MetaP: Revisiting Privacy-Preserving Data Publishing using Secure Devices

Tristan Allard (1) , Benjamin Nguyen (2, 3) , Philippe Pucheral (2, 3)

1 DSL - Distributed Systems Laboratory
2 SMIS - Secured and Mobile Information Systems
3 PRISM - Parallélisme, Réseaux, Systèmes, Modélisation

The goal of Privacy-Preserving Data Publishing (PPDP) is to gen- erate a sanitized (i.e. harmless) view of sensitive personal data (e.g. a health survey), to be released to some agencies or simply the public. However, traditional PPDP practices all make the assumption that the process is run on a trusted central server. In this article, we argue that the trust assumption on the central server is far too strong. We propose MetAP, a generic fully distributed protocol, to execute various forms of PPDP algorithms on an asymmetric architecture composed of low power secure devices and a powerful but untrusted infrastructure. We show that this protocol is both correct and secure against honest-but-curious or malicious adversaries. Finally, we provide an experimental validation showing that this protocol can support PPDP processes scaling up to nation-wide surveys

Mots clés: Sanitization; Anonymization; Secure device; Privacy; Privacy-Preserving Data Publishing

Domaines: Base de données [cs.DB]

Tristan Allard, Benjamin Nguyen, Philippe Pucheral. MetaP: Revisiting Privacy-Preserving Data Publishing using Secure Devices. Distributed and Parallel Databases, 2014, pp.1-55. ⟨10.1007/s10619-013-7122-x⟩. ⟨hal-00934586⟩