Natural differential privacy-a perspective on protection guarantees.
Ontology highlight
ABSTRACT:
SUBMITTER: Altman M
PROVIDER: S-EPMC10557523 | biostudies-literature | 2023
REPOSITORIES: biostudies-literature
Publications
Natural differential privacy-a perspective on protection guarantees.
PeerJ. Computer science 20230928
We introduce "Natural" differential privacy (NDP)-which utilizes features of existing hardware architecture to implement differentially private computations. We show that NDP both guarantees strong bounds on privacy loss and constitutes a practical exception to no-free-lunch theorems on privacy. We describe how NDP can be efficiently implemented and how it aligns with recognized privacy principles and frameworks. We discuss the importance of formal protection guarantees and the relationship betw ...[more]
Similar Datasets
Project description:Personal data collected by wearable devices contains rich privacy. It is important to realize the personal privacy protection for user data without affecting the data collection of wearable device services. In order to protect users' personal privacy, a collection scheme based on local differential privacy is proposed for the collected single attribute numerical stream data. At first, the stream data points collected by the wearable device are censored to identify the salient points, and the adaptive Laplacian mechanism is used to add noise to these salient points according to the assigned privacy budget; then the collector reconstructs and fits the stream data curve to the noise-added salient points, so as to protect the personal privacy of the data. This scheme is experimented on the heart rate dataset, and the results show that when the privacy budget is 0.5 (i.e., at higher privacy protection strength), the mean relative error is 0.12, which is 57.78% lower than the scheme of Kim et al. With the satisfaction of user privacy protection, the usability of mean value estimation of wearable device stream data is improved.
| S-EPMC9385068 | biostudies-literature
Project description:Personal mobility data from mobile phones and other sensors are increasingly used to inform policymaking during pandemics, natural disasters, and other humanitarian crises. However, even aggregated mobility traces can reveal private information about individual movements to potentially malicious actors. This paper develops and tests an approach for releasing private mobility data, which provides formal guarantees over the privacy of the underlying subjects. Specifically, we (1) introduce an algorithm for constructing differentially private mobility matrices and derive privacy and accuracy bounds on this algorithm; (2) use real-world data from mobile phone operators in Afghanistan and Rwanda to show how this algorithm can enable the use of private mobility data in two high-stakes policy decisions: pandemic response and the distribution of humanitarian aid; and (3) discuss practical decisions that need to be made when implementing this approach, such as how to optimally balance privacy and accuracy. Taken together, these results can help enable the responsible use of private mobility data in humanitarian response.
| S-EPMC11574092 | biostudies-literature
Project description:It is a new attack model to mine user's activity rule from user's massive data. In order to solve the privacy leakage problem caused by user tendency in current privacy preserving methods, an extended differential privacy preserving method based on user's tendency is proposed in the paper. By constructing a Markov chain, and using the Markov decision process, it equivalently expresses user's tendency as measurable state transition probability, which can transform qualitative descriptions of user's tendency into a quantitative representation to achieve an accurate measurement of the user tendency. An extended (P,ε)-differential privacy protection method is proposed in the work, by introducing a privacy model parameter R, it combines the quantified user's propensity probability with a differential privacy budget parameter, and it can dynamically add different noise amounts according to the user's tendency, so as to achieve the purpose of protecting the user's propensity privacy information and improve data availability. Finally, the feasibility and effectiveness of the proposed method was verified by experiments.
| S-EPMC10602288 | biostudies-literature
Project description:BACKGROUND:An online health community (OHC) is a novel sharing channel through which doctors share professional health care knowledge with patients. While doctors have the authority to protect their patients' privacy in OHCs, we have limited information on how doctors' privacy protection choices affect their professional health care knowledge sharing with patients. OBJECTIVE:We examined the relationship between privacy protection and professional health care knowledge sharing in OHCs. Specifically, we examined the effects of privacy protection settings in an OHC on doctors' interactive professional health care knowledge sharing and searching professional health care knowledge sharing (two dimensions of professional health care knowledge sharing). Moreover, we explored how such effects differ across different levels of disease stigma. METHODS:We collected the monthly panel data of 19,456 doctors from Good Doctor, one of the largest OHCs in China, from January 2008 to April 2016. A natural experimental empirical study with difference-in-difference analysis was conducted to test our hypotheses. The time fixed effect and the individual fixed effect were both considered to better identify the effects of a privacy protection setting on professional health care knowledge sharing. Additionally, a cross-sectional analysis was performed for a robust check. RESULTS:The results indicate that the privacy protection setting has a significant positive effect on interactive professional health care knowledge sharing (β=.123, P<.001). However, the privacy protection setting has a significant negative effect on searching professional health care knowledge sharing (β=-.225, P=.05). Moreover, we found that high disease stigma positively impacts the effect of privacy protection on interactive professional health care knowledge sharing (coefficients are in the same valence) and negatively impacts the effects of privacy protection on searching professional health care knowledge sharing (coefficients are in the reverse valence). CONCLUSIONS:Privacy protection has a bilateral effect on professional health care knowledge sharing (ie, a positive effect on interactive professional health care knowledge sharing and a negative effect on searching professional health care knowledge sharing). Such bilateral switches of professional health care knowledge sharing call for a balanced state in conjunction with practical implications. This research also identifies a moderate effect of disease stigma on privacy protection settings and professional health care knowledge sharing.
| S-EPMC7273234 | biostudies-literature
Project description:With the development of the Internet of Multimedia Things (IoMT), an increasing amount of image data is collected by various multimedia devices, such as smartphones, cameras, and drones. This massive number of images are widely used in each field of IoMT, which presents substantial challenges for privacy preservation. In this paper, we propose a new image privacy protection framework in an effort to protect the sensitive personal information contained in images collected by IoMT devices. We aim to use deep neural network techniques to identify the privacy-sensitive content in images, and then protect it with the synthetic content generated by generative adversarial networks (GANs) with differential privacy (DP). Our experiment results show that the proposed framework can effectively protect users' privacy while maintaining image utility.
| S-EPMC7795307 | biostudies-literature
Project description:Differential privacy (DP) has been in the public spotlight since the announcement of its use in the 2020 U.S. Census. While DP algorithms have substantially improved the confidentiality protections provided to Census respondents, concerns have been raised about the accuracy of the DP-protected Census data. The extent to which the use of DP distorts the ability to draw inferences that drive policy about small-populations, especially marginalized communities, has been of particular concern to researchers and policy makers. After all, inaccurate information about marginalized populations can often engender policies that exacerbate rather than ameliorate social inequities. Consequently, computer science experts have focused on developing mechanisms that help achieve equitable privacy, i.e., mechanisms that mitigate the data distortions introduced by privacy protections to ensure equitable outcomes and benefits for all groups, particularly marginalized groups. Our paper extends the conversation on equitable privacy by highlighting the importance of inclusive communication in ensuring equitable outcomes for all social groups through all the stages of deploying a differentially private system. We conceptualize Equitable DP as the design, communication, and implementation of DP algorithms that ensure equitable outcomes. Thus, in addition to adopting computer scientists' recommendations of incorporating equity parameters within DP algorithms, we suggest that it is critical for an organization to also facilitate inclusive communication throughout the design, development, and implementation stages of a DP algorithm to ensure it has an equitable impact on social groups and does not hinder the redressal of social inequities. To demonstrate the importance of communication for Equitable DP, we undertake a case study of the process through which DP was adopted as the newest disclosure avoidance system for the 2020 U.S. Census. Drawing on the Inclusive Science Communication (ISC) framework, we examine the extent to which the Census Bureau's communication strategies encouraged engagement across the diverse groups of users that employ the decennial Census data for research and policy making. Our analysis provides lessons that can be used by other government organizations interested in incorporating the Equitable DP approach in their data collection practices.
| S-EPMC11363707 | biostudies-literature
Project description: Not available
| S-EPMC10495082 | biostudies-literature
Project description:Information about individual behaviour is collected regularly by organisations. This information has value to businesses, the government and third parties. It is not clear what value this personal data has to consumers themselves. Much of the modern economy is predicated on people sharing personal data, however if individuals value their privacy, they may choose to withhold this data unless the perceived benefits of sharing outweigh the perceived value of keeping the data private. One technique to assess how much individuals value their privacy is to ask them whether they might be willing to pay for an otherwise free service if paying allowed them to avoid sharing personal data. Our research extends previous work on factors affecting individuals' decisions about whether to share personal data. We take an experimental approach and focus on whether consumers place a positive value on protecting their data by examining their willingness to share personal data in a variety of data sharing environments. Using five evaluation techniques, we systematically investigate whether members of the public value keeping their personal data private. We show that the extent to which participants value protecting their information differs by data type, suggesting there is no simple function to assign a value for individual privacy. The majority of participants displayed remarkable consistency in their rankings of the importance of different types of data through a variety of elicitation procedures, a finding consistent with the existence of stable individual privacy preferences in protecting personal data. We discuss our findings in the context of research on the value of privacy and privacy preferences.
| S-EPMC10156004 | biostudies-literature
Project description:MotivationThe use of genome data for diagnosis and treatment is becoming increasingly common. Researchers need access to as many genomes as possible to interpret the patient genome, to obtain some statistical patterns and to reveal disease-gene relationships. The sensitive information contained in the genome data and the high risk of re-identification increase the privacy and security concerns associated with sharing such data. In this article, we present an approach to identify disease-associated variants and genes while ensuring patient privacy. The proposed method uses secure multi-party computation to find disease-causing mutations under specific inheritance models without sacrificing the privacy of individuals. It discloses only variants or genes obtained as a result of the analysis. Thus, the vast majority of patient data can be kept private.ResultsOur prototype implementation performs analyses on thousands of genomic data in milliseconds, and the runtime scales logarithmically with the number of patients. We present the first inheritance model (recessive, dominant and compound heterozygous) based privacy-preserving analyses of genomic data to find disease-causing mutations. Furthermore, we re-implement the privacy-preserving methods (MAX, SETDIFF and INTERSECTION) proposed in a previous study. Our MAX, SETDIFF and INTERSECTION implementations are 2.5, 1122 and 341 times faster than the corresponding operations of the state-of-the-art protocol, respectively.Availability and implementationhttps://gitlab.com/DIFUTURE/privacy-preserving-genomic-diagnosis.Supplementary informationSupplementary data are available at Bioinformatics online.
| S-EPMC7850099 | biostudies-literature
Project description:Quantum machine learning (QML) can complement the growing trend of using learned models for a myriad of classification tasks, from image recognition to natural speech processing. There exists the potential for a quantum advantage due to the intractability of quantum operations on a classical computer. Many datasets used in machine learning are crowd sourced or contain some private information, but to the best of our knowledge, no current QML models are equipped with privacy-preserving features. This raises concerns as it is paramount that models do not expose sensitive information. Thus, privacy-preserving algorithms need to be implemented with QML. One solution is to make the machine learning algorithm differentially private, meaning the effect of a single data point on the training dataset is minimized. Differentially private machine learning models have been investigated, but differential privacy has not been thoroughly studied in the context of QML. In this study, we develop a hybrid quantum-classical model that is trained to preserve privacy using differentially private optimization algorithm. This marks the first proof-of-principle demonstration of privacy-preserving QML. The experiments demonstrate that differentially private QML can protect user-sensitive information without signficiantly diminishing model accuracy. Although the quantum model is simulated and tested on a classical computer, it demonstrates potential to be efficiently implemented on near-term quantum devices [noisy intermediate-scale quantum (NISQ)]. The approach's success is illustrated via the classification of spatially classed two-dimensional datasets and a binary MNIST classification. This implementation of privacy-preserving QML will ensure confidentiality and accurate learning on NISQ technology.
| S-EPMC9922308 | biostudies-literature