We use cookies to improve your experience with our site.

基于截断和规范化的Laplace机制的差分隐私

Differential Privacy via a Truncated and Normalized Laplace Mechanism

  • 摘要: 在查询含有敏感信息的数据库时,必须保证储存在数据库中的个人隐私,这是通过差分隐私机制为查询反馈添加被控制的噪声来实现的。然而,大多数差分隐私机制并没有考虑所提出的查询的有效范围。因此,可能会生成在有效范围之外的噪声反馈。为了检验并且提升机制的效用,常用的Laplace分布可以截断至有效的访问范围并使之规范化。然而,这一基于数据的规范化操作会泄露真实的查询反馈的相关信息,从而违背了隐私保证。本文通过为Laplace分布确定一个适合的规模参数,提出了一个保留差分隐私保证的新方法。我们调整了在Laplace分布情况下的隐私保证,以解释数据相关的规范化因素,并研究了针对不同范围约束条件类别下的隐私保证。我们提出了得到每个类别的最优或者近似最优规模参数(即,保护差分隐私的最小值)的推演方法。从而使得可以使用Laplace分布,以范围一致和差分隐私的方式回应查询请求。为了证实本文提出的规范化方法的好处,我们将其余其它范围一致机制进行了实验对比,结果表明本文的方法效用更好。

     

    Abstract: When querying databases containing sensitive information, the privacy of individuals stored in the database has to be guaranteed. Such guarantees are provided by differentially private mechanisms which add controlled noise to the query responses. However, most such mechanisms do not take into consideration the valid range of the query being posed. Thus, noisy responses that fall outside of this range may potentially be produced. To rectify this and therefore improve the utility of the mechanism, the commonly-used Laplace distribution can be truncated to the valid range of the query and then normalized. However, such a data-dependent operation of normalization leaks additional information about the true query response, thereby violating the differential privacy guarantee. Here, we propose a new method which preserves the differential privacy guarantee through a careful determination of an appropriate scaling parameter for the Laplace distribution. We adapt the privacy guarantee in the context of the Laplace distribution to account for data-dependent normalization factors and study this guarantee for different classes of range constraint configurations. We provide derivations of the optimal scaling parameter (i.e., the minimal value that preserves differential privacy) for each class or provide an approximation thereof. As a result of this work, one can use the Laplace distribution to answer queries in a range-adherent and differentially private manner. To demonstrate the benefits of our proposed method of normalization, we present an experimental comparison against other range-adherent mechanisms. We show that our proposed approach is able to provide improved utility over the alternative mechanisms.

     

/

返回文章
返回