Upgrade to Pro — share decks privately, control downloads, hide ads and more …

差分プライバシー入門

 差分プライバシー入門

差分プライバシーが求められている背景と、差分プライバシーの概要についてご紹介します。

LY Corporation Tech

June 24, 2024
Tweet

More Decks by LY Corporation Tech

Other Decks in Technology

Transcript

  1. ˜-:$PSQPSBUJPO  5TVCBTB 5",")"4)* 1I% IUUQTXXXOFDTPMVUJPOJOOPWBUPSTDPKQTMEBOPOZ /&$ -*/& -*/&Ϡϑʔ 4#*OUVJUJPOT

    d d /&$σʔλಗ໊ԽιϦϡʔγϣϯ ʮ-*/&ʯΞϓϦͷελϯϓαδΣετ ࿈߹ֶश ࠩ෼ϓϥΠόγʔ IUUQTMJOFDPSQDPNKB TFDVSJUZBSUJDMF ੜ੒"* ετϨε ςετ"* ҙਤతͳ߈ܸతΫΤϦ 8BUFSNBSL %JGGVTJPO.PEFM --.ͷετϨεςετ ఢରతಁ͔͠ʹΑΔஶ࡞ݖอޢ $.6d ໦ߋ௡ߴઐ ஜ೾େֶ
  2. ˜-:$PSQPSBUJPO  1SJWBDZ&OIBODJOH5FDIOPMPHJFT 1&5T 1&5Tʹ͸ɺ ҉߸౳ʹΑΔΞΫηε੍ޚٕज़ͱ  ৘ใͦͷ΋ͷΛՃ޻͢Δٕज़ ͕͋Δ ࿈߹ֶशɾ

    ہॴࠩ෼ϓϥΠόγʔ ಗ໊Խɾσʔλ߹੒ ࠩ෼ϓϥΠόγʔ ੺͍఺ઢΑΓࠨଆ͕ϓϥΠόγʔอޢͷൣғ FHಗ໊Խ΍ࠩ෼ϓϥΠόγʔ FH࿈߹ֶश΍ൿີܭࢉ
  3. ˜-:$PSQPSBUJPO  ࠩ෼ϓϥΠόγʔͱ͸ ϊΠζʢ ʣ͕Ճࢉ͞Ε͍ͯΔͱϓϥΠόγʔอޢ͞Ε͍ͯΔΑ͏ʹײ͡·ͤΜ͔ʁ ౷ܭత ͳग़ྗ ϊΠζ ΛՃࢉ 𝜖

     ∞    TUSPOH XFBL   ʜ ࠩ෼ϓϥΠόγʔ͕ఏڙ͢Δ΋ͷ • ϊΠζͷՃࢉʹର͢Δ ཧ࿦తͳϓϥΠόγʔอޢͷई౓ • ॴఆͷϓϥΠόγʔڧ౓ 𝜖 ͷ ୡ੒ʹඞཁͳϊΠζͷಋग़
  4. ˜-:$PSQPSBUJPO  ͭͷओཁͳϓϥΠόγʔϞσϧ $FOUSBM %JGGFSFOUJBM1SJWBDZ -PDBM%JGGFSFOUJBM1SJWBDZ ୈࡾऀ΁ͷ ౷ܭ஋ͷެ։ ػඍͳ ౷ܭͷऩू

    αʔόʔΛ ৴༻͠ͳ͍ αʔόʔΛ ৴༻͢Δ ಋೖࣄྫ • $ISPNFϒϥ΢βͰͷ౷ܭऩू (PPHMF • J04σόΠεͰͷ౷ܭऩू "QQMF • ελϯϓαδΣετͷ࿈߹ֶश -*/&Ϡϑʔ ಋೖࣄྫ • ೥౓ถࠃࠃ੎ௐࠪ 64$FOTVT  • 'VMM63-TEBUBTFU .FUB • /FYUXPSEQSFEJDUJPOJO(CPBSE (PPHMF • "VEJFODF&OHBHFNFOU"1* -JOLFE*O ʢ͝ࢀߟʣ"MJTUPGSFBMXPSMEVTFPGEJGGFSFOUJBMQSJWBDZIUUQTEFTGPOUBJOFTQSJWBDZSFBMXPSMEEJGGFSFOUJBMQSJWBDZIUNM
  5. ˜-:$PSQPSBUJPO  64$FOTVTͰࠩ෼ϓϥΠόγʔΛར༻ͨ͠ཧ༝ • ࠩ෼ϓϥΠόγʔ͸ɺࠓ೔ͷϓϥΠόγʔڴҖʹର͢Δ ࠷৽ͷηʔϑΨʔυͰ͋Δ • εύίϯ͸ɺݸਓ৘ใΛಛఆ͢ΔͨΊʹෳ਺ͷ%#͔Β σʔλΛݟ͚ͭग़͠ɺর߹͢Δ͜ͱͰɺ܈ऺͷத͔Β͋ ͳͨΛ༰қʹબͼग़͢ʢڱ͍஍ҬʹॅΜͰ͍ͯɺྡਓͱ

    ਓछ΍ຽ଒͕ҟͳΔ৔߹͸ಛʹʣ • ϓϥΠόγʔʹର͢ΔਂࠁͳڴҖ͸ɺ೥લͷࠃ੎ௐࠪ ͷ࣌ʹ͸ଘࡏ͠ͳ͔ͬͨ΋ͷͰ͋Δ • ࢲͨͪ͸ɺਓʑͷϓϥΠόγʔΛอޢ͠ଓ͚ΔͨΊʹɺ ৽͍ٕ͠ज़Λ࢖Θͳ͚Ε͹ͳΒͳ͍ • ࠓ೔ͷϓϥΠόγʔͷڴҖͷن໛Λߟ͑Δͱɺաڈͷํ ๏͸ɺެද͞Εͨσʔλʹஶ͘͠େ͖ͳ࿪ΈΛੜͤ͡͞ɺ σʔλͷଟ͘Λ࢖༻Ͱ͖ͳͯ͘͠͠·͏ͩΖ͏ IUUQTXXXDFOTVTHPWDPOUFOUEBN$FOTVTMJCSBSZGBDUTIFFUTEJGGFSFOUJBMQSJWBDZBOEUIFDFOTVTQEG
  6. ˜-:$PSQPSBUJPO  ถࠃ."भʹ͓͚Δ࠶ࣝผͷ໰୊ ೥୅ • ถࠃ."भͰ͸ɺभͷ৬һͷ௨Ӄه࿥ " Λر๬͢Δݚڀऀʹެ։ ໊લ͸࡟আ •

    έϯϒϦοδࢢͷ༗ݖऀσʔλϕʔε # ͸υϧͰߪೖͰ͖ͨ • " ͱ # ͷ૊Έ߹Θ͔ͤΒ8FME஌ࣄͷϨίʔυ͕؆୯ʹಛఆͰ͖ͨ (FOEFS ;JQ #JSUI %JTFBTF ' B YYBBCC "#$ . C YYZZ[[ %&' . D BCXXUU ()* ' E NOQQRR +,- /BNF (FOEFS ;JQ #JSUI ʜ ' B YYBBCC 8JMMJBN8FME . C YYZZ[[ . D BCXXUU ' E NOQQRR /BNF (FOEFS ;JQ #JSUI %JTFBTF ' B YYBBCC "#$ 8JMMJBN8FME . C YYZZ[[ %&' . D BCXXUU ()* ' E NOQQRR +,- +0*/ ४ࣝผࢠ 2VBTJ*EFOUJGJFS2*%
  7. ˜-:$PSQPSBUJPO  /FUGMJY1SJ[Fͷ࠶ࣝผͷ໰୊  • ಗ໊Խ͞Ε͍ͯͳ͍֎෦ͷσʔλϕʔε *.%# ͱͷಥ߹ʹΑͬͯɺಗ໊Խ͞Ε͍ͯͨίϝ ϯτͱϢʔβ͕ରԠ෇͍ͯ͠·ͬͨ •

    ίϝϯτʹ͸੓࣏৴৚͕Θ͔Δ΋ͷ΋͋ͬͨ • ݸͷධՁͱ೔෇ िؒҎ಺ͷਫ਼౓ ͕෼͔Ε͹ͷਫ਼౓ͰݸਓΛಛఆͰ͖ͨ 6TFSOBNF 5JUMF 3BUF "MJDF """  ###  %%%  #PC """  999  1TFVEP*% 5JUMF 3BUF $PNNFOU Y """  ###  %%%  *UTFFNTYYY B :::  999  "OPOZNJ[FE/FUGMJY.PWJFSBOLJOHEBUB /POBOPOZNPVT*.%#NPWJFSBUJOH +0*/
  8. ˜-:$PSQPSBUJPO  Lಗ໊Խ • ಗ໊Խɿσʔλͷಛఆ΍ࣝผΛࠔ೉ʹ͢ΔͨΊʹߦ͏σʔλͷՃ޻ॲཧ • Lಗ໊Խɿ%#಺ʹɺ೚ҙͷϨίʔυͱಉ͡४ࣝผࢠͷ૊Λ࣋ͭଞͷϨίʔυ͕Lݸଘࡏ • ४ࣝผࢠ 2VBTJ*EFOUJGJFS

    ɿ૊߹ͤʹΑͬͯݸਓΛࣝผ͠ಘΔଐੑͷू߹ɻࣄલʹఆٛ "HF (FOEFS 4BMBSZ "MJDF  'FNBMF . #PC  .BMF . $IBSMJF  .BMF . %BWJE  .BMF , &NNB  'FNBMF . 'SBOD  .BMF . (FPSHF  .BMF , )BOB  'FNBMF , "HF (FOEFS 4BMBSZ  .  .  .  ,  .  .  ,  , Lಗ໊Խ L
  9. ˜-:$PSQPSBUJPO  Lಗ໊Խͷݶք • ४ࣝผࢠҎ֎ͷଐੑʹର͢Δ֎෦஌ࣝͷಥ߹ʹΑΓɺLಗ໊ԽΛഁΒΕΔ͜ͱ͕͋Δ • è ߈ܸऀͷഎܠ஌ࣝʹΑͬͯ͸ಗ໊ੑ͕े෼Ͱͳ͍ "HF (FOEFS

    4BMBSZ  .  .  .  ,  .  .  ,  , Lಗ໊Խ L "HF (FOEFS 1IPOF "MJDF  'FNBMF  #PC  .BMF  $IBSMJF  .BMF  %BWJE  .BMF  &NNB  'FNBMF  'SBOD  .BMF  (FPSHF  .BMF  )BOB  'FNBMF  (FOEFS 4BMBSZ #PC .BMF . &NNB 'FNBMF . (FPSHF .BMF , ᶃ ᶃ ᶄ 'SBODà 4BMBSZ. ΛಛఆͰ͖ͯ͠·͏ ఢରऀͷ֎෦஌ࣝ
  10. ˜-:$PSQPSBUJPO  2VJ[ͷճ౴ BWHTBMBSZ ສԁ BWHTBMBSZ ສԁ ʲ2VJ[ʳ"MJDFͷ೥ऩ͸ʁ ʜ ʜ

    ʜ ʜ "MJDF "MJDF͕ୀ৬ FOHJOFFST FOHJOFFST ೥ ೥ Yr Y ສԁ ౴͑
  11. ˜-:$PSQPSBUJPO  ࠩ෼߈ܸͷࣄྫ • 'BDFCPPLͷ1**CBTFE5BSHFUJOH ݱࡏ͸मਖ਼ࡁΈ • ޿ࠂλʔήςΟϯάͷޮՌΛܭଌ͢ΔͨΊͷ౷ܭ෼ੳ"1* • ։੍ࣔޚͷͨΊʹᮢ஋ʹΑΔอޢΛಋೖ͍͕ͯͨ͠ɺόΠύε͞Εͨ

    • ి࿩൪߸΍ϝʔϧΞυϨεɺ8FCӾཡཤྺ͕࿙Ӯ IUUQTXXXZPVUVCFDPNXBUDI W-Q *X:WY(QL IUUQTXXXGUDHPWTZTUFNGJMFTEPDVNFOUTQVCMJD@FWFO UTQQSJWBDZDPONJTMPWF@QEG
  12. ˜-:$PSQPSBUJPO  ౷ܭͷ҆શͳ։ࣔ r ස౓ͱࠩ෼ͷ͖͍͠஋ॲཧ  • ݪཧతʹ͸Մೳ͕ͩɺ͋Γͱ͋ΒΏΔࠩ෼ΛຖճνΣοΫ͢Δ͜ͱ͸༰қͰ͸ͳ͍ • ͖͍͠஋ॲཧʹΑͬͯɺར༻ෆՄೳʹͳΔσʔλ͕ଟ਺ੜ͡ΔڪΕ

    ೥୅ ੑผ ਓ਺ ୅ உ   ୅ ঁ  ୅ உ   ୅ ঁ   ೥୅ ੑผ ਓ਺ ୅ உ   ୅ ঁ  ୅ உ   ୅ ঁ   ೥୅ ੑผ ਓ਺ ୅ உ   ୅ ঁ  ୅ உ   ୅ ঁ   ਓ਺ͷ͖͍͠஋ɿ ࠩ෼ͷ͖͍͠஋ɿ /( 0, ࣌ࠁ 5 ࣌ࠁ 5 𝜏 ݁ୗऀΛूΊΒΕͳ͍ఔ౓ʹ େ͖͍͖͍͠஋Λઃఆ ྫ
  13. ˜-:$PSQPSBUJPO  ࠩ෼ϓϥΠόγʔ͕ٻΊΒΕ͍ͯΔഎܠ L ಗ໊Խͷݶք • ֎෦஌ࣝʹ੬ऑ ɿ֎෦஌ࣝͱͷಥ߹ʹΑͬͯɺಗ໊Խ͕ഁΒΕΔڪΕ • ෳ਺ެ։ʹඇରԠɿෳ਺ͷಗ໊Խσʔλͷಥ߹ʹΑͬͯ΋ɺಗ໊Խ͕ഁΒΕΔڪΕ

    • ༗༻ੑҡ͕࣋ࠔ೉ɿσʔλͷෳࡶ౓ɺڴҖͷڧ͞ʹԠͯ͡༗༻ੑͷҡ͕࣋ΑΓࠔ೉ʹ ৽͍͠ڴҖͷొ৔ • ࠩ෼߈ܸ • σʔλϕʔε࠶ߏங߈ܸ ౷ܭσʔλ΍ػցֶशϞσϧʹର͢ΔϓϥΠόγʔई౓ͷඞཁੑ
  14. ˜-:$PSQPSBUJPO  ࠩ෼ϓϥΠόγʔͱ͸ ϊΠζʢ ʣ͕Ճࢉ͞Ε͍ͯΔͱϓϥΠόγʔอޢ͞Ε͍ͯΔΑ͏ʹײ͡·ͤΜ͔ʁ ౷ܭత ͳग़ྗ ϊΠζ ΛՃࢉ 𝜖

     ∞    TUSPOH XFBL   ʜ ࠩ෼ϓϥΠόγʔ͕ఏڙ͢Δ΋ͷ • ϊΠζͷՃࢉʹର͢Δ ཧ࿦తͳϓϥΠόγʔอޢͷई౓ • ॴఆͷϓϥΠόγʔڧ౓ 𝜖 ͷ ୡ੒ʹඞཁͳϊΠζͷಋग़
  15. ˜-:$PSQPSBUJPO  𝝐, 𝜹 %JGGFSFOUJBM1SJWBDZ ϝΧχζϜ ℳ: 𝒟 → 𝒮

    ͕ 𝜖, 𝛿 %1Λຬͨ͢ͱ͸ɺྡ઀σʔλϕʔε 𝐷, 𝐷" ∈ 𝒟 ͓Αͼ೚ҙͷग़ྗͷू߹ 𝑆 ⊆ 𝒮 ʹରͯ͠ҎԼ͕੒Γཱͭͱ͖Ͱ͋Δ %BUBCBTF𝑫 0VUQVU 𝜖  ∞    TUSPOH XFBL   ʜ Pr ℳ 𝐷 ∈ 𝑆 ≤ exp 𝜖 Pr ℳ 𝐷! ∈ 𝑆 + 𝛿 ℳ 𝑫′ɿ BEKBDFOUPG𝑫 ℳ 𝜖 ≥ 0, 𝛿 ∈ 0,1 ) ೖྗ͕มԽͯ͠΋ग़ྗʹ͸΄ͱΜͲʢexp 𝜖 ఔ౓͔͠ʣӨڹ͕ͳ͍ %XPSL%JGGFSFOUJBMQSJWBDZ*$"-1 
  16. ˜-:$PSQPSBUJPO  -BQMBDFϝΧχζϜ ࠷΋Α͘஌ΒΕͨϥϯμϜԽॲཧΛ࣮ݱ͢ΔϝΧχζϜʢ𝛿 = 0Λ૝ఆʣ ℳ 𝐷 = 𝑓

    𝐷 + Lap 0, Δ. 𝜖 -BQMBDF.FDIBOJTN 𝜖 = 10, Δ! = 1 𝜖 = 1, Δ! = 1 ฏۉɿ ඪ४ภࠩɿ 2 "! # ͷ ϥϓϥε෼෍͔ΒϊΠζΛαϯϓϦϯά Δ' = sup (,(!∈𝒟 𝑓 𝐷 − 𝑓 𝐷" , ℓ𝟏 TFOTJUJWJUZ Δ-./01 = 1 Δ2340 = 1 𝑛 ˞૝ఆ͢Δྡ઀%#ʹґଘ &Y 4FOTJUJWJUZ𝚫𝒇 ೚ҙͷҰϨίʔυͷมԽ˞͕ؔ਺ͷग़ྗʹӨڹΛ༩͑Δ౓߹͍ %XPSL%JGGFSFOUJBMQSJWBDZ*$"-1 
  17. ˜-:$PSQPSBUJPO  ࠩ෼ϓϥΠόγʔͷ՝୊ • ಁ໌ੑͷܽ೗ • ग़ྗʢ౷ܭɾػցֶशϞσϧʣ͚ͩΛݟͯ΋ࠩ෼ϓϥΠόγʔ͕อূ͞Ε͍ͯΔ͔Ͳ͏͔ෆ໌֬ • ؔ਺ʢ౷ܭॲཧ΍ػցֶशϓϩηεʣͷ҆શੑΛଌΔई౓Ͱ͋ΔͨΊɺσʔλͦͷ΋ͷʹԿΒ͔ͷอূΛ ༩͑Δ΋ͷͰ͸ͳ͍ɻ͜ͷ఺͕͜Ε·Ͱͷʮಗ໊Խʯʮ౷ܭԽʯͰ࿦͡ΒΕ͖ͯͨ҆શੑͱ؍఺͕ҟͳΔ

    • ͦ΋ͦ΋Θ͔ΓͮΒ͍ • ೝূ੍౓ͷΑ͏ͳऔΓ૊Έ͕ඞཁ͔΋͠Εͳ͍͕ɺͦ΋ͦ΋ਖ਼͘͠ཧղ͍ͯ͠Δٕज़ऀ͕ࠃ಺Ͱ͸ رগͳଘࡏͰ͋Δ఺͕࠷େͷ՝୊ • ٕज़ऀͷෆ଍ • ࠃ಺Ͱࠩ෼ϓϥΠόγʔΛ஌͍ͬͯΔਓ͕গͳ͍͠ɺਖ਼͘͠ཧղ͍ͯ͠Δਓ͸ҰѲΓ • ۙ೥͸ɺൿີܭࢉͱͷϋΠϒϦου͕૿Ճɻٕज़త೉қ౓͕ߋʹߴ·͍ͬͯΔ • 64ͷϏοάςοΫ͕ٕज़ऀΛಠ઎ • ڭҭ͕ඞཁ