“Share your data, keep your secrets.” Irini Fundulaki
Daniel Lieuwen
Arnaud Sahuguet
!#"$&%
Bell Labs Research, NJ, USA Guillaume Giraud Nicola Onose Nicola Pombourcq Ecole Polytechnique, Palaiseau, France ' $ $(*) $&% + $' , ) $-!,".$'
F1>:[nFH02O:2j;PPIJ=JE ;7=?>3BCE&;3yfg2jW 2&PIJ> d2 W\{{34265!;U9P!IJ2
ABSTRACT /10243!26579826326:3@>ACB26:D=?E62&BGFH=JIJIH:2 KL=M:24;E6E&2&BBN7>
>ABLE3w=JBm70!2zg6?6~b|HQRIJ2S=J3!AT>:UN;7=J>3VIJ>E ;72&WX>3YD;:=J>L!B43267ZF1>:[B&\
FH0=JEBB=Jf!I?2pAb>:CU92w}b:2&BP\e>70!26:CPg26>PIJ2H7>
]^0;7 _ B(32OF`=JBa70R;7a70=JB(=J3 Ab>:UN;7=J>3c32&2 W Ba3!>7(>3IMde7>Hfg2
:2 ;EO09Pg2&>PIJ2c}b:2&BP\#U92aFH0!26:2&D26:702Od9;:2c}b:2&BP\k#;UGO\
=J372&8:4;E6E&2&BB2 Wh=?3i;NB2&IJ2&E67=JD2jAb;B0=J>3i70R;7
3o70!29E ;IJIJ26:
B=?W 2=J3B.72 ;WS>AE ;I?IJ=J38h;tBPg2&E6=JQEGW!2&D=JE&2
:2&BPg2&EO7BH70!2eLB26: _ BHP!:=JD;E6dGE&>3E&2O:3B&\
kE ;IJI;nPg26:B>3o;3Whk{I?2O7e7029;PPIJ=JE ;7=?>3oQR8L!:2
>L!7C70!2
kl3i70=JBjW 2&U9>4P!:>Pg>B;ImF12GP!:2&B2637j;nAT::[o70R;7
fg2&B.7CF1;&d47>nE&>37
Pg26:AT>:U9Ba70!2m=J372&8:3p>AgW =?B.7:=Jf!L!72 WeqertsNLB2O:P!:>QRIJ2
BPg2&E&=MAd
FH0>zE ;39E&>373
FH0=JEU9Pg>32637BN=J3u;SP!:=JD;E6dv*E&>3BE&=J>L!BwUN;33!26: \x/10!2y[26d
Ab>:FH0;7mPL!:Pg>B2267E\#>:=J3B.7z0;D2
=?W!2 ;z=JBm7>zLB2{;cB=J3!8IJ2|I?;3!8L;82j}~qe!KL!=J::26IT(7>cW!2 ;IRFH=M70
7029AT>IJIJ>FH=J3!8oPg>IJ=JE6d
!¡O g?wT¢£p¤h¥¥¦O§§t¨¡ ¡©hª¢g¥O¦
fg>70@W;737:>IC;3RW:2&IMd>3
Z«¡¦pPg>BB=JfIJ2!=M7fg2&E&>U92&BmE6:=M7v
P!:>QRIJ2e=J3!AT>:UN;7=J>3\
=JE ;IH7>SP :>D=?W!2t;iLf!=?KL!=M7>LBN;E&E&2&BBN7>°ª§6O¦9 R¦.¡.µ?tb¢R´ ³&¡¦:[B{;3W
1. MOTIVATION AND OVERVIEW
W!26D =JE&26B1;3W4}~fgE6>3B=JB.7B>AaB.7:UN;v 7=J>3R;3WNW d 3R;U9=?EW!;7AB2O:D =JE&26BHFH=JIJIa3!>7Hfg2C:2&B.7:=JE672&W
;3WwE ;33!>7fg2t·ZF1;:2&0!>L!B2 W!¸ \
7>o70!24fg>L3W;:=?26BG>Ac;S8=JD2&33267ZF1>:[g\X/10=JBG=JBGE&;IJIJ2 W E&>3 D26:82&3!E&2xsa;3W v*IJ=J32t72&IJ2&P!0>3d1FH=M:2&IJ2&BBG72&IJ2&P0!>3d
¹:>f;fIMd2&D2&3wU9>:2e=JU9Pg>:7:U;{E&>3D26:82 Wp3!267v
7>SE&>37:>IH702nF1; d70=JBN=J3!AT>:UN;7=J>3@=JBn;E&E&2&BB2 W\x/10!2 LB2O:1=JBmFH=JIJI?=J3!8p7>pW!=JBE&IJ>B2{PR;:71>A026:mP!:>QIJ2{=J3!AT>:UN;7=?>3
º
7>hE&26:73!IMd`=MACB02wE ;3fg2nBL :2w70;7
0!26:
=J3!AT>:UN;7=J>3t=JB3!>7{;E6E&2&BB=JfIJ2zfdwL!3R;L!70>:=&2 WwP;:7=J2&B&\ /102#P :>fIJ2&U9BFH=M70C702#E&L ::2&37a;:EO0!=M72&E67L!:2;:270;7 }~=
/10!2if;E32y>Ac7022
U92 W =;7>:w=JBt;3uqCrts
LB2O:yP!:>QIJ2S=J3!Ab>:UN;7=J>3VI?=JD26B4=?3X3267ZF1>:[YE6>U9Pg>3!2&37B
BEU9Pg>32&37B{;3RWt=JB
FH=M70VW =26:2&374P!:>7>E&>IJB&pW;7W 2&IJB&z|¹#klB&\m>3B26v
W!2OQR32&WGfdGB.7uW 2 ;IcFH=M70xBLEv 82632&=M7=J2&BiFH0!=JEO0xUN;[2o70!2
;88:2&8;7=J>3
>AN=J3!AT>:UN;7=J>3
U92 W =;7>:n32&2 W Bn7>B.7>:2oUN;PP!=?3!8Btfg2O7lF1262&3uLB26:4P :>v
0R;:7|=?U9Pg>BB=JfIJ2H;3RW4D2O:dn265 Pg2&3!B=JD2}~=J={;E&E&2&BB
QRIJ2
E6>U9Pg>3!2&37B
}~=~\ 2\9BLf 7:2&2&BzW 26QR3!2 Wh>3i70!2
U92 W!=?;7>:
E&>37:>IH=?BG;I?IMv*>:v*3!>70=J3!8S;3W=JBNBP!:2&;W;E6:>BB970!2nD;:v
BEL!BcB>L!:E&26B&\t>:z=J3B.7tUcdh;WW:2&BBzfg>>[ 3
L!26:=J2&B(;:2ª§6O¦6´Z3e:L!3!v
:2 KL=M:2&B(;P;BB.F1>:B0R;:2mUpde;WW:2&BB(fg>>[g
3=J3!8j>3Gfg2&0;IMA>A(026:O|}.¦546ªO§ZO¦.H=J3=M7=?;726B{;c:2 KL2&B.71AT>:
k32&2 WN7>j8=?D2{70=JBP;BB.F1>:j>7026:HPg26>PIJ2C>:;P!PIJ=JE ;v
;9PR;:7C>Am;9LB26: _ BCP :>QI?2jW;7A(702eU92&W!=?;7>:HBEO0!2&UN; \
2. OUR APPROACH
3. ONE LANGUAGE TO RULE THEM ALL
|L!U926:>L!B(=J3RW LB.7:dc=J3=M7=?;7=JD2&B#IJ=J[2rn=JE6:>B>AT7¹;BBPg>:7
º
;3RW`s=Jfg26:7ldS{IJIJ=;3E&2
0;D29fg2&2&3`B.7h;W v
/10!2|[26djE&>U9Pg>32&37fg2&0=J3W6#!C¹#B.726:=JBm702qe KL=M::2&I
W :26BB
702t=JBBL24>AeLB2O:NP!:>QIJ24W;77=JD;72 W
|2&3!26:=JE!{B26:j¹#:>QRIJ2y}"#!C¹e2$>:7
LU92637BtAT>:o=?372&8:3
}~=~\ 2\
UN;PP=J3!8Byfg267lFm2&2&3
BL!f!v
} D=J26FHB{>D2O:|qCrts`W!>E&L!U92&37B17>wW 2&BE6:=Jfg2c;E&E62&BB|E&>3!v 7:>I!}~=~\ 2\#;BB>E&=?;7=?>3pfg2O7lF1262&3eBLf vlW >E&LU92637B;3RW|fg>>I?2&;3
=JBp7>4f!L=JI?WS;3`qCrtsv
P!:2&W!=JE ;726BD26:70!2&B2zW!>E&L!U92&37B&\
fR;B2 WCU92 W =;7>:70R;7(;E67B(;B(;e3G>A702BEO0!2&UN;eF12{FH=JIJILB2{AT>:70!2
/10!23!2657B.726Pe=?B7>Pg26:Ab>:UVW!;7C=JBmP!:26B2&372 W
=J3N(=?8 \ º \#kZ3N(=J8!\
F12H0R; D2H8;7026:2&W
P=J3!8cP;:7B1>A70!2CKL2O:dj7>z702D;:=?>LBW!;7L :E&2&Bm70;7 ;EO7LR;IJIMd
E ;I?263RW;:#=J3!Ab>:UN;7=J>3zF12m32&2 We7>{;E&E&26BBB>L!:E&2CPDJF V WGO
>3fg2&0;IMAC>A|0!26:Op=JBBL2&BN;hKL26:doAb>:9:3R;LRW_ B
;WW:2&BB
OL :E&2SP;:7
\/102eB.d 37>[BHD26:dGB=JU9=JI;:{7>jqC¹;70GFH=M70
702t;WW 2 W.-S>Pg26::G7>iAb>IJIJ> F
}~UN;PP!=?3!8XT
>A702GKL2O:dS=JB
W 26QR3!2 WS;Bp702Nqe KL!=M::2&Im265 P :2&BB=J>3*),+ =J34(=J8!\
Q FH
+ O\mHAT726:{KL2O:dG:2OF:=J7=J3!8!Fm2e0R; D2|70!2 Ab>IJI?> FH=J38zP!I;3aKL26:d9)$m 5 FH=JIJIfg21B26377>|B>L!:E626CPDJF V WGO Q F H O9B>L :E&2&B[CPDJF DJI KGLMLNF OA70!=?B0R;Bmfg2&263NW!>3!2
fg>>[gE ;IJ2&3W;:p=J3 Ab>:UN;7=J>3S;3RWyU9>f!=?IJ2
P :2&B2&3!E&2t}bAT:>U F1>:[ =J3!8@0>L!:B&\
BPg2&E67=JD26IJdm7>982O7C¹(26:B>3R;I m >37:98267{70!2
L!PPg>B2h70;7tL!B26:tk*:=J3=9}~>:t;3Y;P!PIJ=JE ;7=J>3X:L3!3=J38
Cs(|nW L!:=J38
}~fdoLB=J38y702wW;7L :E&2&B6CEDGF H DJI KGLMLNF O37:>I:LIJ2&B
;3RW`KL2O:=?26BcFm2GL!B2
702
0>I?W
/
B.7L 7;E&E62&BB=J389702eW >E&LU926371=J7B26IJAZ\
UpLIM7=JPIJ2tPR;70BG;7N70!2
B;U9247=JU92\x/102h;E&E62&BBnE&>37:>I|:L!I?26B0/1+ 2/234;3RW4/65
kZ3@7024QR3;I|B.726P702yD;:=J>LBGE&>U9Pg>32637BG>f 7z702KL2O:dt}b7026=J::2 KL2&B.72O:1PR;:71UN;7EO0!2&BU
702wB>L!:E62&B9FH=?IJI702&3fg2tU926:82 W
;3WN70!2|E&>3RW =J7=J>3n=JB17:L2\#rn>:2&>D26: F12|LB2{70!2p_ 7_;5 =JB
QR3;Ig:2&BL!IJ7H:267L :32 WN7>j702{:2 KL2&B.726: \
=J3B.72 ;Wn>Aa70298pq|¹;70t;5 =?B7>9; D>=?Wt;3dGE&>3 AbL!B=?>3\
5. OUR PROTOTYPE
(Q:B.7Pg26:Ab>:U9B1;E&E&2&BB1E6>37:>IRfdc7:d =?3!8e7>CQR3RW
&
7>iP!:>W LE&2n70!2
+ ! #"$#%& ')( &*+'-,.(/,10 -*+( ')( 324 #5 67'-,8:9 CEDJF V WGO Q F O( 5 67'-,8 99 CECEDJDJFF DGQ I$K L ORLNI F SO_B*`< a '-,.(/, ijS1MVkLKlF KmS ' x yz|{~}{z hh WYOOEijS1M)F7T7S1dbcU3deWORQ.SPTEUVOXWYTZ]\7^3_B`
*+st'-/,A(B $/% uP, ,&% ' U Fx=JBC=JIJI?L!B.7:37:>I:LIJ2&B&;3RWy702&3oFm2
6. OVERVIEW OF THE DEMO
E&>U9Pg>B2C702zKL!26:dNFH=J70w702&=M:L3!=?>3\kl3w>:j2&D;IJL!v ;7270!2E6>3RW =M7=?>39PR;:7m>A;E&E&26BB1E&>37:>I!:LIJ2&B&>L!:P!:>7>v 7ld Pg21P;E37:>IW!2&E6=?B=J>3B=?37>Cq| rts W!26E&=JB=?>3Bz;3RW4=J3 D>[2&B702j L!34qC rts
º
>:H70=JBW!2&U9> Fm2CFH=JI?IaW!2&U9>3B.7:U9Pg>B2c70!2c:26F:=M772&3iKL26:dwFH=M70
D=?W!LR;ImKL!26:=J2&Bc;:2NB2&37z7>n7029D;:=J>L!BjW!;7L!:E&26B&;B
.Ì
|¹VU926BB;826B4}O\Sk*A|3!2&2 W 2 WE&>U9Pg>32637Bc:267:=J2&D2 W 702eD;:=J>L!BW;7L!:E62&B;:2eU926:82 WG7>82670!26:j} O\
Ì
7>y:2&8=JB.726:
LB26:9P :>QI?2wE&>U9Pg>32&37BG}~E&>U9=J3!8
Pg>72&37=?;IJIMd9AT:>UUpLIM7=JPIJ2HB>L!:E62&B4P!:>W LE&2G;yKL26:diPI?;3^} O \ykl3W!=Mv
AT:>U
0> F
B26:D26: \
)Ì
0> F7>4;W!W98W!2&IJ26728U9>W!=MATdi;E&E&2&BBcE&>37:>IPg>I?=JE&=J2&B
+ 077P
}~LB=J38z702HP :>D=JB=J>3!=?3!8pE6I?=J2&37P :2&B2&372 W
=J3G(=J8!\ O\
FHB&\ ;P;E:8 8 ;5 =?B
8 8
Í
0> F
702tU9267:UN;7=J>3@W!=JE67A
7. REFERENCES
=?3!E&>U9=J3!8NKL!26:=J2&B&fR;B2 Wt>34:2&8=JB.726:2 W4LB26:|P!:>QRIJ2
º
$
E&>U9Pg>32&37B&m;E&E&26BBwE&>37:>IHPg>IJ=JE&=J2&B&;3W:2 KL!2&B.7
E&>372657N}~=?W!2&37=M7ldy>A702j:2&KL!2&B.726: a>702O:zPR;: F
C¹#B.726:E ;3
fg2mLB2 Wcfdp;PPIJ=JE ;7=?>3B;3WpB26:v
#!
D =JE&26BD=?;p70!2z |¹
726:BHBLEA702eW!; dO\
Í
/102z/10!=J:..2&EO7 \ 077P 88 FFFe\ 8P!P\ >:8 \ >H\ ;m26:7=J3>
;3RW >H\R26::3t>A#qCrt' s AC>E6LU92&37B&\ a ¦¢§O6~¡¢!§p¡¢ 3 ;3Wts\R726Ab;3!2&BE&L\!q 3 L26:d# 3 L26:dws;38LR;82 Ab>:|qCrts\!077P 88FFFe\ F \ >:8 8P / ( 8 5KL!26:d 2&f :LR;:d
º \ !\ mI?;:[n;3RW4g \ A|2 ({>B29}~2 W!B&\ O\!qertsS¹;70 sa;38L;82G}~q|¹;70g {26:B=J>3 º \ \] ({26E&>U9U92&3W;7=?>3 |>D26Ujfg26: º : 8 8P / (#85 PR;70\ >H\ Ae;U9=?;3=~\ AC2 1;P!=M7E ;I?2N}~2\ 8 \Ab;D>:=M72eIJ>E ;7=J>3!B&gP!:2OAb26::2 WwI;3!v 8LR;82RE&L!::2&3!E6dO\H>:|=J3B.7L :CPg26:B>3R;IaPg>:v
3
º
M U !$ #
º
0