A private information retrieval (PIR) protocol guarantees that a user can privately retrieve files stored in a database without revealing any information about the identity of the requested file. Existing information-theoretic PIR protocols ensure perfect privacy, i.e., zero information leakage to the servers storing the database, but at the cost of high download. In this work, we present weakly-private information retrieval (WPIR) schemes that trade off perfect privacy to improve the download cost when the database is stored on a single server. We study the tradeoff between the download cost and information leakage in terms of mutual information (MI) and maximal leakage (MaxL) privacy metrics. By relating the WPIR problem to rate-distortion theory, the download-leakage function, which is defined as the minimum required download cost of all single-server WPIR schemes for a given level of information leakage and a fixed file size, is introduced. By characterizing the download-leakage function for the MI and MaxL metrics, the capacity of single-server WPIR is fully described.
翻译:私人信息检索协议(PIR)保证用户可以私下检索存储在数据库中的文件,而不透露关于所请求文件身份的任何信息。现有的信息理论PIR协议确保完全的隐私,即向存储数据库的服务器泄漏零信息,但费用高昂。在这项工作中,我们介绍了一些薄弱的私人信息检索计划,在数据库存储在单一服务器上时,这种计划可以交换完全的隐私,以提高下载费用;我们研究了从相互信息(MI)和最大渗漏(MaxL)隐私度量值来看,下载费用和信息渗漏之间的权衡。通过将WPIR问题与标准扭曲理论联系起来,将下载-泄漏功能定义为所有单一服务器WPIR计划对特定信息渗漏程度和固定文件大小的最低下载费用。通过描述MI和MaxL指标的下载-渗漏功能,充分说明了单服务器WPIR的能力。