-
公开(公告)号:US10242224B2
公开(公告)日:2019-03-26
申请号:US15793898
申请日:2017-10-25
摘要: A hardware database privacy device is communicatively coupled to a private database system. The hardware database privacy device receives a request from a client device to perform a query of the private database system and identifies a level of differential privacy corresponding to the request. The identified level of differential privacy includes privacy parameters (ε,δ) indicating the degree of information released about the private database system. The hardware database privacy device identifies a set of operations to be performed on the set of data that corresponds to the requested query. After the set of data is accessed, the set of operations is modified based on the identified level of differential privacy such that a performance of the modified set of operations produces a result set that is (ε,δ)-differentially private.
-
公开(公告)号:US20200250335A1
公开(公告)日:2020-08-06
申请号:US16265936
申请日:2019-02-01
发明人: Christopher Hockenbrocht , Ishaan Nerurkar , Alexander Rozenshteyn , Liam Damewood , David Spies , Mihai Maruseac
IPC分类号: G06F21/62 , G06F16/245
摘要: A differentially private security system communicatively coupled to a database storing restricted data receives a database query from a client. The database query includes a relation specifying a set of data in the database upon which to perform the query and privacy parameters associated with the query. The differentially private security system determines a worst-case privacy spend for the query based on the privacy parameters and the relation. The differentially private security system performs the query upon the set of data specified by the relation and decrements the determined worst-case privacy spend from a privacy budget associated with the client. The differentially private security system records the worst-case privacy spend and the query at a log and determines a privacy budget refund based on queries recorded in the log. The differentially private security system applies the determined privacy budget refund to the privacy budget associated with the client.
-
公开(公告)号:US10733320B2
公开(公告)日:2020-08-04
申请号:US16238439
申请日:2019-01-02
发明人: Ishaan Nerurkar , Christopher Hockenbrocht , Liam Damewood , Mihai Maruseac , Alexander Rozenshteyn
IPC分类号: G06F21/62 , H04L29/06 , G06N20/00 , G06F16/248 , G06F16/2455 , G06F16/2453 , G06N5/00 , G06F16/25 , G06F16/2458
摘要: A hardware database privacy device is communicatively coupled to a private database system. The hardware database privacy device receives a request from a client device to perform a query of the private database system and identifies a level of differential privacy corresponding to the request. The identified level of differential privacy includes privacy parameters (ε,δ) indicating the degree of information released about the private database system. The hardware database privacy device identifies a set of operations to be performed on the set of data that corresponds to the requested query. After the set of data is accessed, the set of operations is modified based on the identified level of differential privacy such that a performance of the modified set of operations produces a result set that is (ε,δ)-differentially private.
-
公开(公告)号:US10726153B2
公开(公告)日:2020-07-28
申请号:US16144790
申请日:2018-09-27
发明人: Ishaan Nerurkar , Christopher Hockenbrocht , Liam Damewood , Mihai Maruseac , Alexander Rozenshteyn
IPC分类号: G06F21/62 , G06K9/62 , G16H10/60 , G06N20/00 , G06F17/18 , G06F16/2455 , G06F16/248 , G06N20/20 , G06N5/00 , G06F17/11 , G06N20/10
摘要: A request from a client is received to generate a differentially private random forest classifier trained using a set of restricted data. The differentially private random forest classifier is generated in response to the request. Generating the differentially private random forest classifier includes determining a number of decision trees and generating the determined number of decision trees. Generating a decision tree includes generating a set of splits based on the restricted data, determining an information gain for each split, selecting a split from the set using an exponential mechanism, and adding the split to the decision tree. The differentially private random forest classifier is provided to the client.
-
公开(公告)号:US10229287B2
公开(公告)日:2019-03-12
申请号:US15793907
申请日:2017-10-25
发明人: Ishaan Nerurkar , Christopher Hockenbrocht , Liam Damewood , Mihai Maruseac , Alexander Rozenshteyn
摘要: A hardware database privacy device is communicatively coupled to a private database system. The hardware database privacy device receives a request from a client device to perform a query of the private database system and identifies a level of differential privacy corresponding to the request. The identified level of differential privacy includes privacy parameters (ε,δ) indicating the degree of information released about the private database system. The hardware database privacy device identifies a set of operations to be performed on the set of data that corresponds to the requested query. After the set of data is accessed, the set of operations is modified based on the identified level of differential privacy such that a performance of the modified set of operations produces a result set that is (ε,δ)-differentially private.
-
公开(公告)号:US20220229931A1
公开(公告)日:2022-07-21
申请号:US17714785
申请日:2022-04-06
IPC分类号: G06F21/62 , G06F16/245
摘要: A differentially private security system communicatively coupled to a database storing restricted data receives a database query from a client. The database query includes an operation, a target accuracy, and a maximum privacy spend for the query. The system performs the operation to produce a result, then injects the result with noise sampled from a Laplace distribution to produce a differentially private result. The system iteratively calibrates the noise value of the differentially private result using a secondary distribution different from the Laplace distribution and a new fractional privacy spend. The system ceases to iterate when an iteration uses the maximum privacy spend or a relative error of the differentially private result is determined to satisfy the target accuracy, or both. The system sends the differentially private result to the client.
-
公开(公告)号:US20200210610A1
公开(公告)日:2020-07-02
申请号:US16810708
申请日:2020-03-05
发明人: Ishaan Nerurkar , Christopher Hockenbrocht , Liam Damewood , Mihai Maruseac , Alexander Rozenshteyn
IPC分类号: G06F21/62 , H04L29/06 , G06N20/00 , G06F16/248 , G06F16/2455 , G06F16/2453 , G06N5/00 , G06F16/25 , G06F16/2458
摘要: A hardware database privacy device is communicatively coupled to a private database system. The hardware database privacy device receives a request from a client device to perform a query of the private database system and identifies a level of differential privacy corresponding to the request. The identified level of differential privacy includes privacy parameters (ε,δ) indicating the degree of information released about the private database system. The hardware database privacy device identifies a set of operations to be performed on the set of data that corresponds to the requested query. After the set of data is accessed, the set of operations is modified based on the identified level of differential privacy such that a performance of the modified set of operations produces a result set that is (ε,δ)-differentially private.
-
公开(公告)号:US20190141052A1
公开(公告)日:2019-05-09
申请号:US16238439
申请日:2019-01-02
发明人: Ishaan Nerurkar , Christopher Hockenbrocht , Liam Damewood , Mihai Maruseac , Alexander Rozenshteyn
IPC分类号: H04L29/06 , G06F16/2453 , G06F16/2455 , G06F16/248 , G06N20/00 , G06F21/62 , G06F16/25 , G06N5/00
摘要: A hardware database privacy device is communicatively coupled to a private database system. The hardware database privacy device receives a request from a client device to perform a query of the private database system and identifies a level of differential privacy corresponding to the request. The identified level of differential privacy includes privacy parameters (ε,δ) indicating the degree of information released about the private database system. The hardware database privacy device identifies a set of operations to be performed on the set of data that corresponds to the requested query. After the set of data is accessed, the set of operations is modified based on the identified level of differential privacy such that a performance of the modified set of operations produces a result set that is (ε,δ)-differentially private.
-
公开(公告)号:US20180349384A1
公开(公告)日:2018-12-06
申请号:US16040478
申请日:2018-07-19
发明人: Ishaan Nerurkar , Christopher Hockenbrocht , Liam Damewood , Mihai Maruseac , Alexander Rozenshteyn
CPC分类号: G06F16/24578 , G06F16/2465 , G06F16/248 , G06F17/18 , G06F21/6227 , G06F21/6245 , G06F21/6254 , G06N20/00
摘要: A differentially private security system is communicatively coupled to a database. The differentially private security system receives a request from a client device to perform a query of the database and identifies a level of differential privacy corresponding to the request. The identified level of differential privacy includes privacy parameters (ε,δ) indicating the degree of information released about the database. The differentially private security system performs a differentially private query upon a set of data in the database such that the performance of the query produces a result that is (ε,δ)-differentially private.
-
公开(公告)号:US11188547B2
公开(公告)日:2021-11-30
申请号:US16837894
申请日:2020-04-01
发明人: Ishaan Nerurkar , Christopher Hockenbrocht , Alexander Rozenshteyn , Liam Damewood , Mihai Maruseac
IPC分类号: G06F16/00 , G06F16/2458 , G06Q30/02 , G06F16/242 , G06F16/2455 , G06F16/245 , G06F16/2457
摘要: A differentially private security system communicatively coupled to a database storing restricted data receives a database query from a client. The database query includes a relation indicative of data to perform the query upon and at least one privacy parameter indicative of a level of differential privacy with which to perform the query. The differentially private security system determines a noise type for the query. The differentially private security system determines a representation of probabilistic privacy loss for the query based on the determined noise type. The differentially private security system determines a privacy spend for the query using the generated representation of probabilistic privacy loss. The differentially private security system determines whether the determined privacy spend exceeds a privacy budget associated with the client.
-
-
-
-
-
-
-
-
-