Application of Homomorphic Encryption for a Secure-by-Design Approach to Protect the Confidentiality of Data in Proficiency Testing and Interlaboratory Comparisons
Accredited laboratories participating in Proficiency Testing (PT) and Interlaboratory Comparison (ILC) typically submit measurement results (and associated uncertainties) to an organizer for performance evaluation using statistics such as the z-score and the En value. This requirement can undermine confidentiality when the disclosed plaintext values reveal commercially sensitive methods or client-related information. This paper proposes a secure-by-design PT/ILC workflow based on fully homomorphic encryption (FHE), enabling the required scoring computations to be executed directly on ciphertexts. Using the CKKS scheme (Microsoft SEAL), the organizer distributes encrypted assigned values and a public/evaluation key set; each participant locally encrypts pre-processed measurement data, evaluates encrypted z-score and En value, and returns only encrypted performance metrics. The organizer decrypts the metrics without receiving the ciphertexts of participants’ raw measurement values. We quantify feasibility via execution time, run-to-run variability across fresh key generations (coefficient of variation), and relative calculation error versus plaintext scoring. On commodity hardware, end-to-end score computation takes 1 to 8 s, the coefficient of variation can be reduced below 1e−10, and the relative error remains below 1e−6, indicating practical deployability and numerical stability for PT/ILC decision-making. Given that PT/ILC reporting cycles are typically on the order of days to weeks, a per-participant computation time of seconds is operationally negligible, while the observed coefficient of variation and relative error indicate that the CKKS approximation and key-dependent variability are far below typical decision thresholds used for pass/fail classification.
Authors
- Ivica Lukić (ORCID: https://orcid.org/0000-0001-7867-3385)
- Kruno Miličević
- Mirko Köhler (ORCID: https://orcid.org/0000-0002-5141-3070)
- Davor Vinko
Institutions
- Agricultural Institute Osijek (HR)
- Croatian Personal Data Protection Agency (HR)
Publication Details
- Journal
- Telecom
- Published
- 2026-02-01
- DOI
- https://doi.org/10.3390/telecom7010014
- Primary Topic
- Scientific Measurement and Uncertainty Evaluation
- Type
- article
- Field-Weighted Citation Impact
- 0.00