论文标题
DuetsGX：带有安全硬件的差异隐私
DuetSGX: Differential Privacy with Secure Hardware
论文作者
论文摘要
差异隐私为个人提供了正式的隐私保证，但是差异私有系统的许多部署都需要值得信赖的第三方（数据策展人）。我们建议使用安全硬件（英特尔的SGX）来消除对受信任的数据策展人的需求。数据所有者提交了只能在运行DuetsGX系统的安全飞地中解密的加密数据，以确保数据策展人永远无法使用敏感数据。分析师提交了用二重奏语言编写的查询，该查询是专门设计用于验证该程序满足差异隐私的； DuetsGX使用Duet typechecker验证每个查询在运行之前是否满足差异隐私。因此，DuetsGX同时提供了当地差异隐私和中央差异隐私的好处：仅将噪声添加到最终结果中，并且没有值得信赖的第三方。我们已经实施了DuetsGX的概念验证实现，并将其作为开源。
Differential privacy offers a formal privacy guarantee for individuals, but many deployments of differentially private systems require a trusted third party (the data curator). We propose DuetSGX, a system that uses secure hardware (Intel's SGX) to eliminate the need for a trusted data curator. Data owners submit encrypted data that can be decrypted only within a secure enclave running the DuetSGX system, ensuring that sensitive data is never available to the data curator. Analysts submit queries written in the Duet language, which is specifically designed for verifying that programs satisfy differential privacy; DuetSGX uses the Duet typechecker to verify that each query satisfies differential privacy before running it. DuetSGX therefore provides the benefits of local differential privacy and central differential privacy simultaneously: noise is only added to final results, and there is no trusted third party. We have implemented a proof-of-concept implementation of DuetSGX and we release it as open-source.
