METHOD AND APPARATUS FOR UTILITY-AWARE PRIVACY PRESERVING MAPPING IN VIEW OF COLLUSION AND COMPOSITION

摘要

The present embodiments focus on the privacy-utility tradeoff encountered by a user who wishes to release some public data to an analyst, which is correlated with his private data, in the hope of getting some utility. When multiple data are released to one or more analyst, we design privacy preserving mappings in a decentralized fashion. In particular, each privacy preserving mapping is designed to protect against the inference of private data from each of the released data separately. Decentralization simplifies the design, by breaking one large joint optimization problem with many variables into several smaller optimizations with fewer variables.

主权项

1. A method for processing user data for a user, comprising:
accessing the user data, which includes private data, a first public data and a second public data, the first public data corresponding to a first category of data, and the second public data corresponding to a second category of data; determining a first information leakage bound between the private data and a first and second released data; determining a second information leakage bound between the private data and the first released data, and a third information leakage bound between the private data and the second released data, responsive to the first bound; determining a first privacy preserving mapping that maps the first category of data to the first released data responsive the second bound and a second privacy preserving mapping that maps the second category of data to the second released data responsive the third bound; modifying the first and second public data for the user, based on the first and second privacy preserving mappings respectively, to form the first and second released data; and releasing the modified first and second public data to at least one of a service provider and a data collecting agency.