Preserving differential privacy under finite-precision semantics - Archive ouverte HAL Access content directly
Journal Articles Theoretical Computer Science Year : 2016

Preserving differential privacy under finite-precision semantics

(1, 2) , (2, 3) , (1, 3, 4)
1
2
3
4

Abstract

The approximation introduced by finite-precision representation of continuous data can induce arbitrarily large information leaks even when the computation using exact semantics is secure. Such leakage can thus undermine design efforts aimed at protecting sensitive information. We focus here on differential privacy, an approach to privacy that emerged from the area of statistical databases and is now widely applied also in other domains. In this approach, privacy is protected by adding noise to the values correlated to the private data. The typical mechanisms used to achieve differential privacy have been proved correct in the ideal case in which computations are made using infinite-precision semantics. In this paper, we analyze the situation at the implementation level, where the semantics is necessarily limited by finite precision, i.e., the representation of real numbers and the operations on them are rounded according to some level of precision. We show that in general there are violations of the differential privacy property, and we study the conditions under which we can still guarantee a limited (but, arguably, acceptable) variant of the property, under only a minor degradation of the privacy level. Finally, we illustrate our results on two examples: the standard Laplacian mechanism commonly used in differential privacy, and a bivariate version of it recently introduced in the setting of privacy-aware geolocation.
Fichier principal
Vignette du fichier
gazeau-draft-2014.pdf (331.64 Ko) Télécharger le fichier
Origin : Files produced by the author(s)
Loading...

Dates and versions

hal-01390927 , version 1 (02-11-2016)

Identifiers

  • HAL Id : hal-01390927 , version 1

Cite

Ivan Gazeau, Dale Miller, Catuscia Palamidessi. Preserving differential privacy under finite-precision semantics. Theoretical Computer Science, 2016. ⟨hal-01390927⟩
219 View
280 Download

Share

Gmail Facebook Twitter LinkedIn More