Abstract:In this work, fundamental limits and optimal mechanisms of privacy-preserving data release that aims to minimize the privacy leakage under utility constraints of a set of multiple tasks are investigated. While the private feature to be protected is typically determined and known by the sanitizer, the target task is usually unknown. To address the lack of information on the specific task, utility constraints laid on a set of multiple possible tasks are considered. The mechanism protects the specific privacy feature of the to-be-released data while satisfying utility constraints of all possible tasks in the set. First, the single-letter characterization of the rate-leakage-distortion region is derived, where the utility of each task is measured by a distortion function. It turns out that the minimum privacy leakage problem with log-loss distortion constraints and the unconstrained released rate is a non-convex optimization problem. Second, focusing on the case where the raw data consists of multiple independent components, we show that the above non-convex optimization problem can be decomposed into multiple parallel privacy funnel (PF) problems with different weightings. We explicitly derive the optimal solution to each PF problem when the private feature is a component-wise deterministic function of a data vector. The solution is characterized by a leakage-free threshold: when the utility constraint is below the threshold, the minimum leakage is zero; once the required utility level is above the threshold, the privacy leakage increases linearly. Finally, we show that the optimal weighting of each privacy funnel problem can be found by solving a linear program (LP). A sufficient released rate to achieve the minimum leakage is also derived. Numerical results are shown to illustrate the robustness of our approach against the task non-specificity.

Extremal Mechanisms for Pointwise Maximal Leakage

Extremal Mechanisms for Pointwise Maximal Leakage

Pointwise Maximal Leakage on General Alphabets

Rethinking Disclosure Prevention with Pointwise Maximal Leakage

Statistic Maximal Leakage

Maximal Information Leakage based Privacy Preserving Data Disclosure Mechanisms

Unifying Privacy Measures via Maximal $(α,β)$-Leakage (M$α$beL)

Universally Optimal Privacy Mechanisms for Minimax Agents

Maximal $α$-Leakage for Quantum Privacy Mechanisms

Data Disclosure with Non-zero Leakage and Non-invertible Leakage Matrix

The optimal mechanism in differential privacy

Information Density Bounds for Privacy

Maximal Guesswork Leakage

An Operational Approach to Information Leakage via Generalized Gain Functions

A New Approach to Adaptive Data Analysis and Learning via Maximal Leakage

Private measures, random walks, and synthetic data

Robust Privatization with Multiple Tasks and the Optimal Privacy-Utility Tradeoff

Quantifying Privacy via Information Density

The Optimal Upper Bound of the Number of Queries for Laplace Mechanism under Differential Privacy

New Privacy Mechanism Design With Direct Access to the Private Data

Utility Analysis and Enhancement of LDP Mechanisms in High-Dimensional Space