Differential privacy has become crucial in the real-world deployment of statistical and machine learning algorithms with rigorous privacy guarantees. The earliest statistical queries, for which differential privacy mechanisms have been developed, were for the release of the sample mean. In Geometric Statistics, the sample Fr\'echet mean represents one of the most fundamental statistical summaries, as it generalizes the sample mean for data belonging to nonlinear manifolds. In that spirit, the only geometric statistical query for which a differential privacy mechanism has been developed, so far, is for the release of the sample Fr\'echet mean: the \emph{Riemannian Laplace mechanism} was recently proposed to privatize the Fr\'echet mean on complete Riemannian manifolds. In many fields, the manifold of Symmetric Positive Definite (SPD) matrices is used to model data spaces, including in medical imaging where privacy requirements are key. We propose a novel, simple and fast mechanism - the \emph{tangent Gaussian mechanism} - to compute a differentially private Fr\'echet mean on the SPD manifold endowed with the log-Euclidean Riemannian metric. We show that our new mechanism has significantly better utility and is computationally efficient -- as confirmed by extensive experiments.
翻译:在现实世界部署具有严格隐私保障的统计和机器学习算法时,不同的隐私已经变得至关重要。最早的统计查询(已经为此开发了不同的隐私机制)是为了释放样本平均值。在几何统计统计中,Fr\'echet样本代表了最基本的统计摘要之一,因为它概括了属于非线性多元体的数据的样本平均值。本着这一精神,迄今为止,唯一已经开发了差异隐私机制的几何统计查询,是用于释放样本Fr\'echche:最近提议将Fr\'echet平均值私有化到完整里伊曼多方形上。在许多领域,SPD矩阵的多个模型用于模拟数据空间,包括隐私要求至关重要的医疗成像。我们提议了一个新颖、简单和快速的机制—即Fr\echet 样本:在SPD中,Fr\'echchetrechtwechtwemany seqour pressional pressional-Epreviiteite pressional strationsal-viewatal-violtimedal-view strations