Search papers, labs, and topics across Lattice.
This paper introduces CRSF, a novel collusion-resilient sensor-fusion protocol that enhances privacy and correctness in distributed sensor systems by integrating a Practical Byzantine Fault Tolerance (PBFT)-based agreement phase. The protocol effectively mitigates vulnerabilities associated with sensor-server collusion and Byzantine manipulation, ensuring that honest sensors maintain their privacy and that the fusion result remains reliable. Experimental evaluations on Google Cloud show that CRSF achieves a practical balance between robust security and performance, outperforming existing state-of-the-art methods in terms of execution time and resource efficiency.
Byzantine manipulation can no longer compromise honest sensors in CRSF, ensuring robust privacy and correctness in sensor fusion.
Privacy-preserving sensor fusion enables an untrusted server to compute an aggregate result over distributed sensor measurements without learning either individual inputs or the final output. Recent garbled-circuit-based protocols provide an efficient realization of this functionality in a sensor--server--client architecture, but remain vulnerable to sensor--server collusion and Byzantine manipulation of sensor participation. These weaknesses can compromise honest-sensor privacy, incorrectly exclude honest sensors, and corrupt the computed fusion result, thereby undermining the security guarantees expected from the protocol. We present CRSF, a collusion-resilient sensor-fusion protocol that addresses these weaknesses while providing privacy, correctness with explicit abort, and liveness. CRSF introduces a Practical Byzantine Fault Tolerance (PBFT)-based agreement phase for sensor submissions and uses server-specific, status-dependent label release with threshold protection of circuit-input labels. This design prevents any Byzantine server from unilaterally manipulating sensor participation and prevents any admissible sensor-server coalition from obtaining enough secret material to compromise honest-sensor privacy. We implement CRSF and compare its online execution time with the most relevant state-of-the-art baseline. Our Google Cloud evaluation measures the total computation and communication cost of the online protocol under fault-free and representative faulty executions. Across a range of fault-tolerant fusion circuits and up to 261 sensors, CRSF demonstrates a highly practical trade-off between robust security and protocol performance.
