Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Remove DifferentialPrivacyParams from MeasurementSpec #82

Open
matthewclegg opened this issue Dec 16, 2021 · 1 comment
Open

Remove DifferentialPrivacyParams from MeasurementSpec #82

matthewclegg opened this issue Dec 16, 2021 · 1 comment

Comments

@matthewclegg
Copy link
Contributor

Reasons for this proposal:

  1. Raimundo, Pasin and Jiayu computed the optimal differential privacy parameters for the different types of queries. There is not any reason to use values other than these. See this doc https://docs.google.com/document/d/1JJA3ufmWgDNblDMKTB2KDLEQjBpgR12kVYVOozjdZ3M/edit
  2. If we allow MeasurementConsumers to choose arbitrary values for the differential privacy parameters, then we will not be able to use adaptive composition to compute total privacy budget usage. Instead, we will have to revert to a more conservative approach which would reduce the total number of queries that can be performed.
  3. It is envisioned that there may be multiple implementations of Reporting and Planning Front-ends. Can we trust that each of these implementations will use the correct values of epsilon and delta?

Instead of having the RPFE provide the values of epsilon and delta, they should be hard-coded into the Kingdom, and a table lookup for these values should be performed based on the type of query.

@wangyaopw
Copy link
Collaborator

We should discuss this in one of the workstreams. maybe in "R&F Planning - Eval Framework & Conceptual Design".

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants