viff

changeset 1411:b4ed28fc63d5

doc: described Nordic Sugar application
author Thomas P Jakobsen <tpj@cs.au.dk>
date Mon, 14 Dec 2009 10:30:24 +0100
parents bceda78b1358
children cf1d7d3eab0a
files doc/applications.txt
diffstat 1 files changed, 43 insertions(+), 1 deletions(-) [+]
line diff
     1.1 --- a/doc/applications.txt	Thu Dec 10 22:48:38 2009 +0100
     1.2 +++ b/doc/applications.txt	Mon Dec 14 10:30:24 2009 +0100
     1.3 @@ -11,7 +11,49 @@
     1.4  Nordic Sugar
     1.5  ------------
     1.6  
     1.7 -(TODO)
     1.8 +In Denmark, the production of sugarbeet is managed by sugarbeet
     1.9 +contracts. A sugarbeet contract determines the quantity of sugarbeet
    1.10 +that a farmer is allowed to produce. Traditionally, sugarbeet
    1.11 +contracts have been traded between individual pairs of farmers. This
    1.12 +has been done in spite of the fact that trading in a central market
    1.13 +was known to increase the overall profit. A central market has,
    1.14 +however, not been possible due to conflicting interests and lack of
    1.15 +trust between the parties.
    1.16 +
    1.17 +In January 2008 the first large scale secure multiparty computation
    1.18 +was carried out, effectively solving this problem. This was done by
    1.19 +the SIMAP research project as reported in "`Multiparty Computation
    1.20 +Goes Live`__" (also published at `Financial Crypto 2009`__). In the
    1.21 +summer of 2009 the same computation was successfully repeated, this
    1.22 +time using VIFF.
    1.23 +
    1.24 +.. __: http://eprint.iacr.org/2008/068
    1.25 +.. __: http://www.springerlink.com/content/j4772m44r05x0527/
    1.26 +
    1.27 +The computation was a double auction in which the production rights
    1.28 +for several thousand tons of sugarbeets were traded. During the first
    1.29 +weeks of the auction, several hundred Danish sugarbeet farmers
    1.30 +submitted their encrypted bids to a central database. Then the actual
    1.31 +computation took place between three players:
    1.32 +
    1.33 +* Nordic Sugar, the Danish sugar company
    1.34 +
    1.35 +* DKS, the consolidation of Danish sugarbeet farmers
    1.36 +
    1.37 +* Partisia, a Danish company specialized in secure multiparty
    1.38 +  solutions
    1.39 +
    1.40 +The computation took about 15 minutes using three laptops on a LAN.
    1.41 +Most of the computation time was spend converting the encrypted bids
    1.42 +to secret sharings. The actual multiparty computation took only a
    1.43 +couple of minutes. As a result, the sugarbeet contracts could be
    1.44 +traded at an optimal price without any sensitive information being
    1.45 +disclosed.
    1.46 +
    1.47 +Using secure multiparty computation, trading sugarbeets using this
    1.48 +kind of auction was possible without finding and paying a trusted
    1.49 +third party to manage the auction. Such a trusted party would---if it
    1.50 +could be found at all---probably have been quite expensive.
    1.51  
    1.52  
    1.53  Distributed RSA