Security of statistical databases: multidimensional transformation

ABSTRACT

The concept of multidimensional transformation of statistical databases is described. A given set of statistical output may be compatible with more than one statistical database. A transformed database D' is a database which (1) differs from the original database D in its record content, but (2) produces, within certain limits, the same statistical output as the original database. For a transformable database D there are two options: One may physically transform D into a suitable database D', or one may release only that output which will not permit the users to decide whether it comes from D or D'. The second way is, of course, the easier one. Basic structural requirements for transformable statistical databases are investigated. The closing section discusses advantages, drawbacks, and open questions.

REFERENCES

• 1: Francis Y. Chin, Security in statistical databases for queries with small counts, ACM Transactions on Database Systems (TODS), v.3 n.1, p.92-104, March 1978 [doi>10.1145/320241.320250]
• 2: DALV.NIUS, T. Towards a methodology for statistical disclosure control. Stat. tidskr. 15, 5 (1977), 429-444.
• 3: DALENIUS, T. Information Privacy and Statistics--A Topical Bibliography. U.S. Bureau of the Census Working Paper No. 41, U.S. Government Printing Office, Washington, D.C., 1978.
• 4: DALENIUS, T., AND REISS, S.P. Data swapping--A technique for disclosure control. Confidentiality in Surveys, Rep. 31, Dep. Statistics, Univ. Stockholm, Stockholm, Sweden, May 1978.
• 5: Richard A. DeMillo , Richard J. Lipton , David P. Dobkin , Anita K. Jones, Foundations of Secure Computation, Academic Press, Inc., Orlando, FL, 1978
• 6: DENNING, D.E. Are statistical databases secure? In Proc. AFIPS 1978 NCC, vol. 47, AFIPS Press, Arlington, Va., pp. 525-530.
• 7: Dorothy E. Denning , Peter J. Denning , Mayer D. Schwartz, The tracker: a threat to statistical database security, ACM Transactions on Database Systems (TODS), v.4 n.1, p.76-96, March 1979 [doi>10.1145/320064.320069]
• 8: FELLEGI, I.P. On the question of statistical confidentiality. J. Am. Stat. Assoc. 67, 337 (March 1972), 7-18.
• 9: HAQ, M.I. Insuring individual's privacy from statistical data base users. In Proc. AFIPS 1975 NCC, vol. 44, AFIPS Press, Arlington, Va., pp. 941-946.
• 10: HOFFMAN, L.J., AND MILLER, W.F. Getting a personal dossier from a statistical data bank. Datamation 16, 5 (May 1970), 74-75.
• 11: John B. Kam , Jeffrey D. Ullman, A model of statistical database their security, ACM Transactions on Database Systems (TODS), v.2 n.1, p.1-10, March 1977 [doi>10.1145/320521.320525]
• 12: LIu, C.L. Introduction to Combinatorial Mathematics. McGraw-Hill, New York, 1968.
• 13: OFFICE OF FEDERAL STATISTICAL POLICY AND STANDARDS. Statistical Policy Working Paper 2. Report on Statistical Disclosure and Disclosure-Avoidance Techniques. Subcommittee on Disclosure-Avoidance Techniques, Federal Committee on Statistical Methodology, U.S. Government Printing Office, Washington, D.C., 1978.
• 14: OLSSON, L. Protection of output and stored data in statistical data bases. ADB-Information 4 (1975), Statistiska Centralbyr~n Stockholm, Stockholm, Sweden.
• 15: REIss, S.P. Statistical database confidentiality. Confidentiality in Surveys, Rep. 25, Dep. Statistics, Univ. Stockholm, Stockholm, Sweden, Nov. 1977.
• 16: SCHLSaER, J. Identification and retrieval of personal records from a statistical data bank. Methods Inf. Med. 14, 1 {Jan. 1975), 7-13.
• 17: SCHLt}RER, J. Zum Statistikgeheimnis: Risiken und Schutz statistischer Datenbanken. Datenverarb. Recht 5, 3 (1976), 203-248.
• 18: SCHLSR~.R, J. Confidentiality and security in statistical data banks. In Data Documentation: Some Principles and Applications in Science and Industry, W. Gaus and R. Henzler, Eds. Verlag Dokumentation, Munich, W. Germany, 1977, pp. 101-123.
• 19: Jan Schlöer, Security of statistical databases: multidimensional transformation, ACM Transactions on Database Systems (TODS), v.5 n.4, p.467-492, Dec. 1980 [doi>10.1145/320610.320645]
• 20: SCHMIDT, H. Das Sozialinformationssystem der Bundesrepublik Deutschland. adl-Verlag, Eutin, 1977.

INDEX TERMS

Primary Classification:
  H. Information Systems
  H.2 DATABASE MANAGEMENT
      H.2.8 Database applications
          Subjects: Statistical databases

General Terms:
Security

Keywords:
confidentiality, database, database security, matrices, security, statistical database