# Secure multi-party private set intersectio: Protocols supporting MULTI-party VS supporting TWO-party

Let assume party $B$ wants to receive secure multi-party computation (MPC) output.

The are many private set intersection (PSI) protocols that support only two parties but they cannot support multi-party. In this case, party B needs to run PSI with party A. Then B uses the result as the input and runs two-party PSI with party C and, so on. However, this setting leaks more information to client B, than the protocol supporting, multi-party PSI.

• Example: let computation be "set intersection"

Assume party A has $S_{A}=\{1,2,3\}$

party B has $S_{B}=\{1,2\}$

party C has $S_{C}=\{2,5\}$

Party B in the protocol only supporting two-party receives:

1- $K=S_A\cap S_B=\{1,2\}$

2- $K'=S_C \cap S_B=\{2\}$

Then, it finds $K\cap K'=\{2\}$. So it learns party A has $1$ but party C does not have $1$.

In contrast, if a protocol could support multi-party client B would only learn intersection of all sets that is $\{2\}$.

Question: What are the real-world applications (examples) of multiple-party PSI?

So I can use the examples to show/justify that protocol supporting multi-party PSI is better (in terms of security) than those only supporting two-party.

• Do you have any justifiable application for two-party PSI? If so, would it not naturally extend to the multi-party setting? – Guut Boy Aug 15 '16 at 12:03
• @GuutBoy may be may be not!!! – user153465 Aug 15 '16 at 12:09
• @GuutBoy Because the party who recieves the result can run two-party protocol so it engages with one of the parties and do the same for the other parties. According to PSI definition, this is secure. Bu t, as we can see from the question there are some data leakage. Thus, I need a concret example to justify multiple PSI protocol. – user153465 Aug 15 '16 at 12:20
• I disagree, your example clearly shows that simply using two-party PSI multiple times is not secure in the multi-party setting. The party learning the output learns more than he is supposed to, i.e., the intersection of the three sets. – Guut Boy Aug 15 '16 at 12:29

• So your question is not well-defined. You are not looking for applications for MPC but rather applications for MPC that computes some function $y_1,\ldots,y_n=f(x_1,\ldots,x_n)$ by computing the functions $y_i,y_j=f(x_i,x_j)$ for all $i,j\in[n]$ and leaks $f(x_i,x_j)$ to party $p_i$ for all $j\in[n]$ such that these leaks don't harm the privacy. – Bush Aug 14 '16 at 12:46