Contribution to the first ISO for Secure Computation Technology for data utilization and privacy protection
Leading the ISO standardization through many years of R&D knowledge

Tokyo – September 14, 2023 – NTT Corporation (NTT) has been conducting R&D and promoting standardization activities for many years. For the first time, the International Organization for Standardization (ISO) has issued a standard ^[1] on secure computation technology that can process data while keeping it encrypted.
　The terminology of secure computing technology, a relatively new technology in industry, were not generally known. The newly issued standard specifies the definition, terminology, safety evaluation axis and use case examples of secure computing technology, and enables developers and users of the technology all over the world to share their perceptions and deepen mutual understanding of the technology, thereby enabling accurate and easy technological development and utilization. Based on this standard, NTT will continue to contribute to the standardization of secure computing technology by developing ISO/IEC standards that specify secure computing using secure distribution technology.

1. Background

In recent years, there has been a growing momentum to share and utilize various types of data in multiple fields in order to expand decision-making based on data and optimize supply chains across sectors. However, data related to personal privacy and trade secures are currently not being utilized due to concerns for information leakage and unauthorized use. The solution to this problem is a secure computing technology that can encrypt data without ever returning it. Privacy-enhancing computation (PEC), which includes secure computation, is also a top trend in Gartner's Hype Cycle, which describes the penetration and trend transition of advanced technologies.
　NTT took an early interest in secure computing technology ^[2], and promoting technology development and demonstration experiments ^[3-7], and realization of the advanced secret computing service "Sekihi ®" ^[8-10]. we have been actively engaged in standardization, and have contributed to the standardization of secret distribution technology, which is a prerequisite technology for secure computation technology, by leading the ISO standards ^[11].

2. Significance of this standardization

Although secure computing technology has been known for a long time in academia, there are various definitions and evaluation axes, and it is difficult for non-experts to understand and use them, and it is difficult to obtain a common understanding by using different definitions and terms when communicating with others.

For this reason, NTT proposed the standardization of secure calculation from the ground up in ISO/IEC, and has been leading the standardization through activities such as outreach to various countries and the compilation of drafts. As a result, ISO/IEC 4922-1:2023, the first ISO standard for secure calculation, was published in July 2023. The newly issued standard defines the definition of secure computing technology, defines the evaluation axis of safety of secure computing technology, and specifies use case examples. This enables us to explain secure computing technology in the same terms in various fields, so that common recognition can be achieved. In addition, following this, ISO/IEC 4922-2, which specifically specifies secure computation using secure distribution technology, has entered the final stage of standardization, which NTT is also taking the lead in.

Figure 1 Image of Secure Computation Technology

3. Outlook

We will continue to standardize its secret computing technology in order to realize a secure data distribution in society, continue to research and develop its secret computing technology in order to promote its implementation as one of the key functions of IOWN ^[12]. (Figure 2)

Figure 2 Creating New Value through Secure Computing Technology

[Reference]

^1.ISO/IEC 4922-1:2023 Information security — Secure multiparty computation — Part 1: General https://www.iso.org/standard/80508.html

^2.World's fastest secure computing algorithm that can operate freely without encryption 2005 https://group.ntt/jp/newsrelease/pdf/news05/0510/051025.pdf

^3.World's first demonstration of secure computing technology in medical statistical processing https://group.ntt/jp/newsrelease/pdf/news2012/1202/120214a.pdf

^4.4. Development of analysis method to analyze Genomic Data held by multiple research institutes without disclosing It to each other - Fisher Exact Test with privacy protection data mining technology realized for the first time in the world - https://group.ntt/jp/newsrelease/2016/07/12/160712a.html

^5.NTT and NARO launch joint research on using crop big data with secure computing technology aiming for a world with safe and advanced Crop Data Utilization https://group.ntt/jp/newsrelease/2020/10/28/201028a.html

^6.The Secure Computation Technology to Enable the Learning Processing in the Deep Learning of the Standard AI with Encryption https://www.rd.ntt/e/security/0002.html

^7.Offering the world's first "Secure Computation AI software capable of training and inferencing with key algorithms in four major categories of AI" https://group.ntt/en/newsrelease/2023/01/23/230123a.html

^8.Start of "" service that enables secure computation in the cloud ~ It can be used in a web browser without requiring large-scale system construction or complex command input ~ https://www.ntt.com/about-us/press-releases/news/article/2021/0819.html

^9.Chiba University Hospital and NTT Com Launch Japan's First Observational Study to Protect Patient Privacy in Inflammatory Bowel Disease Using SmartPRO ® and Confidential ® https://www.ntt.com/about-us/press-releases/news/article/2022/1129.html

^10.Development of a Simple Nomogram Tool for Drawing Cumulative Cancer Recurrence Curves to Understand Cancer Treatment Outcomes and Use in Patient Treatment Explanation https://biobankjp.org/work/pdf/release22_1222.pdf

^11.NTT's Secure Distribution Technology Adopted as the First International Standard for Secure Distribution Technology https://group.ntt/jp/newsrelease/2017/10/23/171023a.html

^12.IOWN Initiative (IOWN: Innovative Optical and Wireless Network):
An initiative for networks and information processing infrastructure including terminals that can provide high-speed, high-capacity communication utilizing innovative technology focused on optics, as well as tremendous computational resources. This is done in order to overcome the limitations of existing infrastructure with innovative technologies, optimize the individual with the whole based on all available information, and create a rich society that is tolerant of diversity https://www.rd.ntt/e/iown

About NTT

NTT contributes to a sustainable society through the power of innovation. We are a leading global technology company providing services to consumers and business as a mobile operator, infrastructure, networks, applications, and consulting provider. Our offerings include digital business consulting, managed application services, workplace and cloud solutions, data center and edge computing, all supported by our deep global industry expertise. We are over $95B in revenue and 330,000 employees, with $3.6B in annual R&D investments. Our operations span across 80+ countries and regions, allowing us to serve clients in over 190 of them. We serve over 75% of Fortune Global 100 companies, thousands of other enterprise and government clients and millions of consumers.

About ISO

ISO (International Organization for Standardization) is an independent, non-governmental international organization with a membership of 169 national standards bodies.
Through its members, it brings together experts to share knowledge and develop voluntary, consensus-based, market relevant International Standards that support innovation and provide solutions to global challenges.