面向优选应答的k-匿名模型

Wong Kok-Seng; Kim Ho

doi:10.1631/FITEE.1400395

Your Location：

Home >

Browse articles >

面向优选应答的k-匿名模型

计算机与自动化 | Updated：2022-06-06

- 面向优选应答的k-匿名模型
- Towards a respondent-preferred k_i-anonymity model*
- 信息与电子工程前沿（英文） 2015年16卷第9期页码：720-731
- Affiliations：
  
  1.School of Computer Science and Engineering, Soongsil University, Seoul 06978, Korea
  2.School of Software, Soongsil University, Seoul 06978, Korea
- Author bio：
  
  ‡Corresponding Author
- Funds：
  
  *Project supported by the Basic Research Program through the National Research Foundation of Korea (NRF) funded by the Ministry of Education (No. NRF-2014R1A1A2058695)
- DOI：10.1631/FITEE.1400395
  中图分类号：
- 收稿：2014-11-16，
  
  修回：2015-08-06，
  
  录用：2015-06-06，
  
  纸质出版：2015-09
- Accepted：
Scan QR Code
面向优选应答的k-匿名模型[J]. 信息与电子工程前沿（英文）, 2015,16(9):720-731.

Wong Kok-Seng, Kim Ho. Towards a respondent-preferred k_i-anonymity model*[J]. Frontiers of Information Technology & Electronic Engineering, 2015, 16(9): 720-731.
面向优选应答的k-匿名模型[J]. 信息与电子工程前沿（英文）, 2015,16(9):720-731. DOI： 10.1631/FITEE.1400395.

Wong Kok-Seng, Kim Ho. Towards a respondent-preferred k_i-anonymity model*[J]. Frontiers of Information Technology & Electronic Engineering, 2015, 16(9): 720-731. DOI： 10.1631/FITEE.1400395.

摘要

目的

数据采集的隐私保护问题近年来受到广泛关注。传统的数据采集过程中，采集机构假设在匿名发布数据的前提下，所有应答者对于提交各自数据的过程均是满意的。本文作者认为这一假设并不实际，因日益增长的隐私保护需求导致部分应答者拒绝或提交不准确的数据，从而将导致由这些数据得到的分析结果不可靠。因此，本文引入

-匿名模型，由应答者选择自己偏好的匿名水平。

创新点

本文所提算法其背后主要思想是允许每个应答者学习自身记录的事件数目，即仅需获取自身约束条件的满意度得分。

方法

首先，生成唯一身份标识和约束条件。接着，检查约束条件的满意度情况。然后，计算满意度得分。最后，更新约束条件的满意度表格（图1）。

结论

引入

-匿名模型的概念，允许应答者在提交数据前能够选择自己偏好的匿名保护水平。所提算法确保应答者在数据采集过程中实现其偏好的匿名保护水平，且所采集的数据真实并有效用于数据分析。

Abstract

Recently

privacy concerns about data collection have received an increasing amount of attention. In data collection process

a data collector (an agency) assumed that all respondents would be comfortable with submitting their data if the published data was anonymous. We believe that this assumption is not realistic because the increase in privacy concerns causes some respondents to refuse participation or to submit inaccurate data to such agencies. If respondents submit inaccurate data

then the usefulness of the results from analysis of the collected data cannot be guaranteed. Furthermore

we note that the level of anonymity (i.e.

-anonymity) guaranteed by an agency cannot be verified by respondents since they generally do not have access to all of the data that is released. Therefore

we introduce the notion of

-anonymity

where

is the level of anonymity preferred by each respondent

. Instead of placing full trust in an agency

our solution increases respondent confidence by allowing each to decide the preferred level of protection. As such

our protocol ensures that respondents achieve their preferred

-anonymity during data collection and guarantees that the collected records are genuine and useful for data analysis.

关键词

Keywords

references

R Agrawal , R Srikant . Privacy-preserving data mining . 2000 . Proc. ACM SIGMOD Int. Conf. on Management of Data . 439 - 450 . DOI: 10.1145/342009.335438 http://doi.org/10.1145/342009.335438 .

G Bella , S Bistarelli , F Massacci . Retaliation: can we live with flaws? . NATO Sec Sci Ser D , 2005 . 6 3 - 14 . .

G Bella , R Giustolisi , S Riccobene . Enforcing privacy in e-commerce by balancing anonymity and trust . Comput Secur , 2011 . 30 ( 8 ): 705 - 718 . DOI: 10.1016/j.cose.2011.08.005 http://doi.org/10.1016/j.cose.2011.08.005 .

DL Chaum . Untraceable electronic mail, return addresses, and digital pseudonyms . Commun ACM , 1981 . 24 ( 2 ): 84 - 90 . DOI: 10.1145/358549.358563 http://doi.org/10.1145/358549.358563 .

C Clifton , T Tassa . On syntactic anonymity and differential privacy . 2013 . Proc. IEEE 29th Int. Conf. on Data Engineering Workshops . 88 - 93 . DOI: 10.1109/ICDEW.2013.6547433 http://doi.org/10.1109/ICDEW.2013.6547433 .

CC Diamond , F Mostashari , C Shirky . Collecting and sharing data for population health: a new paradigm . Health Aff , 2009 . 28 ( 2 ): 454 - 466 . DOI: 10.1377/hlthaff.28.2.454 http://doi.org/10.1377/hlthaff.28.2.454 .

R Dingledine , N Mathewson , P Syverson . Tor: the second-generation onion router . 2004 . Proc. 13th Conf. on USENIX Security Symp . 21 .

J Domingo-Ferrer . Coprivacy: towards a theory of sustainable privacy . 2010 . Proc. Int. Conf. on Privacy in Statistical Databases . 258 - 268 . DOI: 10.1007/978-3-642-15838-4_23 http://doi.org/10.1007/978-3-642-15838-4_23 .

J Domingo-Ferrer . Coprivacy: an introduction to the theory and applications of co-operative privacy . Stat Oper Res Trans, Special issue , 2011 . 25 - 40 . .

J Domingo-Ferrer , J Soria-Comas , O Ciobotaru . Co-utility: self-enforcing protocols without coordination mechanisms . 2015 . Proc. Int. Conf. on Industrial Engineering and Operations Management, arXiv:1503.02563 . .

W Du , Z Zhan . Using randomized response techniques for privacy-preserving data mining . 2003 . Proc. 9th ACM SIGKDD Int. Conf. on Knowledge Discovery and Data Mining . 505 - 510 . DOI: 10.1145/956750.956810 http://doi.org/10.1145/956750.956810 .

C Dwork . Differential privacy: a survey of results . 2008 . Proc. 5th Int. Conf. on Theory and Applications of Models of Computation . 1 - 19 . DOI: 10.1007/978-3-540-79228-4_1 http://doi.org/10.1007/978-3-540-79228-4_1 .

M Edman , B Yener . On anonymity in an electronic society: a survey of anonymous communication systems . ACM Comput Surv, 42 (1), Article 5 , 2009 . DOI: 10.1145/1592451.1592456 http://doi.org/10.1145/1592451.1592456 .

A Evfimievski , R Srikant , R Agrawal , 等 . Privacy preserving mining of association rules . 2002 . Proc. 8th ACM SIGKDD Int. Conf. on Knowledge Discovery and Data Mining . 217 - 228 . .

H Kargupta , S Datta , Q Wang , 等 . On the privacy preserving properties of random data perturbation techniques . 2003 . Proc. 3rd IEEE Int. Conf. on Data Mining . 99 - 106 . DOI: 10.1109/ICDM.2003.1250908 http://doi.org/10.1109/ICDM.2003.1250908 .

R Kumar , R Gopal , R Garfinkel . Freedom of privacy: anonymous data collection with respondent-defined privacy protection . INFORMS J Comput , 2010 . 22 ( 3 ): 471 - 481 . DOI: 10.1287/ijoc.1090.0364 http://doi.org/10.1287/ijoc.1090.0364 .

B Li , E Erdin , MH Güneş , 等 . An analysis of anonymity technology usage . 2011 . Proc. 3rd Int. Conf. on Traffic Monitoring and Analysis . 108 - 121 . .

N Li , T Li , S Venkatasubramanian . T -closeness: privacy beyond k -anonymity and l -diversity . 2007 . Proc. 23rd Int. Conf. on Data Engineering . 106 - 115 . DOI: 10.1109/ICDE.2007.367856 http://doi.org/10.1109/ICDE.2007.367856 .

A Machanavajjhala , D Kifer , J Gehrke , 等 . L -diversity: privacy beyond k -anonymity . ACM Trans Knowl Discov Data, 1 (1), Article 3 , 2007 . DOI: 10.1145/1217299.1217302 http://doi.org/10.1145/1217299.1217302 .

P Paillier . Public-key cryptosystems based on composite degree residuosity classes . 1999 . Proc. 17th Int. Conf. on Theory and Application of Cryptographic Techniques . 223 - 238 . DOI: 10.1007/3-540-48910-X_16 http://doi.org/10.1007/3-540-48910-X_16 .

P Samarati . Protecting respondents identities in microdata release . IEEE Trans Knowl Data Eng , 2001 . 13 ( 6 ): 188 - 200 . DOI: 10.1109/69.971193 http://doi.org/10.1109/69.971193 .

L Sweeney . Weaving technology and policy together to maintain confidentiality . J Law Med Ethics , 1997 . 25 ( 2-3 ): 98 - 110 . DOI: 10.1111/j.1748-720X.1997.tb01885.x http://doi.org/10.1111/j.1748-720X.1997.tb01885.x .

L Sweeney . k -anonymity: a model for protecting privacy . Int J Uncertain Fuzz Knowl-Based Syst , 2002 . 10 ( 5 ): 557 - 570 . DOI: 10.1142/S0218488502001648 http://doi.org/10.1142/S0218488502001648 .

SL Warner . Randomized response: a survey technique for eliminating evasive answer bias . J Am Stat Assoc , 1965 . 60 ( 309 ): 63 - 69 . DOI: 10.1080/01621459.1965.10480775 http://doi.org/10.1080/01621459.1965.10480775 .

KS Wong , MH Kim . JJ Park , A Zomaya , HY Jeong , 等 . Privacy-preserving data collection with self-awareness protection . Frontier and Innovation in Future Computing and Communications , 2014 . Springer, Netherlands , 365 - 371 . DOI: 10.1007/978-94-017-8798-7_44 http://doi.org/10.1007/978-94-017-8798-7_44 .

KS Wong , MH Kim . Towards self-awareness privacy protection for Internet of things data collection . J Appl Math , 2014 . 2014 827959.1 - 8279599 . DOI: 10.1155/2014/827959 http://doi.org/10.1155/2014/827959 .

RCW Wong , J Li , AWC Fu , 等 . ( α , k )-anonymity: an enhanced k -anonymity model for privacy preserving data publishing . 2006 . Proc. 12th ACM SIGKDD Int. Conf. on Knowledge Discovery and Data Mining . 754 - 759 . DOI: 10.1145/1150402.1150499 http://doi.org/10.1145/1150402.1150499 .

RCW Wong , AWC Fu , K Wang , 等 . Minimality attack in privacy preserving data publishing . 2007 . Proc. 33rd Int. Conf. on Very Large Data Bases . 543 - 554 . .

RCW Wong , Y Liu , J Yin , 等 . ( α , k )-anonymity based privacy preservation by lossy join . 2007 . Proc. Joint 9th Asia-Pacific Web Conf. on Advances in Data and Web Management and 8th Int. Conf. on Web-Age Information Management . 733 - 744 . DOI: 10.1007/978-3-540-72524-4_75 http://doi.org/10.1007/978-3-540-72524-4_75 .

N Zhang , S Wang , W Zhao . A new scheme on privacy-preserving data classification . 2005 . Proc. 11th ACM SIGKDD Int. Conf. on Knowledge Discovery in Data Mining . 374 - 383 . DOI: 10.1145/1081870.1081913 http://doi.org/10.1145/1081870.1081913 .

浏览量

Downloads

CSCD

文章被引用时，请邮件提醒。

Submit

工具集

关联资源

暂无数据