Table of Contents
Fetching ...

Privacy-Preserving Set-Based Estimation Using Differential Privacy and Zonotopes

Mohammed M. Dawoud, Changxin Liu, Karl H. Johansson, Amr Alanwar

TL;DR

This work proposes a differentially private set-based estimation protocol that guarantees true state containment in the estimated set and differential privacy for the sensitive measurements throughout the set-based state estimation process within the central DP (CDP) and local DP (LDP) models.

Abstract

For large-scale cyber-physical systems, the collaboration of spatially distributed sensors is often needed to perform the state estimation process. Privacy concerns arise from disclosing sensitive measurements to a cloud estimator. To solve this issue, we propose a differentially private set-based estimation protocol that guarantees true state containment in the estimated set and differential privacy for the sensitive measurements throughout the set-based state estimation process within the central and local differential privacy models. Zonotopes are employed in the proposed differentially private set-based estimator, offering computational advantages in set operations. We consider a plant of a non-linear discrete-time dynamical system with bounded modeling uncertainties, sensors that provide sensitive measurements with bounded measurement uncertainties, and a cloud estimator that predicts the system's state. The privacy-preserving noise perturbs the centers of measurement zonotopes, thereby concealing the precise position of these zonotopes, i.e., ensuring privacy preservation for the sets containing sensitive measurements. Compared to existing research, our approach achieves less privacy loss and utility loss through the central and local differential privacy models by leveraging a numerically optimized truncated noise distribution. The proposed estimator is perturbed by weaker noise than the analytical approaches in the literature to guarantee the same level of privacy, therefore improving the estimation utility. Numerical and comparison experiments with truncated Laplace noise are presented to support our approach.

Privacy-Preserving Set-Based Estimation Using Differential Privacy and Zonotopes

TL;DR

This work proposes a differentially private set-based estimation protocol that guarantees true state containment in the estimated set and differential privacy for the sensitive measurements throughout the set-based state estimation process within the central DP (CDP) and local DP (LDP) models.

Abstract

For large-scale cyber-physical systems, the collaboration of spatially distributed sensors is often needed to perform the state estimation process. Privacy concerns arise from disclosing sensitive measurements to a cloud estimator. To solve this issue, we propose a differentially private set-based estimation protocol that guarantees true state containment in the estimated set and differential privacy for the sensitive measurements throughout the set-based state estimation process within the central and local differential privacy models. Zonotopes are employed in the proposed differentially private set-based estimator, offering computational advantages in set operations. We consider a plant of a non-linear discrete-time dynamical system with bounded modeling uncertainties, sensors that provide sensitive measurements with bounded measurement uncertainties, and a cloud estimator that predicts the system's state. The privacy-preserving noise perturbs the centers of measurement zonotopes, thereby concealing the precise position of these zonotopes, i.e., ensuring privacy preservation for the sets containing sensitive measurements. Compared to existing research, our approach achieves less privacy loss and utility loss through the central and local differential privacy models by leveraging a numerically optimized truncated noise distribution. The proposed estimator is perturbed by weaker noise than the analytical approaches in the literature to guarantee the same level of privacy, therefore improving the estimation utility. Numerical and comparison experiments with truncated Laplace noise are presented to support our approach.
Paper Structure (18 sections, 2 theorems, 31 equations, 8 figures, 1 table, 2 algorithms)

This paper contains 18 sections, 2 theorems, 31 equations, 8 figures, 1 table, 2 algorithms.

Key Result

Lemma 1

Let $M^{(i)}_{y}$ be an additive noise mechanism with a sensitivity $s$ (Definition def:sensitivity-ldp) and $\Acute{\Phi}=\{\phi_l\}_{l\in \{1,\dots,\;2N\}}$ be the discretization of ${\Phi}$ with the truncated optimal noise distribution $P(\phi_l)$ (Definition def:optimal-noise). If $\forall\;\hat then the additive noise mechanism $M^{(i)}_{y}$ is $(\epsilon, \delta)$-ADP for any $y^{(i)}_k\in \

Figures (8)

  • Figure 1: Intrusion detection system installed over a region, : the quadcopter, : the estimated set, : LIDAR sensors.
  • Figure 2: The setups of the cloud estimator within the CDP and LDP models.
  • Figure 3: True values, upper bounds, and lower bounds of the three-dimensional estimated states using the differentially private set-based estimator within the context of the CDP setup.
  • Figure 4: True values, upper bounds, and lower bounds of the three-dimensional estimated states using the differentially private set-based estimator within the context of the LDP setup.
  • Figure 5: Localization of a quadcopter navigating through arbitrary non-linear motion, : the quadcopter, : anchor nodes, + : center of the estimated zonotope.
  • ...and 3 more figures

Theorems & Definitions (11)

  • Definition 1: Zonotope z-lop-95
  • Definition 2: Approximate Differential Privacy (ADP) 10.1007_11787006_1degue2017differentially
  • Example 1
  • Definition 3: Truncated Noise Distribution DBLP:journals/corr/abs-2107-12957
  • Definition 4: Sensitivity - LDP 91477266483414
  • Definition 5: Additive Noise Mechanism - LDP DBLP:journals/corr/abs-2107-12957
  • Lemma 1: DBLP:journals/corr/abs-2107-12957
  • Definition 6: Sensitivity - CDP 91477266483414
  • Definition 7: Additive Noise Mechanism - CDP DBLP:journals/corr/abs-2107-12957
  • Theorem 1
  • ...and 1 more