Differential privacy security for benchmarking
AssigneeWorkday, Inc.
InventorsDenis Gulsen, Ankit Aggarwal
Life of this patent
Estimating the term…
Abstract
A system for determining a calculation utilizing differential privacy including an interface and a processor. The interface is configured to receive a request to determine a result of a calculation using multitenanted data. The processor is configured to determine result data by performing the calculation on the multitenanted data; determine a deterministic modification in the event that the deterministic modification is needed to ensure privacy; modify the result data using the deterministic modification to determine modified result data; and provide the modified result data.
Claims16
A system for determining a calculation utilizing differential privacy, comprising:
- an interface configured to:
- receive a request to determine result data of a calculation using multitenanted data, wherein the multitenanted data comprises tenant data associated with a plurality of tenants;
- a hardware processor configured to:
- remove identifying information associated with the plurality of tenants from the multitenanted data to obtain deidentified multitenanted data;
- determine the result data by performing the calculation on the deidentified multitenanted data;
- determine whether a deterministic modification is needed to ensure privacy based at least in part on a number of participants in the result data, an always on status associated with the need for the deterministic modification, or an always off status associated with the need for the deterministic modification;
- and
- in response to determining that the deterministic modification is needed to ensure privacy:
- determine the deterministic modification, wherein the deterministic modification comprises a number or a numeric function, wherein the deterministic modification is based at least in part on a number of tenants represented in the result data;
- numerically modify the result data using the deterministic modification to determine modified result data;
- and
- provide the modified result data.
A method for determining a calculation utilizing differential privacy, comprising:
- receiving a request to determine result data of a calculation using multitenanted data, wherein the multitenanted data comprises tenant data associated with a plurality of tenants;
- removing, using a processor, identifying information associated with the plurality of tenants from the multitenanted data to obtain deidentified multitenanted data;
- determining the result data by performing the calculation on the deidentified multitenanted data;
- determining whether a deterministic modification is needed to ensure privacy based at least in part on a number of participants in the result data, an always on status associated with the need for the deterministic modification, or an always off status associated with the need for the deterministic modification;
- and in response to determining that the deterministic modification is needed to ensure privacy:
- determining the deterministic modification, wherein the deterministic modification comprises a number or a numeric function, wherein the deterministic modification is based at least in part on a number of tenants represented in the result data;
- numerically modifying the result data using the deterministic modification to determine modified result data;
- and
- providing the modified result data.
A computer program product for determining a calculation utilizing differential privacy, the computer program product being embodied in a non-transitory computer readable storage medium and comprising computer instructions for:
- receiving a request to determine result data of a calculation using multitenanted data, wherein the multitenanted data comprises tenant data associated with a plurality of tenants;
- removing identifying information associated with the plurality of tenants from the multitenanted data to obtain deidentified multitenanted data;
- determining the result data by performing the calculation on the deidentified multitenanted data;
- determining whether a deterministic modification is needed to ensure privacy based at least in part on a number of participants in the result data, an always on status associated with the need for the deterministic modification, or an always off status associated with the need for the deterministic modification;
- and
- determining a deterministic modification in response to determining that the deterministic modification is needed to ensure privacy:
- determining the deterministic modification, wherein the deterministic modification comprises a number or a numeric function, wherein the deterministic modification is based at least in part on a number of tenants represented in the result data;
- numerically modifying the result data using the deterministic modification to determine modified result data;
- and
- providing the modified result data.
Dependencies are inferred from the claim text.