Search papers, labs, and topics across Lattice.
This paper introduces a novel framework for multi-tier differential privacy (DP) query release that effectively manages cumulative privacy loss while optimizing utility across varying privacy budgets. By leveraging characteristic functions of noise distributions for noise-adding mechanisms and designing specific primitives for other DP models, the authors achieve utility comparable to single-tier mechanisms. Experimental results validate the framework's effectiveness, addressing the limitations of existing multi-tier DP approaches that either compromise privacy or utility.
Achieving optimal utility in multi-tier differential privacy without incurring excessive cumulative privacy loss could redefine how sensitive data queries are managed across various applications.
Answering statistical queries over sensitive data under differential privacy (DP) is a common task in many settings, including databases, mobile computing, and data markets. In these scenarios, multiple analysts may issue the same query, while receiving answers generated under different privacy budgets due to differences in trust levels or willingness to pay. Existing approaches for such multi-tier DP queries either incur excessive cumulative privacy loss or suffer from suboptimal utility. In this paper, we propose a framework for multi-tier DP query release that simultaneously bound the cumulative privacy loss by the maximum privacy budget among all queries and achieve optimal utility comparable to that of single-tier mechanisms. Our framework applies to different classes of DP mechanisms. For noise-adding mechanisms (e.g., count queries with the two-sided Geometric mechanism in the curator model), we develop a general solution based on the characteristic functions of noise distributions. For other mechanisms (e.g., count queries under the local DP model with the Subset mechanism), we design mechanism-specific primitives for budget transformation and introduce a template-based strategy that attains optimal utility across different privacy regimes. Experimental results demonstrate the effectiveness of our framework.
