Data privacy preservation at digital information age

这项建议的目标是研究和开发隐私保护数据发布(PPDP)的技术，即允许发布数据以利于研究，同时保护个人隐私。我们将研究的问题的基本形式如下。发布者想要将某些特定于个人的数据(例如，医疗数据库)发布给某些(可能未知的)接收者以用于研究目的。这些数据包含对研究至关重要的私人信息。接收者可能“好奇”地试图重新识别与数据记录相对应的个人，可能是在一些先验知识的帮助下。有这种行为的接受者被称为“对手”。为了防止重新识别数据主体，数据必须匿名，这样数据主体就不能很有可能与其记录相关联。关键问题是如何将数据匿名化，以便个人隐私得到尊重，并且匿名化的数据仍然对研究有用。

The goal of this proposal is to investigate and develop techniques for privacy preserving data publishing (PPDP), i.e., allowing publication of data for the benefit of research while preserving individual privacy. The basic form of the problem we will study is as follows. A publisher wants to publish some person-specific data (e.g, a medical database) to some (possibly unknown) recipient for research purposes. The data contains private information that is essential to research. The recipient may be "curious" trying to re-identify the individual corresponding to a data record, possibly with the help of some prior knowledge. The recipient with this behavior is called "adversary". To prevent re-identification of data subjects, data must be anonymized so that data subjects cannot be associated with their records with a high probability. The key question is how to anonymize the data so that individual privacy is respected and the anonymized data remains practically useful to research.