Differential Privacy Applet Risk Identification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing methods for identifying risky applet content fail to balance the need for effective risk identification with user privacy preservation, often leading to privacy compliance issues due to the backhaul of applet content for analysis.
Innovation Solution
A method and apparatus that utilize differential privacy preserving techniques, specifically the randomized response technique, to identify risky applet content by disturbing program identifiers on the client side and sending disturbed identifiers to the server for analysis, ensuring that user privacy is maintained while allowing for valid access frequency statistics to be collected.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Measurement precision
If applet content is backhauled to serving end for identification, then risk identification accuracy is improved, but user privacy protection deteriorates
Solution Approach 1:
Instead of backhauling original applet content to the serving end for identification, the patent inverts the approach by having the client device locally process and anonymize the content using differential privacy techniques. The serving end receives only anonymized access frequency statistics rather than raw content data, thus achieving risk identification while preserving user privacy.
Solution Approach 2:
The patent introduces differential privacy as an intermediary mechanism between the client device and serving end. This intermediary process adds controlled noise to the data during local processing, enabling the serving end to obtain accurate aggregate statistics without accessing individual user content, thereby resolving the contradiction between identification accuracy and privacy protection.
2Object-affected harmful factors
If user privacy is preserved through local processing, then privacy compliance is improved, but risk identification capability deteriorates
Solution Approach 1:
The patent creates a local copy of the applet content processing on the client device rather than requiring original content transmission. By performing differential privacy processing locally on copied data, the system maintains privacy compliance while still enabling risk identification through anonymized statistics sent to the serving end.
Solution Approach 2:
The patent replaces the mechanical system of content backhauling with a computational approach using differential privacy algorithms. Instead of physically transmitting content data to the serving end, the system uses mathematical transformations to generate anonymized statistics, substituting data transmission with computational processing that preserves privacy while maintaining identification capability.
3Object-affected harmful factors
If differential privacy technique is applied locally, then privacy protection is improved, but data utility for analysis deteriorates
Solution Approach 1:
The patent applies differential privacy parameter changes by adjusting the privacy budget (epsilon) and noise scale parameters to optimize the balance between privacy protection and data utility. By carefully tuning these parameters, the system maintains sufficient data utility for risk identification while achieving the required level of privacy protection.
Solution Approach 2:
The patent implements partial differential privacy processing where only certain aspects of the data are anonymized to the extent necessary for privacy protection while retaining sufficient information for risk identification. This partial action approach avoids excessive anonymization that would completely destroy data utility, achieving an optimal balance between the two competing requirements.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
Implementations of the present specification provide a method and an apparatus for identifying an applet of risky content based on differential privacy preserving. A specific implementation of the method includes: in response to monitoring a target operation performed by a user by using an applet carried by a service platform, obtaining a result of determining whether an operation source is a risky operation source, the operation source including a combination of the user and a device used by the user, and the determining result being determined by using a risk identification policy group; in response to determining that the operation source is a risky operation source, disturbing a program identifier of the applet by using a randomized response technique that satisfies local differential privacy preserving, to obtain a disturbed program identifier; and sending an operation source identifier of the operation source and the disturbed program identifier to a serving end of the service platform, so that the serving end identifies whether the applet is an applet of risky content based on multiple received disturbed program identifiers by using the randomized response technique.