383mm
`
`be»
`
`5996m28“m2
`
`wowE95
`
`
`
`>ow>:n_383mmbmson_n_
`
`
`E9965659,:@96ch3:8me
`
`03mm“86cm.N:
`
`mm“
`
`OE
`
`h.QE
`
`
`
`
`
`>530EmEmmmcmE@92389:925w:>530
`
`NE
`
`
`
`moEsooo<_mo:>_mc<
`
`
`
`E995b_50mm99:1>__m:c9mt_n_
`
`
`
`
`
`
`
`
`
`
`CDO‘I .-n _-_
`
`00\1
`
`CD\l
`_-_
`
`00A
`_-_
`_-_
`
`__
`
`Feature 2
`
`(residence)
`
`Feature 10 Feature 11
`
`(age)
`
`(Disease)
`
`
`
`Italy
`
`England
`France
`
`USA
`
`China
`
`France
`
`Korea
`
`USA
`
`200
`
`FIG. 2
`
`
`
`E995>om>cm
`
`Eovcmm
`
`
`
`mcacm.$90;
`
`Em
`
`cozmu=m>
`
`86cm.
`
`wmm
`
`0:350on
`
`E2090
`
`mcacm.
`
`Em
`
`25596
`
`38ng
`
`86cm.
`
`mmm
`
`mocmcm>
`
`86cm.
`
`mom
`
`
`
`86cm.cmm_>_
`
`mom
`
`om“
`
`
`
`E300
`
`$622
`
`mcacm.
`
`gm
`
`cofim
`
`E2090
`
`mcacm.
`
`Nrm
`
`86cm.
`
`mom
`
`856m9
`
`Em
`
`
`
`9:me_m_8_>_
`
`E9092:
`
`86cm.
`
`omm
`
`mcacm.
`
`m5
`
`m.QE
`
`
`
`r938;r938;
`
`n_n_ N938;N938;
`
`co_HmN__m:w_>
`
`V.mEl
`
`8%o;
`
`
`
`
`
`HHmx
`
`com
`
`923??
`
`
`
`
`
`
`
`QOHESE.modugea.WEOE.voquE
`
`
`
`SHEEQwwouEEQ.OHEEQ.m.ou3_:o_
`
`
`
`
`
`ororES
`
`99:sz
`
`
`
`WED09m9v9m9NDFDWED09m9v9m9NDFD
`
`o.QE
`
`IIII.‘I
`
`no
`
`89005:
`
`Newcom
`
`woo
`
`
`
`55:3:55:3:
`
`
`
`
`output p
`
`700
`
`Actual
`
`Category
`
`FIG. 7A
`
`Estimate Category
`
`False
`
`Negative
`
`True Negative
`
`True Positive
`
`False Positive
`
`FIG. 73
`
`
`
`Analytical
`Query
`
`
`Differentially
`108
`
`
` Database
`
`
`Client
`Private Security -- System
`104
`
`
`
`
`
`102
`
`
`
`DP
`
`106
`
`
`
`Response
`112
`
`Synthetic
`Database
`
`806
`
`800
`
`FIG. 8
`
`
`
`r938;
`
`Egoupwcmc.ea.5 o=m£§mRR ..................
`
`
`
`
`
`
`m33389.85:?58.3038
`
`RN938;
`
`m.QE
`
`r938;
`
`
`
`
`Receive Request from Client Device to Perform
`Query and Identify Level of Differential Privacy
`Corresponding to Request
`1010
`
`Identify Set of Data and Set of Operations to be
`Performed Based on Received Request
`1012
`
`
`
`Perform Modified Set of Operations on Set of
`Data to Produce Differentially Private Result Set
`1018
`
`Access Set of Data in Private Database System
`1014
`
`Modify Set of Operations Based on Level of
`Differential Privacy
`1016
`
`Provide Differentially Private Result Set to Client
`Device for Display
`1020
`
`FIG. 10
`
`
`
`1100
`
`GRAPH/CS
`DISPLA Y
`
`ALPHA-N UMERI C
`INPUT DEV/CE
`
`CURSOR
`
`CONTROL
`DEVICE
`
`
`
`MA CHINE-
`
`READABLE
`MEDIUM
`
`INSTRUCTIONS
`
`SIGNAL
`
`GENERATION
`DE VICE
`
`7770
`
`7772
`
`1114
`
`1116
`
`1122
`
`1124
`
`1118
`
`1102
`
`112
`
`PROCESSOR
`
`INSTRUCTIONS
`
`1104
`
`1124
`
`INSTRUCTIONS
`
`1106
`
`STATIC
`
`MEMORY
`
`BUS
`
`1108
`
`NETWORK
`
`DE VICE
`
`IN TERFA CE
`
`1120
`
`1126
`
`FIG. 11
`
`
`
`NLQUCNU
`
`wm>IIwm>IIwm>ozwm>oz
`02II02II28ch
`
`mm“GE<3.GE
`
`
`
`
`
`00”A0m<mOONrxCam—>—GO”A0m<
`
`
`
`<OON_\x_.:m_>_
`
`
`
`.93me$98Eoccmm
`
` |oo$
`
`
`
`|m€._.co_w_omn_
`
`Oowmw
`
`
`
`
`
`|mm:.co_w_omn_
`
`mowmw
`
`
`
`
`
`mmc.co_w_omn_
`
`<owmw
`
`
`
`E
`.0
`
`.0—
`
`O
`
`.0
`
`0')
`.0
`
`00
`.Q
`
`5on3
`
`V
`.0
`
`(‘0
`.0
`
`N
`.0
`
`.0—
`
`Omwmw:swmm
`
`.....m
`
`E/\/
`
`mmwmw:swmm
`
`<mwmw::wmm
`
`m“.QE
`
`
`
`
`
`
`Recursion 1425A
`
`Information
`
`Gain from split
`
`Utility gain
`threshold
`
`1405
`
`
`
`
`— _ _ _ _
`
`solit Si
`
`solit $2
`
`solit S;
`
`Split 1410
`
`Recursion
`
`1425A
`
`
`
`
`solit S1
`‘
`
`Tree 1420A
`
`FIG. 14B
`
`
`
`Receive query request
`1505
`
` For each
`
`Determine model parameters
`1510
`
`decision tree
`
`Generate a set of splits based on the training
`data
`
`1515
`
`Determine an information gain for each
`generated split
`1520
`
`Select split from among the set of splits using an
`exponential mechanism based on information
`gain
`fl
`
`
`
`Add the selected split to node of the decision
`tree
`
`1530
`
`Provide the differentially private random forest
`classifier to client
`
`1535
`
`FIG. 15
`
`
