Local Distributed Verification

TL;DR

This paper demonstrates that for any network predicate, it is possible to design distributed verification protocols that do not rely on node identities, ensuring correctness and detecting illegality locally even against adversarial attempts.

Contribution

It introduces a new framework for identity-independent distributed verification, establishing a hierarchy of complexity classes and proving universal verification protocols without node identity information.

Findings

Existence of identity-independent verification protocols for all network predicates

Characterization of the local hierarchy of complexity classes without node identities

Protocols ensure correctness and illegality detection against adversarial certificate assignments

Abstract

In the framework of distributed network computing, it is known that, for every network predicate, each network configuration that satisfies this predicate can be proved using distributed certificates which can be verified locally. However, this requires to leak information about the identities of the nodes in the certificates, which might not be applicable in a context in which privacy is desirable. Unfortunately, it is known that if one insists on certificates independent of the node identities, then not all network predicates can be proved using distributed certificates that can be verified locally. In this paper, we prove that, for every network predicate, there is a distributed protocol satisfying the following two properties: (1) for every network configuration that is legal w.r.t. the predicate, and for any attempt by an adversary to prove the illegality of that configuration using distributed certificates, there is a locally verifiable proof that the adversary is wrong, also using distributed certificates; (2) for every network configuration that is illegal w.r.t. the predicate, there is a proof of that illegality, using distributed certificates, such that no matter the way an adversary assigns its own set of distributed certificates in an attempt to prove the legality of the configuration, the actual illegality of the configuration will be locally detected. In both cases, the certificates are independent of the identities of the nodes. These results are achieved by investigating the so-called local hierarchy of complexity classes in which the certificates do not exploit the node identities. Indeed, we give a characterization of such a hierarchy, which is of its own interest