Preventing inference attacks by joining on confidential data value
AssigneeMicrosoft Technology Licensing, LLC
InventorsKrishnaram Kenthapadi, Ahsan Chudhary, Ryan Wade Sandler, Anthony Duane Duerr
Life of this patent
Estimating the term…
Abstract
In an example embodiment, a method for protecting against confidential data-based inference attacks in a computer system is provided. A first confidential data value is received. Then a modification value is selected based on a level of privacy specified for the computer system. Then the first confidential data value is altered by adding the modification value to the first confidential data value.
Claims20
A computerized method for protecting against confidential data-based inference attacks in a computer system, the method comprising:
- receiving a first confidential data value intended for inclusion in a series of confidential data values used to compute a statistical insight;
- selecting a modification value based on a level of privacy specified for the computer system;
- altering the first confidential data value by adding the modification value to the first confidential data values;
- using the altered first confidential data value along with the series of confidential data values to compute the statistical insight by applying a first statistical function to the altered first confidential data value and the series of confidential data values;
- and
- displaying the statistical insight in a graphical user interface operated by a user other than a user who generated the first confidential data value, while maintaining anonymity of the user who generated the first confidential data value through the use of the altered first confidential data value.
A system comprising:
- a non-transitory computer-readable medium having instructions stored there on, which, when executed by a processor, cause the system to:
- receive a first confidential data value intended for inclusion in a series of confidential data values used to compute a statistical insight;
- select a modification value based on a level of privacy specified for the computer system;
- alter the first confidential data value by adding the modification value to the first confidential data value;
- use the altered first confidential data value along with the series of confidential data values to compute the statistical insight by applying a first statistical function to the altered first confidential data value and the series of confidential data values;
- and
- display the statistical insight in a graphical user interface operated by a user other than a user who generated the first confidential data value, while maintaining anonymity of the user who generated the first confidential data value through the use of the altered first confidential data value.
A non-transitory machine-readable storage medium comprising instructions, which when implemented by one or more machines, cause the one or more machines to perform operations comprising:
- receiving a first confidential data value intended for inclusion in a series of confidential data values used to compute a statistical insight;
- selecting a modification value based on a level of privacy specified for the computer system;
- and
- altering the first confidential data value by adding the modification value to the first confidential data values;
- using the altered first confidential data value along with the series of confidential data values to compute the statistical insight by applying a first statistical function to the altered first confidential data value and the series of confidential data values;
- and
- displaying the statistical insight in a graphical user interface operated by a user other than a user who generated the first confidential data value, while maintaining anonymity of the user who generated the first confidential data value through the use of the altered first confidential data value.
Dependencies are inferred from the claim text.