Dare‐to‐Share: Collaborative privacy‐preserving recommendations with (almost) no crypto. Issue 3 (29th March 2021)

• Record Type: Journal Article
• Authors: Russo, Pietro; Bracciale, Lorenzo; Bianchi, Giuseppe
• Is Part Of: Security and privacy. Volume 4:Issue 3(2021)
• Page Start: n/a
• Page End: n/a
• Publication Date: 2021-03-29
• Subjects: Pedersen commitment -- privacy preserving recommending -- risk assessment -- risk management -- secret sharing -- verifiable secret sharing; Computer security -- Periodicals; Data protection -- Periodicals; Cyberterrorism -- Periodicals; 005.8
• DOI: 10.1002/spy2.153
• Languages: English
• ISSNs: 2475-6725

Abstract

Abstract: Collaborative recommending systems aim to predict a potential user‐item rating on the basis of remaining ones. Since, in several contexts, sharing of other users' ratings may be prevented by confidentiality concerns, several works have effectively addressed the design of privacy preserving recommenders. Still, most of the proposed solutions rely on advanced cryptographic methodologies, whose may conflict with the simplicity and viability requirements of real world deployments. In contrast, we propose an approach which does not require any complex cryptography. We show that whenever we can tolerate recommendations based on average values, we can transform the recommender into a privacy‐preserving one, by using two noncolluding replicas of the same system, and by distributing randomly "blinded" data to these replicas. To protecting each user's rating, a key asset of our approach is the ability to conceal which specific items are rated by which users. Our proposal is secure under the honest‐but‐curious attacker's assumption, and we show how it can be extended to guarantee robustness also against malicious adversaries. Finally, as a proof‐of‐concept, we present an implementation of the proposed approach for our motivating use case—collaborative assessment of computer/network vulnerabilities without revealing which of them affect one own infrastructure.