "Fully homomorphic encryption using ideal lattices," in Proc. 41st Annu. ACM Symp. Theory Comput., New York, 2009, pp. 169-178.
22. Z. Brakerski and V. Vaikuntanathan, "Fully homomorphic encryption from ring-lwe and security for key dependent messages," in Proc. Advances Cryptology, CRYPTO, 2011, pp. 505-524.
23. C. Gentry and S. Halevi, "Implementing gentry's fully-homomorphic encryption scheme," Cryptology ePrint Archive Rep. 520, 2010 [Online]. Available: http://eprint.iacr.org
24. A. C. Yao, "Protocols for secure computations," in Proc. IEEE Symp. Found. Comput. Sci., 1982, pp. 160-164.
25. R. Cramer, I. Damgård, and J. B. Nielsen, "Multiparty computation from threshold homomorphic encryption," in Proc. Int. Conf. Theory Appl. Cryptographic Tech. (EUROCRYPT), London, U.K., 2001, pp. 280-299.
26. C. Orlandi, "Is multiparty computation any good in practice?," in Proc. IEEE Int. Conf. Acous. Speech Signal Processing. May 2011, pp. 5848-5851.
27. R. Agrawal and R. Srikant, "Privacy-preserving data mining," SIGMOD Rec., vol. 29, no. 2, pp. 439-450, May 2000.
28. M. A. Turk and A. P. Pentland, "Eigenfaces for recognition," J. Cognitive Neurosci., vol. 3, no. 1, pp. 71-86, 1991.
29. M. A. Turk and A. P. Pentland, "Face recognition using eigenfaces," in Proc. IEEE Comput. Soc. Conf. Comput. Vision Pattern Recognit., 1991, pp. 586-591.
30. Z. Erkin, M. Franz, S. Katzenbeisser, J. Guajardo, R. L. Lagendijk, and T. Toft, "Privacy-preserving face recognition," in Proc. Symp. Privacy Enhanced Technol., Seattle, Aug. 2009, pp. 235-253.
31. A.-R. Sadeghi, T. Schneider, and I. Wehrenberg, "Efficient privacy-preserving face recognition," in Proc. Int. Conf. Inform. Security Cryptology. Dec. 2009, LNCS [Online]. Available: http://eprint.iacr.org/2009/507
32. M. Osadchy, B. Pinkas, A. Jarrous, and B. Moskovich, "Scifi: A system for secure face identification," in Proc. IEEE Symp. Security Privacy, 2010, pp. 239-254.
33. A. Senior, A. Oankanti, and A. Hampapur, "Enabling video privacy through computer vision," IEEE Security Privacy Mag., vol. 3, no. 3, pp. 50-57, 2005. (Pubitemid 40860473)
34. F. Dufaux and T. Ebrahimi, "Scrambling for video surveillance with privacy," in Proc. Conf. Comput. Vision Pattern Recognit. Workshop, 2006.
35. T. Boult, "Pico: Privacy through invertible cryptographic obscuration," Comput. Vision Interactive Intell. Environ., 0-7695-2524-5, pp. 27-38, 2005. (Pubitemid 46401992)
36. E. M. Newton, L. Sweeney, and B. Malin, "Preserving privacy by de-identifying face images," IEEE Trans. Knowledge Data Eng., vol. 17, no. 2, pp. 232-243, 2005. (Pubitemid 40320181)
37. J. Schiff, M. Meingast, D. Mulligan, S. Sastry, and K. Goldberg, "Respectful cameras: Detecting visual markers in realtime to address privacy concerns," in Proc. Int. Conf. Intell. Robots Syst., 2007, pp. 971-978.
38. A. K. Jain, M. N. Murty, and P. J. Flynn, "Data clustering: A review," ACM Comput. Surveys, vol. 31, no. 3, pp. 264-323, 1999.
39. Y. Lindell and B. Pinkas, "Privacy preserving data mining," Advances in Cryptology (CRYPTO 2000), pp. 36-54, 2000.
40. J. Vaidya, C.W. Clifton, and Y. M. Zhu, Privacy Preserving Data Mining (Advances in Information Security, vol. 19). New York: Springer-Verlag, 2006.
41. V. S. Verykios, E. Bertino, I. N. Fovino, L. P. Provenza, Y. Saygin, and Y. Theodoridis, "State-of-The-art in privacy preserving data mining," SIGMOD Rec., vol. 33, no. 1, pp. 50-57, 2004. (Pubitemid 40290240)
42. J. Vaidya and C. Clifton, "Privacy-preserving K-means clustering over vertically partitioned data," in Proc. 9th ACM SIGKDD Int. Conf. Knowledge Discovery Data Mining, New York, 2003, pp. 206-215.
43. G. Jagannathan and R. N. Wright, "Privacy preserving distributed K-means clustering over arbitrarily partitioned data," in Proc. 11th ACM SIGKDD Int. Conf. Knowledge Discovery Data Mining, 2005, pp. 593-599. (Pubitemid 43218325)
44. G. Jagannathan, K. Pillaipakkamnatt, and R. N. Wright, "A new privacypreserving distributed K-clustering algorithm," in Proc. 6th SIAM Int. Conf. Data Mining, 2006.
45. P. Bunn and R. Ostrovsky, "Secure two-party K-means clustering," in Proc. 14th ACM Conf. Comput. Commun. Security, 2007, pp. 486-497.
46. B. Goethals, S. Laur, H. Lipmaa, and T. Mielikainen, "On private scalar product computation for privacy-preserving data mining," in Proc. 7th Int. Conf. Inform. Security Cryptology, 2004, pp. 2-3.
47. S. R. M. Oliveira and O. R. Zaiane, "Achieving privacy preservation when sharing data for clustering," Lecture Notes in Computer Science, New York: Springer, 2004, pp. 67-82.
48. Z. Erkin, T. Veugen, T. Toft, and R. L. Lagendijk, "Privacy- preserving user clustering in a social network," in Proc. 1st IEEE Workshop Inform. Forensics Security, 2009, pp. 96-100.
49. M. R. T. Beye, Z. Erkin, and R. L. Lagendijk, "Efficient privacy preserving k-means clustering in a three-party setting," in Proc. IEEE Workshop Inform. Forensics Security, 2011, pp. 1-6.
50. B. Sarwar, G. Karypis, J. Konstan, and J. Reidl, "Item-based collaborative filtering recommendation algorithms," in Proc. 10th Int. Conf. World Wide Web, 2001, pp. 285-295.
51. M. Deshpande and G. Karypis, "Item-based top-N recommendation algorithms," ACM Trans. Inform Syst., vol. 22, no. 1, pp. 143-177, 2004.
52. H. Polat and W. Du, "SVD-based collaborative filtering with privacy," in Proc. ACM Symp. Appl. Comput., New York, 2005, pp. 791-795.
53. H. Polat and W. Du, "Privacy-preserving collaborative filtering using randomized perturbation techniques," in Proc. IEEE Int. Conf. Data Mining, 2003, pp. 625-628.
54. F. McSherry and I. Mironov, "Differentially private recommender systems: Building privacy into the net," in Proc. 15th ACM SIGKDD Int. Conf. Knowledge Discovery Data Mining, 2009, pp. 627-636.
55. M. Atallah, M. Bykova, J. Li, K. Frikken, and M. Topkara, "Private collaborative forecasting and benchmarking," in Proc. ACM Workshop Privacy Electron. Soc., 2004, pp. 103-114. (Pubitemid 40821100)
56. J. F. Canny, "Collaborative filtering with privacy via factor analysis," in Proc. ACM SIGIR, 2002, pp. 238-245.
57. J. F. Canny, "Collaborative filtering with privacy," in Proc. IEEE Symp. Security Privacy, 2002, pp. 45-57.
58. Z. Erkin, M. R. T. Beye, T. Veugen, and R. L. Lagendijk, "Efficiently computing private recommendations," in Proc. Int. Conf. Acoust. Speech Signal Processing, 2011, pp. 5864-5867.
59. Z. Erkin, T. Veugen, T. Toft, and R. L. Lagendijk, "Generating private recommendations efficiently using homomorphic encryption and data packing," IEEE Trans. Inform. Forensics Security, vol. 7, no. 3, pp. 1053-1066, 2012.
60. S. Kamara, P. Mohassel, and M. Raykova, "Outsourcing multi-party computation," Cryptology ePrint Archive Rep. 272, 2011 [Online]. Available: http://eprint.iacr.org
61. M. Barni, P. Failla, R. Lazzeretti, A. Paus, A.-R. Sadeghi, T. Schneider, and V. Kolesnikov, "Efficient privacy-preserving classification of ECG signals," in Proc. 1st IEEE Workshop Inform. Forensics Security, 2009, pp. 91-95.
62. M. Barni, P. Failla, R. Lazzeretti, A.-R. Sadeghi, and T. Schneider, "Privacy-preserving ECG classification with branching programs and neural networks," IEEE Trans. Inform. Forensics Security, vol. 6, no. 2, pp. 452-468, June 2011.
63. J. R. Troncoso-Pastoriza, S. Katzenbeisser, and M. Celik, "Privacy preserving error resilient DNA searching through oblivious automata," in Proc. 14th ACM Conf. Comput. Commun. Security, 2007, pp. 519-528.
64. R. Wang, X. F. Wang, Z. Li, H. X. Tang, M. K. Reiter, and Z. Dong, "Privacypreserving genomic computation through program specialization, " in Proc. 16th ACM Conf. Comput. Commun. Security (CCS), New York, 2009, pp. 338-347.
65. Y. Huang, L. Malka, D. Evans, and J. Katz, "Efficient privacy-preserving biometric identification," in Proc. 18th Network Distributed Syst. Security Conf., 2011.
66. D. Maltoni, D. Maio, A. K. Jain, and S. Prabhakar, Handbook of Fingerprint Recognition. London, U.K.: Springer-Verlag, 2009.
67. M. Barni, T. Bianchi, D. Catalano, M. Di Raimondo, R. Donida Labati, P. Failla, D. Fiore, R. Lazzeretti, V. Piuri, A. Piva, and F. Scotti, "A privacycompliant fingerprint recognition system based on homomorphic encryption and fingercode templates," in Proc. IEEE 4th Int. Conf. Biometrics Theory Appl. Syst., Washington DC, 2010, pp. 1-7.
68. A. K. Jain, S. Prabhakar, L. Hong, and S. Pankanti, "Filterbank- based fingerprint matching," IEEE Trans. Image Processing, vol. 9, no. 5, pp. 846-859, 2000.
69. M. Barni, T. Bianchi, D. Catalano, M. Di Raimondo, R. Donida Labati, P. Failla, D. Fiore, R. Lazzeretti, V. Piuri, A. Piva, and F. Scotti, "Privacypreserving fingercode authentication," in Proc. ACM Multimedia Security Workshop, Rome, 2010, pp. 231-240.
70. J. Daugman, "How iris recognition works," IEEE Trans. Circuits Syst. Video Technol., vol. 4, no. 1, pp. 21-30, 2004.
71. Y. Luo, S. C. Samson Cheung, T. Pignata, R. Lazzeretti, and M. Barni, "An efficient protocol for private iris-code matching by means of garbled circuits," in Proc. IEEE Int. Conf. Image Processing, 2012.
72. S. Katzenbeisser and F. Petitcolas, Information Hiding Techniques for Steganography and Digital Watermarking. Norwood, MA: Artech House, 2000.
73. G. C. Langelaar, I. Setyawan, and R. L. Lagendijk, "Watermarking digital image and video data: A state-of-The-art overview," IEEE Signal Processing Mag., vol. 17, no. 5, pp. 20-46, 2000.
74. I. Pitas, "A method for signature casting on digital images," in Proc. IEEE Int. Conf. Image Processing, 1996, vol. III, pp. 215-218.
75. S. Craver, "Zero knowledge watermark detection," in Proc. Int. Workshop Inform. Hiding, 1999, pp. 101-116.
76. A. Adelsbach and A.-R. Sadeghi, "Zero-knowledge watermark detection and proof of ownership.," in Proc. Int. Workshop Inform. Hiding, 2001, pp. 273-288. (Pubitemid 33367673)
77. A. Adelsbach, S. Katzenbeisser, and A.-R. Sadeghi, "Watermark detection with zero-knowledge disclosure," ACM Multimedia Syst. J. vol. 9, no. 3, pp. 266-278, 2003.
78. N. R. Wagner, "Fingerprinting," in Proc. IEEE Symp. Security Privacy, 1983, pp. 18.
79. B. Pfitzmann and M. Waidner, "Anonymous fingerprinting," in Proc. Eurocrypt, 1997, vol. 1233, pp. 88-102. (Pubitemid 127067796)
80. B. Pfitzmann and A.-R. Sadeghi, "Anonymous fingerprinting with direct non-repudiation," in Proc. Asiacrypt, 2000, vol. 1976, pp. 401-414.
81. M. Kuribayashi and H. Tanaka, "Fingerprinting protocol for images based on additive homomorphic property," IEEE Trans. Image Processing, vol. 14, no. 12, pp. 2129-2139, 2005. (Pubitemid 41763728)
82. R. Anderson and S. Fuloria, "On the security economics of electricity metering," in Proc. 9th Workshop Econ. Inform. Security, 2010, pp. 1-18.
83. M. Kohlweiss and G. Danezis, "Differentially private billing with rebates," in Proc. Inform. Hiding Conf., LNCS, 2011.
84. K. Kursawe, G. Danezis, and M. Kohlweiss, "Privacy-friendly aggregation for the smart-grid," in Proc. Symp. Privacy Enhanced Technol., 2011, pp. 175-191.
85. A. Rial and G. Danezis, "Privacy-preserving smart metering," in Proc. 10th Annu. ACM Workshop Privacy Electron. Soc., 2011, pp. 49-60.
86. E. Shi, T.-H. Chan, E. G. Rieffel, R. Chow, and D. Song, "Privacy-preserving aggregation of time-series data," in Proc. 18th Annu. Netw. Distributed Syst. Security Symp., 2011.
87. Z. Erkin and G. Tsudik, "Private computation of spatial and temporal power consumption with smart meters," in Proc. Int. Conf. Applied Cryptography Network Security, 2012, pp. 561-577.
88. F. D. Garcia and B. Jacobs, "Privacy-friendly energy-metering via homomorphic encryption," in Proc. 6th Workshop Security Trust Manage., 2010, LNCS 6710, pp. 226-238.
89. G. Acs and C. Castelluccia, "I have a DREAM! (differentially private smart metering)," in Proc. Inform. Hiding Conf., 2011, LNCS, pp. 1-10.
90. M. J. van den Hoven, "Design for values and values for design," Inform. Age, vol. 7, no. 2, pp. 4-7, 2005.
91. F. Armknecht and A.-R. Sadeghi, "A new approach for algebraically homomorphic encryption," Cryptology ePrint Archive Rep. 422, 2008 [Online]. Available: http://eprint.iacr.org/
92. [Online]. Available: http://www.i-programmer.info/news/112-Theory/2330- darpa-spends-20-million-on-homomorphic-encryption.html (2009).
93. Z. Brakerski and V. Vaikuntanathan, "Efficient fully homomorphic encryption from (standard) LWE," in Proc. IEEE Symp. Found. Comput. Sci. (FOCS), 2011, pp. 97-106.
94. I. Damgård, M. Geisler, and M. Krøigård, "Homomorphic encryption and secure comparison," Int. J. Appl. Cryptography, vol. 1, no. 1, pp. 22-31, 2008.
95. I. Damgård, M. Geisler, and M. Krøigård, "Efficient and secure comparison for on-line auctions," in Proc. Australasian Conf. Inform. Security Privacy, 2007, LNCS 4586, pp. 416-430.
96. I. Damgård, M. Geisler, and M. Krøigård, "A correction to 'Efficient and secure comparison for on-line auctions,'" Cryptology ePrint Archive Rep. 321, 2008 [Online]. Available: http://eprint.iacr.org/
97. Y. Aumann and Y. Lindell, "Security against covert adversaries: Efficient protocols for realistic adversaries," J. Cryptology, vol. 23, no. 2, pp. 281-343, 2010.
98. A. J. Menezes, P. C. van Oorschot, and S. A. Vanstone, Handbook of Applied Cryptography. Boca Raton, FL: CRC Press, 1996.
99. Data Encryption Standard (DES), Number FIPS PUB 46-3, Federal Information Processing Standards Publication, Nat. Inst. of Standards and Technol., Gaithersburg, MD, 1999.
100. Advanced Encryption Standard (AES), Federal Information Processing Standards Publication, National Institute of Standards and Technology, Gaithersburg, MD, 2001.
101. R. L. Rivest, A. Shamir, and L. M. Adleman, "A method for obtaining digital signature and public-key cryptosystems," Commun. Assoc. Comput. Mach., vol. 21, no. 2, pp. 120-126, 1978. (Pubitemid 8591219)
102. T. El Gamal, "A public key cryptosystem and a signature scheme based on discrete logarithms," IEEE Trans. Inform. Theory, vol. 31, no. 4, pp. 469-472, 1985.
103. P. Paillier, "Public-key cryptosystems based on composite degree residuosity classes," in Proc. Advances Cryptology (EUROCRYPT), 1999, LNCS 1592, pp. 223-238.
104. S. Goldwasser and S. Micali, "Probabilistic encryption and how to play mental poker keeping secret all partial information," in Proc. ACM Symp. Theory Comput., 1982, pp. 365-377.
105. I. F. Blake and V. Kolesnikov, "Conditional encrypted mapping and comparing encrypted numbers," in Proc. Financial Cryptography Data Security, 2006, LNCS 4107, pp. 206-220. (Pubitemid 44577291)
106. J. A. Garay, B. Schoenmakers, and J. Villegas, "Practical and secure solutions for integer comparison," in Proc. Public Key Cryptography, 2007, LNCS 4450, pp. 330-342.
107. M. Naor, B. Pinkas, and R. Sumner, "Privacy preserving auctions and mechanism design," in Proc. ACM Conf. Electron. Commerce, 1999, pp. 129-139.
108. P. Tuyls, A. H. M. Akkermans, T. A. M. Kevenaar, G. Jan Schrijen, A. M. Bazen, and R. N. J. Veldhuis, "Practical biometric authentication with template protection," in Proc. Int. Conf. Audio-Video-Based Biometric Person Authentication, 2005, LNCS 3546, pp. 436-446. (Pubitemid 41423060)
109. V. Kolesnikov, A.-R. Sadeghi, and T. Schneider, "Improved garbled circuit building blocks and applications to auctions and computing minima," in Proc. 8th Int. Conf. Cryptology Network Security, 2009, LNCS, pp. 1-20.
110. C. Hazay and Y. Lindell, Efficient Secure Two-Party Protocols (Information Security and Cryptography). New York: Springer, 2010.