Differential privacy security for benchmarking

A method, comprising:

• receiving a request to determine result data of a calculation using multitenanted data, wherein the multitenanted data comprises tenant data associated with a plurality of tenants;
• determining, using a processor, the result data by performing the calculation on the multitenanted data;
• determining whether a numerical modification of the result data is needed to ensure privacy based at least in part on whether a number of participants in the result data is less than a threshold;
• and
• in response to determining that the numerical modification of the result data is needed to ensure privacy:
• determining a deterministic modification, wherein the deterministic modification is calibrated to the number of participants represented in the result data to obfuscate the result data to a greater degree when the number of participants are present in the result data is less than the threshold;
• numerically modifying the result data comprising multiplying the result data by a deterministic modification function to determine modified result data;
• and
• providing the modified result data, wherein the modified result data comprises data associated with the participants in the result data.

A computer program product, the computer program product being embodied in a non-transitory computer readable storage medium and comprising computer instructions for:

• receiving a request to determine result data of a calculation using multitenanted data, wherein the multitenanted data comprises tenant data associated with a plurality of tenants;
• determining, using a processor, the result data by performing the calculation on the multitenanted data;
• determining whether a numerical modification of the result data is needed to ensure privacy based at least in part on whether a number of participants in the result data is less than a threshold;
• and
• in response to determining that the numerical modification of the result data is needed to ensure privacy:
• determining a deterministic modification, wherein the deterministic modification is calibrated to the number of participants represented in the result data to obfuscate the result data to a greater degree when the number of participants are present in the result data is less than the threshold;
• numerically modifying the result data comprising multiplying the result data by a deterministic modification function to determine modified result data;
• and
• providing the modified result data, wherein the modified result data comprises data associated with the participants in the result data.