Recent work in differential privacy has highlighted the shuffled model as a promising avenue to compute accurate statistics while keeping raw data in users' hands. We present a protocol in this model that estimates histograms with error independent of the domain size. This implies an arbitrarily large gap in sample complexity between the shuffled and local models. On the other hand, we show that the models are equivalent when we impose the constraints of pure differential privacy and single-message randomizers.
@InProceedings{balcer_et_al:LIPIcs.ITC.2020.1, author = {Balcer, Victor and Cheu, Albert}, title = {{Separating Local \& Shuffled Differential Privacy via Histograms}}, booktitle = {1st Conference on Information-Theoretic Cryptography (ITC 2020)}, pages = {1:1--1:14}, series = {Leibniz International Proceedings in Informatics (LIPIcs)}, ISBN = {978-3-95977-151-1}, ISSN = {1868-8969}, year = {2020}, volume = {163}, editor = {Tauman Kalai, Yael and Smith, Adam D. and Wichs, Daniel}, publisher = {Schloss Dagstuhl -- Leibniz-Zentrum f{\"u}r Informatik}, address = {Dagstuhl, Germany}, URL = {https://drops.dagstuhl.de/entities/document/10.4230/LIPIcs.ITC.2020.1}, URN = {urn:nbn:de:0030-drops-121068}, doi = {10.4230/LIPIcs.ITC.2020.1}, annote = {Keywords: Differential Privacy, Distributed Protocols, Histograms} }
Feedback for Dagstuhl Publishing