DPOD: differentially private outsourcing of anomaly detection

Patent metadata

Field	Value
Publication number	US-12399985-B2
Application number	US-202118005761-A
Country	US
Kind code	B2
Filing date	Jul 16, 2021
Priority date	Jul 17, 2020
Publication date	Aug 26, 2025
Grant date	Aug 26, 2025

Abstract

A method, system and apparatus are disclosed. According to one or more embodiments, a data node is provided. The data node includes processing circuitry configured to: receive an anomaly estimation for a first privatized dataset, the first private dataset being based on a dataset and a first noise profile, apply a second noise profile to the dataset to generate a second privatized dataset, the second noise profile being based at least on the anomaly estimation, and optionally cause transmission of the second privatized dataset for anomaly estimation.

First claim

What is claimed is:

1. A data node configured to communicate with a data analyzer node and a plurality of data owners, the data node comprising processing circuitry configured to:
receive from each data owner of the plurality of data owners, a dataset having a respective privacy requirement and a sensitivity;
apply to each dataset a respective one of a plurality of first noise profiles, each first noise profile configured to add noise to a respective dataset according to the respective privacy requirements of the dataset to provide a plurality of first privatized datasets;
release the plurality of first privatized data sets to the data analyzer node;
receive from the data analyzer node an anomaly estimation for each first privatized dataset, the anomaly estimation being indicative of outlier data in a respective first privatized dataset;
update the respective sensitivity for each first privatized dataset based at least in part on the anomaly estimations;
apply a second noise profile configured to reduce noise of outlier data of each first privatized dataset to generate respective second privatized datasets, the second noise profile being selected based at least in part on the respective updated sensitivity.

2. The data node of claim 1 , wherein the processing circuitry is further configured to determine an updated sensitivity value for the dataset based at least on the anomaly estimation and a privacy budget.

3. The data node of claim 1 , wherein a received dataset includes outlier data and non-outlier data, the second noise profile being configured to reduce noise applied to outlier data when compared to a noise applied to outlier data by the first noise profile.

4. The data node of claim 1 , wherein a received dataset includes outlier data and non-outlier data, the second noise profile being configured to increase noise applied to non-outlier data when compared to noise applied to the non-outlier data by the first noise profile.

5. The data node of claim 1 , where the processing circuitry is further configured to apply the first noise profile to outlier data in a received dataset; and
applying the second noise profile to a first privatized dataset to generate the second privatized dataset includes applying the second noise profile to non-outlier data in the dataset.

6. The data node of claim 1 , wherein the anomaly estimation indicates an anomaly score for a respective privatized dataset.

7. The data node of claim 1 , wherein the processing circuitry is further configured to receive a sensitivity estimation that is based on the first privatized dataset, the sensitivity estimation indicating whether to modify the first noise profile, the second noise profile being further based at least on the sensitivity estimation.

8. The data node of claim 7 , wherein the sensitivity estimation indicates to reduce privacy for outlier data of the dataset while at least maintaining privacy for non-outlier data of the dataset.

9. The data node of claim 1 , wherein a first noise profile provides a first data sensitivity value for a first privatized dataset; and
the second noise profile provides a second data sensitivity value for the second privatized dataset, the second data sensitivity value being different from the first data sensitivity value.

10. The data node of claim 1 , wherein respective noise profiles of the plurality of first noise profiles each correspond to a respective differential privacy mechanism configured to quantify a privacy level provided to data of the respective received dataset.

11. The data node of claim 1 , wherein a first privatized dataset is a first privatized histogram of the respective received dataset and the second privatized dataset is a second privatized histogram of the first privatized dataset.

12. A data analyst node configured to communicate with a data node, the data analyst node comprising processing circuitry configured to:
receive from the data node a plurality of first privatized data sets, each first privatized data set being based on application of a respective first noise profile of a plurality of noise profiles configured to add noise to a respective dataset received by the data node from a different data owner of a plurality of data owners, each received respective dataset having a respective privacy requirement and a sensitivity;
determine an anomaly estimation for each first privatized dataset, the anomaly estimation being indicative of outlier data in a respective first privatized dataset;
transmit to the data node the anomaly estimation for a first privatized dataset;
receive a second privatized dataset, the second privatized dataset being based on application of a second noise profile configured to reduce noise of outlier data of a first privatized dataset based at least in part on an updated sensitivity for the first privatized database, the second noise profile being based at least on the anomaly estimation; and
perform anomaly estimation for the second privatized dataset.

13. The data analyst node of claim 12 , wherein a received first privatized dataset includes outlier data and non-outlier data, the second noise profile being configured to reduce noise applied to outlier data when compared to a noise applied to outlier data by the first noise profile.

14. The data analyst node of claim 12 , wherein a received first privatized dataset includes outlier data and non-outlier data, the second noise profile being configured to increase noise applied to non-outlier data when compared to noise applied to the non-outlier data by the first noise profile.

15. The data analyst node of claim 12 , wherein the anomaly estimation indicates an anomaly score for a respective privatized dataset.

16. The data analyst node of claim 12 , wherein a respective first noise profile provides a first data sensitivity value for a respective first privatized dataset; and
the second noise profile provides a second data sensitivity value for the second privatized dataset, the second data sensitivity value being different from the first data sensitivity value.

17. The data analyst node of claim 12 , wherein the processing circuitry is further configured to determine a sensitivity estimation that is based on a first privatized dataset, the sensitivity estimation indicating whether to modify the respective first noise profile, the second noise profile being further based at least on the sensitivity estimation.

18. The data analyst node of claim 12 , wherein the sensitivity estimation indicates to reduce privacy for outlier data of the dataset while at least maintaining privacy for non-outlier data of the dataset.

19. The data analyst node of claim 12 , wherein the processing circuitry is further configured to cause transmission of the anomaly estimation for the second privatized dataset.

20. The data analyst node of claim 12 , wherein a first privatized dataset is a first privatized histogram of the first privatized dataset and the second privatized dataset is a second privatized histogram of the dataset.

21. A method implemented by a data node configured to communicate with a data analyzer node and a plurality of data owners, the method comprising:
receiving from each data owner of the plurality of data owners, a dataset having a respective privacy requirement and a sensitivity;
applying to each dataset a respective one of a plurality of first noise profiles, each first noise profile configured to add noise to a respective dataset according to the respective privacy requirements o

Assignees

• Ericsson Telefon Ab L M

Inventors

• Mohammady Meisam
• Zhang Mengyuan
• Jarraya Yosr
• Pourzandi Makan
• Wang Han
• Hong Yuan
• Wang Lingyu
• Majumdar Suryadipta
• Debbabi Mourad

Classifications

• G06F2221/033

  Test or assess software · CPC title

• G06F21/6245

  Protecting personal data, e.g. for financial or medical purposes · CPC title

• H04W12/02

  Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII] · CPC title

• G06F21/554 Primary

  involving event detection and direct action · CPC title

• G06F21/6254 Primary

  by anonymising data, e.g. decorrelating personal data from the owner's identification · CPC title