A Volumetric Privacy Measure for Dynamical Systems With Bounded Disturbance
Chuanghong Weng, Ehsan Nekouei
TL;DR
The paper addresses privacy in dynamical systems subject to bounded disturbances by introducing a volumetric privacy measure based on the volume of the private-state uncertainty set Vol(Y_{k|k}). It develops interval-analysis and (optionally) constrained convex generator approaches to bound privacy leakage and links leakage to information gain from observations. An optimization-based privacy filter is proposed that randomizes and refines observations via a linear program to maximize Vol(Y_{k|k}) under a utility constraint Vol(M^x_{k|k}) ≤ ε^x. The method is demonstrated on a production-inventory case study, showing improved robustness against inference attacks and outperformance of additive-noise and quantization baselines.
Abstract
In this paper, we first present a volumetric privacy measure for dynamical systems with bounded disturbances, wherein the states of the system contain private information and an adversary with access to sensor measurements attempts to infer the set of potential values of the private information. Under the proposed privacy measure, the volume of the uncertainty set of the adversary given the sensor measurements is considered as the privacy level of the system. We next characteristic the time evolution of the proposed privacy measure and study its properties for a particular system with both public and private states, where a set containing the public state is shared as the observation. Approximate set-membership estimation techniques are developed to compute the private-state uncertainty set, and the properties of the privacy measure are analyzed, demonstrating that the uncertainty reduction of the adversary is bounded by the information gain from the observation set. Furthermore, an optimization-based privacy filter design problem is formulated, employing randomization and linear programming to enhance the privacy level. The effectiveness of the proposed approach is validated through a production-inventory case study. Results show that the optimal privacy filter significantly improves robustness against inference attacks and outperforms two baseline mechanisms based on additive noise and quantization.
