Private analytics via zero-trust aggregation

Google Research · 1 month ago

Google introduced a zero-trust private analytics system that combines cryptographic aggregation with trusted execution environments to enable on-device AI models to report performance metrics without exposing individual user data. The system uses a novel lattice-based cryptographic protocol that allows devices to submit encrypted data in a single message, eliminating the need for extended multi-round interactions, and is being deployed in Android's SafetyCore to evaluate safety model effectiveness while keeping user content strictly on-device. This multi-layered approach ensures individual data is never exposed in server memory and provides verifiable proof through TEE attestation that the aggregation protocol executes as intended.