US 11,902,259 B2
Pure differentially private algorithms for summation in the shuffled model
Badih Ghazi, San Jose, CA (US); Noah Zeger Golowich, Lexington, MA (US); Shanmugasundaram Ravikumar, Piedmont, CA (US); Pasin Manurangsi, Mountain View, CA (US); Ameya Avinash Velingker, San Francisco, CA (US); and Rasmus Pagh, Berkeley, CA (US)
Assigned to GOOGLE LLC, Mountain View, CA (US)
Filed by Google LLC, Mountain View, CA (US)
Filed on Dec. 15, 2020, as Appl. No. 17/122,638.
Claims priority of provisional application 62/970,379, filed on Feb. 5, 2020.
Prior Publication US 2021/0243171 A1, Aug. 5, 2021
Int. Cl. H04L 29/06 (2006.01); H04L 9/40 (2022.01); G06N 5/04 (2023.01); G06N 20/00 (2019.01); H04L 9/06 (2006.01); H04L 9/08 (2006.01)
CPC H04L 63/0428 (2013.01) [G06N 5/04 (2013.01); G06N 20/00 (2019.01)] 18 Claims
OG exemplary drawing
 
1. A computer-implemented method for privacy-preserving aggregation of private data, the method comprising:
obtaining, by one or more computing devices, private data comprising a private value;
determining, by the one or more computing devices, a probabilistic status defining one of a first condition and a second condition;
producing, by the one or more computing devices, a multiset comprising a plurality of multiset values, wherein:
in response to the probabilistic status having the first condition, the plurality of multiset values is based at least in part on the private value; and
in response to the probabilistic status having the second condition, the plurality of multiset values comprises a noise message;
wherein the noise message is produced based at least in part on a noise distribution that comprises a discretization of a continuous unimodal distribution supported on a range from zero to a number of multiset values included in the plurality of multiset values;
wherein the noise message comprises a plurality of one values and a plurality of zero values;
wherein an amount of the plurality of one values is equivalent to a randomizer value sampled from the noise distribution and an amount of the plurality of zero values is equivalent to the randomizer value subtracted from the number of multiset values included in the plurality of multiset values; and
providing, by the one or more computing devices, the multiset for aggregation with a plurality of additional multisets respectively generated for a plurality of additional private values.