Private analytics via zero-trust aggregation
Google Research
Google introduced a zero-trust private analytics system that combines cryptographic aggregation with trusted execution environments to enable on-device AI models to report performance metrics without exposing individual user data. The system uses a novel lattice-based cryptographic protocol that allows devices to submit encrypted data in a single message, eliminating the need for extended multi-round interactions, and is being deployed in Android's SafetyCore to evaluate safety model effectiveness while keeping user content strictly on-device. This multi-layered approach ensures individual data is never exposed in server memory and provides verifiable proof through TEE attestation that the aggregation protocol executes as intended.
Why it matters
Security, Privacy and Abuse Prevention
