We consider the problem of computing differentially private approximate histograms and heavy hitters in a stream of elements. In the non-private setting, this is often done using the sketch of Misra and Gries [Science of Computer Programming, 1982]. Chan, Li, Shi, and Xu [PETS 2012] describe a differentially private version of the Misra-Gries sketch, but the amount of noise it adds can be large and scales linearly with the size of the sketch: the more accurate the sketch is, the more noise this approach has to add. We present a better mechanism for releasing Misra-Gries sketch under $(\varepsilon,\delta)$-differential privacy. It adds noise with magnitude independent of the size of the sketch size, in fact, the maximum error coming from the noise is the same as the best known in the private non-streaming setting, up to a constant factor. Our mechanism is simple and likely to be practical. We also give a simple post-processing step of the Misra-Gries sketch that does not increase the worst-case error guarantee. It is sufficient to add noise to this new sketch with less than twice the magnitude of the non-streaming setting. This improves on the previous result for $\varepsilon$-differential privacy where the noise scales linearly to the size of the sketch.
翻译:我们考虑了在元素流中以不同的私人近似直方图和重击仪计算差异性近似直方图和重击器的问题。 在非私人环境下,通常使用Misra和Gries[计算机编程科学,1982年]的草图来完成这项工作。Chan、Li、Shi和Xu[PETS,2012年]描述了Misra-Gries草图的不同私人版本,但随着草图的大小,它增加的噪音数量可能很大,线性大小可能很大:草图越准确,这种草图必须增加的噪音越多。我们提出了一个更好的机制,用美元(carreepsilon,\delta)和美元差异性隐私来释放Misra-Gries草图。它增加了与草图大小无关的噪音。事实上,噪音的最大误差与私人非流环境所知道的相同,直到一个不变的因素。我们的机制简单,而且可能更加实际。我们给Misra-Gries草图的后处理步骤提供一个简单的步骤,不会增加最坏的错误保证。这足以使新的草图的草图在不比线级上增加两次的噪音。这足以使新的螺流的精确度增加。