Differential Privacy Via a Truncated and Normalized Laplace Mechanism
This work addresses privacy and utility issues in sensitive data querying, offering a solution for scenarios where responses must stay within predefined bounds, though it is incremental as it builds upon existing Laplace mechanisms.
The paper tackles the problem of ensuring differential privacy for database queries while adhering to valid response ranges, proposing a method that preserves privacy by determining an appropriate scaling parameter for a truncated and normalized Laplace mechanism, with derivations of optimal parameters for different range constraints.
When querying databases containing sensitive information, the privacy of individuals stored in the database has to be guaranteed. Such guarantees are provided by differentially private mechanisms which add controlled noise to the query responses. However, most such mechanisms do not take into consideration the valid range of the query being posed. Thus, noisy responses that fall outside of this range may potentially be produced. To rectify this and therefore improve the utility of the mechanism, the commonly used Laplace distribution can be truncated to the valid range of the query and then normalized. However, such a data-dependent operation of normalization leaks additional information about the true query response thereby violating the differential privacy guarantee. Here, we propose a new method which preserves the differential privacy guarantee through a careful determination of an appropriate scaling parameter for the Laplace distribution. We also generalize the privacy guarantee in the context of the Laplace distribution to account for data-dependent normalization factors and study this guarantee for different classes of range constraint configurations. We provide derivations of the optimal scaling parameter (i.e., the minimal value that preserves differential privacy) for each class or provide an approximation thereof. As a consequence of this work, one can use the Laplace distribution to answer queries in a range-adherent and differentially private manner.