Table of Contents
Fetching ...

Interpolation-Based Optimization for Enforcing lp-Norm Metric Differential Privacy in Continuous and Fine-Grained Domains

Chenxi Qiu

TL;DR

The work tackles enforcing $(\epsilon,d_p)$-mDP in continuous and fine-grained spaces by introducing an interpolation-based framework that learns perturbations at anchor points and extends them to the rest of the domain via log-convex interpolation. It establishes a rigorous theory for one-dimensional and multi-dimensional interpolation with dimension-wise budget composition, and introduces Anchor Perturbation Optimization (APO) and its linear surrogate Approx-APO to achieve scalable utility optimization under privacy constraints. Empirically, the approach achieves zero mDP violations and competitive utility on real road-network datasets (Rome, NYC, London), while offering substantial efficiency gains over full discretization-based LP methods. The method provides a principled, practical pathway for private data release in continuous spatial domains and sets the stage for scalable extensions to higher-dimensional settings.

Abstract

Metric Differential Privacy (mDP) generalizes Local Differential Privacy (LDP) by adapting privacy guarantees based on pairwise distances, enabling context-aware protection and improved utility. While existing optimization-based methods reduce utility loss effectively in coarse-grained domains, optimizing mDP in fine-grained or continuous settings remains challenging due to the computational cost of constructing dense perterubation matrices and satisfying pointwise constraints. In this paper, we propose an interpolation-based framework for optimizing lp-norm mDP in such domains. Our approach optimizes perturbation distributions at a sparse set of anchor points and interpolates distributions at non-anchor locations via log-convex combinations, which provably preserve mDP. To address privacy violations caused by naive interpolation in high-dimensional spaces, we decompose the interpolation process into a sequence of one-dimensional steps and derive a corrected formulation that enforces lp-norm mDP by design. We further explore joint optimization over perturbation distributions and privacy budget allocation across dimensions. Experiments on real-world location datasets demonstrate that our method offers rigorous privacy guarantees and competitive utility in fine-grained domains, outperforming baseline mechanisms. in high-dimensional spaces, we decompose the interpolation process into a sequence of one-dimensional steps and derive a corrected formulation that enforces lp-norm mDP by design. We further explore joint optimization over perturbation distributions and privacy budget allocation across dimensions. Experiments on real-world location datasets demonstrate that our method offers rigorous privacy guarantees and competitive utility in fine-grained domains, outperforming baseline mechanisms.

Interpolation-Based Optimization for Enforcing lp-Norm Metric Differential Privacy in Continuous and Fine-Grained Domains

TL;DR

The work tackles enforcing -mDP in continuous and fine-grained spaces by introducing an interpolation-based framework that learns perturbations at anchor points and extends them to the rest of the domain via log-convex interpolation. It establishes a rigorous theory for one-dimensional and multi-dimensional interpolation with dimension-wise budget composition, and introduces Anchor Perturbation Optimization (APO) and its linear surrogate Approx-APO to achieve scalable utility optimization under privacy constraints. Empirically, the approach achieves zero mDP violations and competitive utility on real road-network datasets (Rome, NYC, London), while offering substantial efficiency gains over full discretization-based LP methods. The method provides a principled, practical pathway for private data release in continuous spatial domains and sets the stage for scalable extensions to higher-dimensional settings.

Abstract

Metric Differential Privacy (mDP) generalizes Local Differential Privacy (LDP) by adapting privacy guarantees based on pairwise distances, enabling context-aware protection and improved utility. While existing optimization-based methods reduce utility loss effectively in coarse-grained domains, optimizing mDP in fine-grained or continuous settings remains challenging due to the computational cost of constructing dense perterubation matrices and satisfying pointwise constraints. In this paper, we propose an interpolation-based framework for optimizing lp-norm mDP in such domains. Our approach optimizes perturbation distributions at a sparse set of anchor points and interpolates distributions at non-anchor locations via log-convex combinations, which provably preserve mDP. To address privacy violations caused by naive interpolation in high-dimensional spaces, we decompose the interpolation process into a sequence of one-dimensional steps and derive a corrected formulation that enforces lp-norm mDP by design. We further explore joint optimization over perturbation distributions and privacy budget allocation across dimensions. Experiments on real-world location datasets demonstrate that our method offers rigorous privacy guarantees and competitive utility in fine-grained domains, outperforming baseline mechanisms. in high-dimensional spaces, we decompose the interpolation process into a sequence of one-dimensional steps and derive a corrected formulation that enforces lp-norm mDP by design. We further explore joint optimization over perturbation distributions and privacy budget allocation across dimensions. Experiments on real-world location datasets demonstrate that our method offers rigorous privacy guarantees and competitive utility in fine-grained domains, outperforming baseline mechanisms.
Paper Structure (47 sections, 17 theorems, 98 equations, 10 figures, 12 tables)

This paper contains 47 sections, 17 theorems, 98 equations, 10 figures, 12 tables.

Key Result

Proposition 1

Let $\mathbf{x}_i$ and $\mathbf{x}_{i'}$ be two records that differ only in their $\ell$th coordinate, with $x_{i, \ell} < x_{i', \ell}$, and suppose their corresponding log-perturbation probabilities $\ln z(\mathbf{y}_k \mid \mathbf{x}_i)$ and $\ln z(\mathbf{y}_k \mid \mathbf{x}_{i'})$ satisfy the then $\ln \hat{z}(\mathbf{y}_k \mid \mathbf{x}_a)$ and $\ln \hat{z}(\mathbf{y}_k \mid \mathbf{x}_b)

Figures (10)

  • Figure 1: Related works vs. our work. Example works in the figure: EM Chatzikokolakis-PETS2013, Planar Laplace Andres-CCS2013, LP Bordenabe-CCS2014, PI-Net (Laplace) Chen-CVPR2021, PIVE (EM-based) Yu-NDSS2017, Danzig-Wolfe (DW) decomposition (LP-based) Qiu-TMC2022, Benders decomposition (LP-based) Qiu-IJCAI2024, ConstOPT (EM+LP) ImolaUAI2022, Bayesian Remapping Chatzikokolakis-PETS2017, Truncated EM Carvalho2021TEMHU.
  • Figure 2: mDP based on approximated distance.
  • Figure 3: Framework of our method
  • Figure 4: Illustration of Proposition \ref{['prop:intral']} and Proposition \ref{['prop:across']}.
  • Figure 5: Proof of Lemma \ref{['lem:6points']}.
  • ...and 5 more figures

Theorems & Definitions (40)

  • Definition 1: Lipschitz bound and continuity w.r.t. $d_p$
  • Definition 2: $(\epsilon, d_p)$-metric differential privacy (mDP)
  • Definition 3: One-Dimensional Log-Convex Interpolation
  • Proposition 1: Intra-Interval Validity
  • Proposition 2: Across-Interval Validity
  • Theorem 1: Dimension-wise Composition for Lipschitz Bound Condition
  • proof : Proof Sketch
  • Definition 4: Axis-Aligned Anchor Neighbors
  • Definition 5: Unnormalized Multi-Dimensional Log-Convex Interpolation $f_{\mathrm{int}}$
  • Theorem 2: Correctness of Log-Convex Interpolation $f_{\mathrm{int}}$
  • ...and 30 more