Improving utility and security of the shuffler-based differential privacy
Tianhao Wanga, Bolin Dingb, Min Xuc, Zhicong Huangb, Cheng Hongb, Jingren Zhoub, Ninghui Lia, Somesh Jhad
- aPurdue University
- bAlibaba Group
- cUniversity of Chicago
- dUniversity of Wisconsin
Papers open inside SciRah from the original publisher or repository; SciRah never hosts them.
Abstract
When collecting information, local differential privacy (LDP) alleviates privacy concerns of users because their private information is randomized before being sent it to the central aggregator. LDP imposes large amount of noise as each user executes the randomization independently. To address this issue, recent work introduced an intermediate server with the assumption that this intermediate server does not collude with the aggregator. Under this assumption, less noise can be added to achieve the same privacy guarantee as LDP, thus improving utility for the data collection task. This paper investigates this multiple-party setting of LDP. We analyze the system model and identify potential adversaries. We then make two improvements: a new algorithm that achieves a better privacy-utility tradeoff; and a novel protocol that provides better protection against various attacks. Finally, we perform experiments to compare different methods and demonstrate the benefits of using our proposed method.
TL;DRThis paper investigates the multiple-party setting of LDP, analyzes the threat model and identifies potential adversaries, and proposes new techniques that achieve a better privacy-utility tradeoff than existing ones. (Semantic Scholar)