Differentially private processing and database storage

Abstract

A hardware database privacy device is communicatively coupled to a private database system. The hardware database privacy device receives a request from a client device to perform a query of the private database system and identifies a level of differential privacy corresponding to the request. The identified level of differential privacy includes privacy parameters (ε,δ) indicating the degree of information released about the private database system. The hardware database privacy device identifies a set of operations to be performed on the set of data that corresponds to the requested query. After the set of data is accessed, the set of operations is modified based on the identified level of differential privacy such that a performance of the modified set of operations produces a result set that is (ε,δ)-differentially private.

Description

BACKGROUND[0001]Field of Disclosure[0002]The present invention generally relates to a database system, and more specifically to responding to a database query by executing a differentially private version of the query on the database.[0003]Description of the Related Art[0004]Personally identifiable information, such as health data, financial records, telecom data, and confidential business intelligence, such as proprietary data or data restricted by contractual obligations, is valuable for analysis and collaboration. Yet, only a fraction of such sensitive information is used by organizations or analysts for statistical or predictive analysis. Privacy regulations, security concerns, and technological challenges suppress the full value of data, especially personally identifiable information and confidential and proprietary records.[0005]Methods that attempt to solve this problem, such as access controls, data masking, hashing, anonymization, aggregation, and tokenization, are invasive...

AI Technical Summary

Benefits of technology

The patent describes a device that can privately query a database while still protecting the information within it. The device identifies the level of information that needs to be released and modifies the data and operations to achieve this. The result is a differentially private result set that can be displayed on a client device. The purpose of the device is to provide secure and accurate results while still maintaining the privacy of the database.

Problems solved by technology

Yet, only a fraction of such sensitive information is used by organizations or analysts for statistical or predictive analysis.

Privacy regulations, security concerns, and technological challenges suppress the full value of data, especially personally identifiable information and confidential and proprietary records.

Methods that attempt to solve this problem, such as access controls, data masking, hashing, anonymization, aggregation, and tokenization, are invasive and resource intensive, compromise analytical utility, or do not ensure privacy of the records.

For example, data masking may remove or distort data, compromising the statistical properties of the data.

As another example, many of the above mentioned methods are not effective when information is stored in disparate data sources.

Images