ESA: A Novel Privacy Preserving Framework

被引:0
作者
Wang L. [1 ]
Meng X. [1 ]
机构
[1] School of Information, Renmin University of China, Beijing
来源
Jisuanji Yanjiu yu Fazhan/Computer Research and Development | 2022年 / 59卷 / 01期
基金
中国国家自然科学基金;
关键词
Central differential privacy; Data collection; ESA framework; Local differential privacy; Privacy preserving; Shuffle differential privacy;
D O I
10.7544/issn1000-1239.20201042
中图分类号
学科分类号
摘要
With the rapid development of data-driven intelligent technologies, large-scale data collection has become a main application scenario of data governance and privacy-preserving. Local differential privacy technology as a mainstream technology has been widely used in companies, such as Google, Apple, and Microsoft. However, this technology has a fatal drawback, which is its poor data utility caused by accumulative noises added to users' data. To juggle the data privacy and utility, the ESA (encode-shuffle-analyze) framework is proposed. This framework tries adding noises as little as possible while maintaining the same degree of data privacy, which ensures that any user's sensitive information can be used effectively but cannot be recognized from collected data. Considering the elegant and strict definition of differential privacy in math, the major implementation of the ESA framework is based on differential privacy, named shuffle differential privacy. In the case of the same privacy loss, the data utility of shuffled differential privacy method is O(n1/2) higher than that of local differential privacy, closing to the central differential privacy but does not rely on a trusted third party. This paper is a survey about this novel privacy-preserving framework. Based on the popular shuffle differential privacy technology, it analyzes this framework, summarizes the theoretical and technical foundations, and compares different privacy-preserving mechanisms under different statistical issues theoretically and experimentally. Finally, this work proposes the challenges of the ESA, and prospects the implementation of non-differential privacy methods over this framework. © 2022, Science Press. All right reserved.
引用
收藏
页码:144 / 171
页数:27
相关论文
共 78 条
  • [51] Warner S L., Randomized response: A survey technique for eliminating evasive answer bias, Journal of the American Statistical Association, 60, 309, pp. 63-69, (1965)
  • [52] Erlingsson, Feldman V, Mironov I, Et al., Encode, shuffle, analyze privacy revisited: Formalizations and empirical evaluation, (2020)
  • [53] Dwork C, Kenthapadi K, McSherry F, Et al., Our data, ourselves: Privacy via distributed noise generation, Proc of the 24th Annual Int Conf on the Theory and Applications of Cryptographic Techniques, pp. 486-503, (2006)
  • [54] Ghosh A, Roughgarden T, Sundararajan M., Universally utility-maximizing privacy mechanisms, SIAM Journal on Computing, 41, 6, pp. 1673-1693, (2012)
  • [55] Johnson N L, Kemp A W, Kotz S., Univariate Discrete Distributions, (2005)
  • [56] Cormode G, Muthukrishnan S., An improved data stream summary: The count-min sketch and its applications, Journal of Algorithms, 55, 1, pp. 58-75, (2005)
  • [57] Wang Tianhao, Blocki J, Li Ninghui, Et al., Locally differentially private protocols for frequency estimation, Proc of the 26th USENIX Security Symp Security, pp. 729-745, (2017)
  • [58] Ghazi B, Pagh R, Velingker A., Scalable and differentially private distributed aggregation in the shuffled model, (2019)
  • [59] Ghazi B, Manurangsi P, Pagh R, Et al., Private aggregation from fewer anonymous messages, Proc of the 39th Annual Int Conf on the Theory and Applications of Cryptographic Techniques, pp. 798-827, (2020)
  • [60] Balle B, Bell J, Gascon A, Et al., Differentially private summation with multi-message shuffling, (2019)