A study on the protection of statistical data bases

ABSTRACT

We study a number of protection schemes with respect to their effectiveness in providing security for statistical data bases, their feasibility and their ease of implementation. A new method is proposed, and two implementations presented. One implementation guarantees perfect protection against leakage of information about individuals; the other requires very little implementation effort, but has a small probability of leakage.

REFERENCES

• 1: R. Demillo, D. Dobkin and R. Lipton, "Even Data Bases That Lie can be Compromised," Research Report #67, Department of Computer Science, Yale University, May 1976.
• 2: D. Dobkin, A. K. Jones and R. Lipton, "Security Data Bases: Protection Against User Inference," Research Report #65, Department of Computer Science, Yale University, April, 1976.
• 3: M. Haq, "Insuring Individuals' Privacy from Statistical Data Base Users," AFIPS Conference Proceedings 43, pp. 941-946, 1975.
• 4: L. J. Hoffman and W. F. Miller, "Getting a Personal Dossier from a Statistical Data Bank,", Datamation, pp. 74-75, May, 1976.
• 5: J. B. Kam and J. D. Ullman, "Security in Statistical Data Bases," TR-207, Department of Electrical Engineering and Computer Science, Princeton University, March, 1976. ACM TODS, March, 1977.
• 6: F. Y. Chin, "Security in Statistical Data Bases for Queries with Small Counts," (submitted).
• 7: C. L. Liu, "Introduction to Combinatorial Mathematics," McGraw-Hill, 1968.
• 8: I. P. Felligi and J. L. Phillips, "Statistical Confidentiality: Some Theory and Applications to Data Dissemination," Annals of Economic and Social Measurement, 3/2, 1974, pp. 399-409.
• 9: I. P. Fellegi, "On the Question of Statistical Confidentiality," Journal of the American Statistical Association, vol. 67, No. 337, March 1972, pp. 7-18.
• 10: Morris H. Hansen, "Insuring Con identiality of Individual Records in Data Storage and Retrieval for Statistical Purposes," Fall Joint Computer Conference, 1971, pp. 579-585.
• 11: Information Management System/360 Utilities Reference Manual IBM Form No. SH 20-0915.
• 12: Data Base Task Group of CODASYL Programming Language Committee Report (Oct. 1969, April 1971).
• 13: Donald D. Chamberlin , Raymond F. Boyce, SEQUEL: A structured English query language, Proceedings of the 1974 ACM SIGFIDET (now SIGMOD) workshop on Data description, access and control, p.249-264, May 01-03, 1974, Ann Arbor, Michigan [doi>10.1145/800296.811515]
• 14: Michael Stonebraker , Gerald Held , Eugene Wong , Peter Kreps, The design and implementation of INGRES, ACM Transactions on Database Systems (TODS), v.1 n.3, p.189-222, Sept. 1976 [doi>10.1145/320473.320476]
• 15: R. Boyce, et. al., "Specifying Queries as Relational Expressions: Square," Rep. RJ 1291, IBM Res. Lab., San Jose, Calif., Oct. 1973.
• 16: M. M. Astrahan , M. W. Blasgen , D. D. Chamberlin , K. P. Eswaran , J. N. Gray , P. P. Griffiths , W. F. King , R. A. Lorie , P. R. McJones , J. W. Mehl , G. R. Putzolu , I. L. Traiger , B. W. Wade , V. Watson, System R: relational approach to database management, ACM Transactions on Database Systems (TODS), v.1 n.2, p.97-137, June 1976 [doi>10.1145/320455.320457]
• 17: E. F. Codd, A relational model of data for large shared data banks, Communications of the ACM, v.13 n.6, p.377-387, June 1970 [doi>10.1145/362384.362685]
• 18: W. Feller, "An Introduction to Probability Theory and its Applications," Vol. 1, John Wiley & Sons, Inc., 1968.
• 19: M. Stonebraker and P. Rubinstein, "The Ingres Protection System", Memorandum No. ERL-M594, University of California, Burkley, July, 1976.
• 20: Patricia P. Griffiths , Bradford W. Wade, An authorization mechanism for a relational database system, ACM Transactions on Database Systems (TODS), v.1 n.3, p.242-255, Sept. 1976 [doi>10.1145/320473.320482]
• 21: Dennis G. Severance , Guy M. Lohman, Differential files: their application to the maintenance of large databases, ACM Transactions on Database Systems (TODS), v.1 n.3, p.256-267, Sept. 1976 [doi>10.1145/320473.320484]