Paper 2024/1117

Oryx: Private detection of cycles in federated graphs

Ke Zhong, University of Pennsylvania
Sebastian Angel, University of Pennsylvania
Abstract

This paper proposes Oryx, a system for efficiently detecting cycles in federated graphs where parts of the graph are held by different parties and are private. Cycle identification is an important building block in designing fraud detection algorithms that operate on confidential transaction data held by different financial institutions. Oryx allows detecting cycles of various length while keeping the topology of the graphs secret, and it does so efficiently. Oryx leverages the observation that financial graphs are very sparse, and uses this to achieve computational complexity that scales with the average degree of nodes in the graph rather than the maximum degree. Our implementation of Oryx running on a single 32-coreAWS ma chine (for each party) can detect all cycles of up to length 6 in under 5 hours in a financial transaction graph that consists of tens of millions of nodes and edges. While the costs are high, Oryx’s protocol parallelizes well and can use additional hardware resources. Furthermore, Oryx is, to our knowledge, the first system that can handle this task for large graphs.

Metadata
Available format(s)
PDF
Category
Cryptographic protocols
Publication info
Published elsewhere. PETS 2025
Keywords
private cycle detection; private graph
Contact author(s)
kezhong @ seas upenn edu
sebastian angel @ cis upenn edu
History
2024-12-19: last of 4 revisions
2024-07-09: received
See all versions
Short URL
https://ia.cr/2024/1117
License
Creative Commons Attribution-ShareAlike
CC BY-SA

BibTeX

@misc{cryptoeprint:2024/1117,
      author = {Ke Zhong and Sebastian Angel},
      title = {Oryx: Private detection of cycles in federated graphs},
      howpublished = {Cryptology {ePrint} Archive, Paper 2024/1117},
      year = {2024},
      url = {https://eprint.iacr.org/2024/1117}
}
Note: In order to protect the privacy of readers, eprint.iacr.org does not use cookies or embedded third party content.