公开(公告)号：US20250021680A1

公开(公告)日：2025-01-16

申请号：US18497648

申请日：2023-10-30

Applicant: Snowflake Inc.

Inventor： Liam James Damewood ,  Oana Niculaescu ,  Alexander Rozenshteyn ,  Mikhail Rudoy

IPC: G06F21/62 ,  G06F16/2457

Abstract: Example differential privacy techniques include receiving a request to perform a query on a set of data stored by a database. The request identifies a target accuracy and a maximum privacy spend. The target accuracy includes a maximum relative error. The maximum privacy spend includes a value of a zero-concentrated privacy parameter ρ associated with a degree of information released about the set of data due to the query. A differentially private count operation is performed on the set of data to produce a differentially private result. The differentially private count operation includes performing a count operation on data to produce a result and perturbing the result to produce a differentially private result using a noise value sampled from a Gaussian distribution and based on a fractional privacy spend comprising a fraction of the maximum privacy spend. The differentially private result is encoded for transmission to the client device.

公开(公告)号：US12130942B2

公开(公告)日：2024-10-29

申请号：US18461342

申请日：2023-09-05

Applicant: Snowflake Inc.

Inventor： Christopher Hockenbrocht ,  Ishaan Nerurkar ,  Liam James Damewood ,  Mihai Maruseac ,  Alexander Rozenshteyn

IPC: G06F21/62

CPC classification number: G06F21/6245 ,  G06F21/6227

Abstract: Techniques are described for budget tracking in a differentially private security system. A request to perform a query of a private database system is received by a privacy device from a client device. The request is associated with a level of differential privacy. A privacy budget corresponding to the received request is accessed by the privacy device. The privacy budget includes a cumulative privacy spend and a maximum privacy spend, the cumulative privacy spend representative of previous queries of the private database system. A privacy spend associated with the received request is determined by the privacy device based at least in part on the level of differential privacy associated with the received request. If a sum of the determined privacy spend and the cumulative privacy spend is less than the maximum privacy spend, the query is performed. Otherwise a security action is performed based on a security policy.

公开(公告)号：US20240095392A1

公开(公告)日：2024-03-21

申请号：US18510179

申请日：2023-11-15

Applicant: Snowflake Inc.

Inventor： Liam James Damewood ,  Oana Niculaescu ,  Alexander Rozenshteyn ,  Ann Yang

IPC: G06F21/62 ,  G06F16/245

CPC classification number: G06F21/6227 ,  G06F16/245

Abstract: A differentially private security system communicatively coupled to a database storing restricted data receives a database query from a client. The database query includes an operation, a target accuracy, and a maximum privacy spend for the query. The system performs the operation to produce a result, then injects the result with noise sampled from a Laplace distribution to produce a differentially private result. The system iteratively calibrates the noise value of the differentially private result using a secondary distribution different from the Laplace distribution and a new fractional privacy spend. The system ceases to iterate when an iteration uses the maximum privacy spend or a relative error of the differentially private result is determined to satisfy the target accuracy, or both. The system sends the differentially private result to the client.

公开(公告)号：US20230409745A1

公开(公告)日：2023-12-21

申请号：US18461342

申请日：2023-09-05

Applicant: Snowflake Inc.

Inventor： Christopher Hockenbrocht ,  Ishaan Nerurkar ,  Liam James Damewood ,  Mihai Maruseac ,  Alexander Rozenshteyn

IPC: G06F21/62

CPC classification number: G06F21/6245 ,  G06F21/6227

Abstract: Techniques are described for budget tracking in a differentially private security system. A request to perform a query of a private database system is received by a privacy device from a client device. The request is associated with a level of differential privacy. A privacy budget corresponding to the received request is accessed by the privacy device. The privacy budget includes a cumulative privacy spend and a maximum privacy spend, the cumulative privacy spend representative of previous queries of the private database system. A privacy spend associated with the received request is determined by the privacy device based at least in part on the level of differential privacy associated with the received request. If a sum of the determined privacy spend and the cumulative privacy spend is less than the maximum privacy spend, the query is performed. Otherwise a security action is performed based on a security policy.

公开(公告)号：US11755769B2

公开(公告)日：2023-09-12

申请号：US16265936

申请日：2019-02-01

Applicant: Snowflake Inc.

Inventor： Christopher Hockenbrocht ,  Ishaan Nerurkar ,  Alexander Rozenshteyn ,  Liam Damewood ,  David Spies ,  Mihai Maruseac

IPC: G06F21/62 ,  G06F16/245

CPC classification number: G06F21/6245 ,  G06F16/245

Abstract: A differentially private security system communicatively coupled to a database storing restricted data receives a database query from a client. The database query includes a relation specifying a set of data in the database upon which to perform the query and privacy parameters associated with the query. The differentially private security system determines a worst-case privacy spend for the query based on the privacy parameters and the relation. The differentially private security system performs the query upon the set of data specified by the relation and decrements the determined worst-case privacy spend from a privacy budget associated with the client. The differentially private security system records the worst-case privacy spend and the query at a log and determines a privacy budget refund based on queries recorded in the log. The differentially private security system applies the determined privacy budget refund to the privacy budget associated with the client.