The design of privacy mechanisms for two scenarios is studied where the private data is hidden or observable. In the first scenario, an agent observes useful data $Y$, which is correlated with private data $X$, and wants to disclose the useful information to a user. A privacy mechanism is employed to generate data $U$ that maximizes the revealed information about $Y$ while satisfying a privacy criterion. In the second scenario, the agent has additionally access to the private data. To this end, the Functional Representation Lemma and Strong Functional Representation Lemma are extended relaxing the independence condition and thereby allowing a certain leakage. Lower bounds on privacy-utility trade-off are derived for the second scenario as well as upper bounds for both scenarios. In particular, for the case where no leakage is allowed, our upper and lower bounds improve previous bounds.
翻译:在两种情况中,私人数据隐藏或可观测到,对两种情况隐私机制的设计进行研究。在第一种情况中,代理人观察有用的数据,即美元,这与私人数据有关,并希望向用户披露有用的信息。使用一种隐私机制生成数据,在满足隐私标准的同时,将披露的关于美元的信息最大化。在第二种情况中,代理人还可以获取私人数据。为此,职能代表Lemma和强力职能代表Lemma扩大了范围,放宽了独立性条件,从而允许某种渗漏。第二种情况中,可以得出关于隐私使用权交易的下限,两种情况都有上限。特别是,在不允许渗漏的情况下,我们的上限和下限改进了以前的界限。