🤖 AI Summary
To address privacy preservation and trustlessness challenges in multi-party collaborative computation over decentralized personal data stores (PDS), this paper proposes Libertas—a modular privacy-preserving computation framework that operates atop existing PDS protocols (e.g., Solid) without protocol modifications. Its core innovation is a user-centric trust paradigm, integrating secure multi-party computation (MPC), differential privacy (DP), a lightweight proxy architecture, and decentralized identity (DID) mechanisms to enable trustless, decentralized data collaboration without single points of trust. Evaluated in real-world settings such as gig-economy analytics, Libertas supports high-fidelity DP synthetic data generation. Experiments demonstrate linear scalability and substantial computational efficiency gains—up to 3.2× faster than baseline approaches—while rigorously preserving both user data sovereignty and input confidentiality.
📝 Abstract
Data and data processing have become an indispensable aspect for our society. Insights drawn from collective data make invaluable contribution to scientific and societal research and business. But there are increasing worries about privacy issues and data misuse. This has prompted the emergence of decentralised personal data stores (PDS) like Solid that provide individuals more control over their personal data. However, existing PDS frameworks face challenges in ensuring data privacy when performing collective computations with data from multiple users. While Secure Multi-Party Computation (MPC) offers input secrecy protection during the computation without relying on any single party, issues emerge when directly applying MPC in the context of PDS, particularly due to key factors like autonomy and decentralisation. In this work, we discuss the essence of this issue, identify a potential solution, and introduce a modular architecture, Libertas, to integrate MPC with PDS like Solid, without requiring protocol-level changes. We introduce a paradigm shift from an `omniscient' view to individual-based, user-centric view of trust and security, and discuss the threat model of Libertas. Two realistic use cases for collaborative data processing are used for evaluation, both for technical feasibility and empirical benchmark, highlighting its effectiveness in empowering gig workers and generating differentially private synthetic data. The results of our experiments underscore Libertas' linear scalability and provide valuable insights into compute optimisations, thereby advancing the state-of-the-art in privacy-preserving data processing practices. By offering practical solutions for maintaining both individual autonomy and privacy in collaborative data processing environments, Libertas contributes significantly to the ongoing discourse on privacy protection in data-driven decision-making contexts.
