Upgrade to Pro — share decks privately, control downloads, hide ads and more …

差分プライバシー入門

Sponsored · Ship Features Fearlessly Turn features on and off without deploys. Used by thousands of Ruby developers.

 差分プライバシー入門

差分プライバシーが求められている背景と、差分プライバシーの概要についてご紹介します。

More Decks by LINEヤフーTech (LY Corporation Tech)

Other Decks in Technology

Transcript

  1. ˜-:$PSQPSBUJPO  5TVCBTB 5",")"4)* 1I% IUUQTXXXOFDTPMVUJPOJOOPWBUPSTDPKQTMEBOPOZ /&$ -*/& -*/&Ϡϑʔ 4#*OUVJUJPOT

    d d /&$σʔλಗ໊ԽιϦϡʔγϣϯ ʮ-*/&ʯΞϓϦͷελϯϓαδΣετ ࿈߹ֶश ࠩ෼ϓϥΠόγʔ IUUQTMJOFDPSQDPNKB TFDVSJUZBSUJDMF ੜ੒"* ετϨε ςετ"* ҙਤతͳ߈ܸతΫΤϦ 8BUFSNBSL %JGGVTJPO.PEFM --.ͷετϨεςετ ఢରతಁ͔͠ʹΑΔஶ࡞ݖอޢ $.6d ໦ߋ௡ߴઐ ஜ೾େֶ
  2. ˜-:$PSQPSBUJPO  1SJWBDZ&OIBODJOH5FDIOPMPHJFT 1&5T 1&5Tʹ͸ɺ ҉߸౳ʹΑΔΞΫηε੍ޚٕज़ͱ  ৘ใͦͷ΋ͷΛՃ޻͢Δٕज़ ͕͋Δ ࿈߹ֶशɾ

    ہॴࠩ෼ϓϥΠόγʔ ಗ໊Խɾσʔλ߹੒ ࠩ෼ϓϥΠόγʔ ੺͍఺ઢΑΓࠨଆ͕ϓϥΠόγʔอޢͷൣғ FHಗ໊Խ΍ࠩ෼ϓϥΠόγʔ FH࿈߹ֶश΍ൿີܭࢉ
  3. ˜-:$PSQPSBUJPO  ࠩ෼ϓϥΠόγʔͱ͸ ϊΠζʢ ʣ͕Ճࢉ͞Ε͍ͯΔͱϓϥΠόγʔอޢ͞Ε͍ͯΔΑ͏ʹײ͡·ͤΜ͔ʁ ౷ܭత ͳग़ྗ ϊΠζ ΛՃࢉ 𝜖

     ∞    TUSPOH XFBL   ʜ ࠩ෼ϓϥΠόγʔ͕ఏڙ͢Δ΋ͷ • ϊΠζͷՃࢉʹର͢Δ ཧ࿦తͳϓϥΠόγʔอޢͷई౓ • ॴఆͷϓϥΠόγʔڧ౓ 𝜖 ͷ ୡ੒ʹඞཁͳϊΠζͷಋग़
  4. ˜-:$PSQPSBUJPO  ͭͷओཁͳϓϥΠόγʔϞσϧ $FOUSBM %JGGFSFOUJBM1SJWBDZ -PDBM%JGGFSFOUJBM1SJWBDZ ୈࡾऀ΁ͷ ౷ܭ஋ͷެ։ ػඍͳ ౷ܭͷऩू

    αʔόʔΛ ৴༻͠ͳ͍ αʔόʔΛ ৴༻͢Δ ಋೖࣄྫ • $ISPNFϒϥ΢βͰͷ౷ܭऩू (PPHMF • J04σόΠεͰͷ౷ܭऩू "QQMF • ελϯϓαδΣετͷ࿈߹ֶश -*/&Ϡϑʔ ಋೖࣄྫ • ೥౓ถࠃࠃ੎ௐࠪ 64$FOTVT  • 'VMM63-TEBUBTFU .FUB • /FYUXPSEQSFEJDUJPOJO(CPBSE (PPHMF • "VEJFODF&OHBHFNFOU"1* -JOLFE*O ʢ͝ࢀߟʣ"MJTUPGSFBMXPSMEVTFPGEJGGFSFOUJBMQSJWBDZIUUQTEFTGPOUBJOFTQSJWBDZSFBMXPSMEEJGGFSFOUJBMQSJWBDZIUNM
  5. ˜-:$PSQPSBUJPO  64$FOTVTͰࠩ෼ϓϥΠόγʔΛར༻ͨ͠ཧ༝ • ࠩ෼ϓϥΠόγʔ͸ɺࠓ೔ͷϓϥΠόγʔڴҖʹର͢Δ ࠷৽ͷηʔϑΨʔυͰ͋Δ • εύίϯ͸ɺݸਓ৘ใΛಛఆ͢ΔͨΊʹෳ਺ͷ%#͔Β σʔλΛݟ͚ͭग़͠ɺর߹͢Δ͜ͱͰɺ܈ऺͷத͔Β͋ ͳͨΛ༰қʹબͼग़͢ʢڱ͍஍ҬʹॅΜͰ͍ͯɺྡਓͱ

    ਓछ΍ຽ଒͕ҟͳΔ৔߹͸ಛʹʣ • ϓϥΠόγʔʹର͢ΔਂࠁͳڴҖ͸ɺ೥લͷࠃ੎ௐࠪ ͷ࣌ʹ͸ଘࡏ͠ͳ͔ͬͨ΋ͷͰ͋Δ • ࢲͨͪ͸ɺਓʑͷϓϥΠόγʔΛอޢ͠ଓ͚ΔͨΊʹɺ ৽͍ٕ͠ज़Λ࢖Θͳ͚Ε͹ͳΒͳ͍ • ࠓ೔ͷϓϥΠόγʔͷڴҖͷن໛Λߟ͑Δͱɺաڈͷํ ๏͸ɺެද͞Εͨσʔλʹஶ͘͠େ͖ͳ࿪ΈΛੜͤ͡͞ɺ σʔλͷଟ͘Λ࢖༻Ͱ͖ͳͯ͘͠͠·͏ͩΖ͏ IUUQTXXXDFOTVTHPWDPOUFOUEBN$FOTVTMJCSBSZGBDUTIFFUTEJGGFSFOUJBMQSJWBDZBOEUIFDFOTVTQEG
  6. ˜-:$PSQPSBUJPO  ถࠃ."भʹ͓͚Δ࠶ࣝผͷ໰୊ ೥୅ • ถࠃ."भͰ͸ɺभͷ৬һͷ௨Ӄه࿥ " Λر๬͢Δݚڀऀʹެ։ ໊લ͸࡟আ •

    έϯϒϦοδࢢͷ༗ݖऀσʔλϕʔε # ͸υϧͰߪೖͰ͖ͨ • " ͱ # ͷ૊Έ߹Θ͔ͤΒ8FME஌ࣄͷϨίʔυ͕؆୯ʹಛఆͰ͖ͨ (FOEFS ;JQ #JSUI %JTFBTF ' B YYBBCC "#$ . C YYZZ[[ %&' . D BCXXUU ()* ' E NOQQRR +,- /BNF (FOEFS ;JQ #JSUI ʜ ' B YYBBCC 8JMMJBN8FME . C YYZZ[[ . D BCXXUU ' E NOQQRR /BNF (FOEFS ;JQ #JSUI %JTFBTF ' B YYBBCC "#$ 8JMMJBN8FME . C YYZZ[[ %&' . D BCXXUU ()* ' E NOQQRR +,- +0*/ ४ࣝผࢠ 2VBTJ*EFOUJGJFS2*%
  7. ˜-:$PSQPSBUJPO  /FUGMJY1SJ[Fͷ࠶ࣝผͷ໰୊  • ಗ໊Խ͞Ε͍ͯͳ͍֎෦ͷσʔλϕʔε *.%# ͱͷಥ߹ʹΑͬͯɺಗ໊Խ͞Ε͍ͯͨίϝ ϯτͱϢʔβ͕ରԠ෇͍ͯ͠·ͬͨ •

    ίϝϯτʹ͸੓࣏৴৚͕Θ͔Δ΋ͷ΋͋ͬͨ • ݸͷධՁͱ೔෇ िؒҎ಺ͷਫ਼౓ ͕෼͔Ε͹ͷਫ਼౓ͰݸਓΛಛఆͰ͖ͨ 6TFSOBNF 5JUMF 3BUF "MJDF """  ###  %%%  #PC """  999  1TFVEP*% 5JUMF 3BUF $PNNFOU Y """  ###  %%%  *UTFFNTYYY B :::  999  "OPOZNJ[FE/FUGMJY.PWJFSBOLJOHEBUB /POBOPOZNPVT*.%#NPWJFSBUJOH +0*/
  8. ˜-:$PSQPSBUJPO  Lಗ໊Խ • ಗ໊Խɿσʔλͷಛఆ΍ࣝผΛࠔ೉ʹ͢ΔͨΊʹߦ͏σʔλͷՃ޻ॲཧ • Lಗ໊Խɿ%#಺ʹɺ೚ҙͷϨίʔυͱಉ͡४ࣝผࢠͷ૊Λ࣋ͭଞͷϨίʔυ͕Lݸଘࡏ • ४ࣝผࢠ 2VBTJ*EFOUJGJFS

    ɿ૊߹ͤʹΑͬͯݸਓΛࣝผ͠ಘΔଐੑͷू߹ɻࣄલʹఆٛ "HF (FOEFS 4BMBSZ "MJDF  'FNBMF . #PC  .BMF . $IBSMJF  .BMF . %BWJE  .BMF , &NNB  'FNBMF . 'SBOD  .BMF . (FPSHF  .BMF , )BOB  'FNBMF , "HF (FOEFS 4BMBSZ  .  .  .  ,  .  .  ,  , Lಗ໊Խ L
  9. ˜-:$PSQPSBUJPO  Lಗ໊Խͷݶք • ४ࣝผࢠҎ֎ͷଐੑʹର͢Δ֎෦஌ࣝͷಥ߹ʹΑΓɺLಗ໊ԽΛഁΒΕΔ͜ͱ͕͋Δ • è ߈ܸऀͷഎܠ஌ࣝʹΑͬͯ͸ಗ໊ੑ͕े෼Ͱͳ͍ "HF (FOEFS

    4BMBSZ  .  .  .  ,  .  .  ,  , Lಗ໊Խ L "HF (FOEFS 1IPOF "MJDF  'FNBMF  #PC  .BMF  $IBSMJF  .BMF  %BWJE  .BMF  &NNB  'FNBMF  'SBOD  .BMF  (FPSHF  .BMF  )BOB  'FNBMF  (FOEFS 4BMBSZ #PC .BMF . &NNB 'FNBMF . (FPSHF .BMF , ᶃ ᶃ ᶄ 'SBODà 4BMBSZ. ΛಛఆͰ͖ͯ͠·͏ ఢରऀͷ֎෦஌ࣝ
  10. ˜-:$PSQPSBUJPO  2VJ[ͷճ౴ BWHTBMBSZ ສԁ BWHTBMBSZ ສԁ ʲ2VJ[ʳ"MJDFͷ೥ऩ͸ʁ ʜ ʜ

    ʜ ʜ "MJDF "MJDF͕ୀ৬ FOHJOFFST FOHJOFFST ೥ ೥ Yr Y ສԁ ౴͑
  11. ˜-:$PSQPSBUJPO  ࠩ෼߈ܸͷࣄྫ • 'BDFCPPLͷ1**CBTFE5BSHFUJOH ݱࡏ͸मਖ਼ࡁΈ • ޿ࠂλʔήςΟϯάͷޮՌΛܭଌ͢ΔͨΊͷ౷ܭ෼ੳ"1* • ։੍ࣔޚͷͨΊʹᮢ஋ʹΑΔอޢΛಋೖ͍͕ͯͨ͠ɺόΠύε͞Εͨ

    • ి࿩൪߸΍ϝʔϧΞυϨεɺ8FCӾཡཤྺ͕࿙Ӯ IUUQTXXXZPVUVCFDPNXBUDI W-Q *X:WY(QL IUUQTXXXGUDHPWTZTUFNGJMFTEPDVNFOUTQVCMJD@FWFO UTQQSJWBDZDPONJTMPWF@QEG
  12. ˜-:$PSQPSBUJPO  ౷ܭͷ҆શͳ։ࣔ r ස౓ͱࠩ෼ͷ͖͍͠஋ॲཧ  • ݪཧతʹ͸Մೳ͕ͩɺ͋Γͱ͋ΒΏΔࠩ෼ΛຖճνΣοΫ͢Δ͜ͱ͸༰қͰ͸ͳ͍ • ͖͍͠஋ॲཧʹΑͬͯɺར༻ෆՄೳʹͳΔσʔλ͕ଟ਺ੜ͡ΔڪΕ

    ೥୅ ੑผ ਓ਺ ୅ உ   ୅ ঁ  ୅ உ   ୅ ঁ   ೥୅ ੑผ ਓ਺ ୅ உ   ୅ ঁ  ୅ உ   ୅ ঁ   ೥୅ ੑผ ਓ਺ ୅ உ   ୅ ঁ  ୅ உ   ୅ ঁ   ਓ਺ͷ͖͍͠஋ɿ ࠩ෼ͷ͖͍͠஋ɿ /( 0, ࣌ࠁ 5 ࣌ࠁ 5 𝜏 ݁ୗऀΛूΊΒΕͳ͍ఔ౓ʹ େ͖͍͖͍͠஋Λઃఆ ྫ
  13. ˜-:$PSQPSBUJPO  ࠩ෼ϓϥΠόγʔ͕ٻΊΒΕ͍ͯΔഎܠ L ಗ໊Խͷݶք • ֎෦஌ࣝʹ੬ऑ ɿ֎෦஌ࣝͱͷಥ߹ʹΑͬͯɺಗ໊Խ͕ഁΒΕΔڪΕ • ෳ਺ެ։ʹඇରԠɿෳ਺ͷಗ໊Խσʔλͷಥ߹ʹΑͬͯ΋ɺಗ໊Խ͕ഁΒΕΔڪΕ

    • ༗༻ੑҡ͕࣋ࠔ೉ɿσʔλͷෳࡶ౓ɺڴҖͷڧ͞ʹԠͯ͡༗༻ੑͷҡ͕࣋ΑΓࠔ೉ʹ ৽͍͠ڴҖͷొ৔ • ࠩ෼߈ܸ • σʔλϕʔε࠶ߏங߈ܸ ౷ܭσʔλ΍ػցֶशϞσϧʹର͢ΔϓϥΠόγʔई౓ͷඞཁੑ
  14. ˜-:$PSQPSBUJPO  ࠩ෼ϓϥΠόγʔͱ͸ ϊΠζʢ ʣ͕Ճࢉ͞Ε͍ͯΔͱϓϥΠόγʔอޢ͞Ε͍ͯΔΑ͏ʹײ͡·ͤΜ͔ʁ ౷ܭత ͳग़ྗ ϊΠζ ΛՃࢉ 𝜖

     ∞    TUSPOH XFBL   ʜ ࠩ෼ϓϥΠόγʔ͕ఏڙ͢Δ΋ͷ • ϊΠζͷՃࢉʹର͢Δ ཧ࿦తͳϓϥΠόγʔอޢͷई౓ • ॴఆͷϓϥΠόγʔڧ౓ 𝜖 ͷ ୡ੒ʹඞཁͳϊΠζͷಋग़
  15. ˜-:$PSQPSBUJPO  𝝐, 𝜹 %JGGFSFOUJBM1SJWBDZ ϝΧχζϜ ℳ: 𝒟 → 𝒮

    ͕ 𝜖, 𝛿 %1Λຬͨ͢ͱ͸ɺྡ઀σʔλϕʔε 𝐷, 𝐷" ∈ 𝒟 ͓Αͼ೚ҙͷग़ྗͷू߹ 𝑆 ⊆ 𝒮 ʹରͯ͠ҎԼ͕੒Γཱͭͱ͖Ͱ͋Δ %BUBCBTF𝑫 0VUQVU 𝜖  ∞    TUSPOH XFBL   ʜ Pr ℳ 𝐷 ∈ 𝑆 ≤ exp 𝜖 Pr ℳ 𝐷! ∈ 𝑆 + 𝛿 ℳ 𝑫′ɿ BEKBDFOUPG𝑫 ℳ 𝜖 ≥ 0, 𝛿 ∈ 0,1 ) ೖྗ͕มԽͯ͠΋ग़ྗʹ͸΄ͱΜͲʢexp 𝜖 ఔ౓͔͠ʣӨڹ͕ͳ͍ %XPSL%JGGFSFOUJBMQSJWBDZ*$"-1 
  16. ˜-:$PSQPSBUJPO  -BQMBDFϝΧχζϜ ࠷΋Α͘஌ΒΕͨϥϯμϜԽॲཧΛ࣮ݱ͢ΔϝΧχζϜʢ𝛿 = 0Λ૝ఆʣ ℳ 𝐷 = 𝑓

    𝐷 + Lap 0, Δ. 𝜖 -BQMBDF.FDIBOJTN 𝜖 = 10, Δ! = 1 𝜖 = 1, Δ! = 1 ฏۉɿ ඪ४ภࠩɿ 2 "! # ͷ ϥϓϥε෼෍͔ΒϊΠζΛαϯϓϦϯά Δ' = sup (,(!∈𝒟 𝑓 𝐷 − 𝑓 𝐷" , ℓ𝟏 TFOTJUJWJUZ Δ-./01 = 1 Δ2340 = 1 𝑛 ˞૝ఆ͢Δྡ઀%#ʹґଘ &Y 4FOTJUJWJUZ𝚫𝒇 ೚ҙͷҰϨίʔυͷมԽ˞͕ؔ਺ͷग़ྗʹӨڹΛ༩͑Δ౓߹͍ %XPSL%JGGFSFOUJBMQSJWBDZ*$"-1 
  17. ˜-:$PSQPSBUJPO  ࠩ෼ϓϥΠόγʔͷ՝୊ • ಁ໌ੑͷܽ೗ • ग़ྗʢ౷ܭɾػցֶशϞσϧʣ͚ͩΛݟͯ΋ࠩ෼ϓϥΠόγʔ͕อূ͞Ε͍ͯΔ͔Ͳ͏͔ෆ໌֬ • ؔ਺ʢ౷ܭॲཧ΍ػցֶशϓϩηεʣͷ҆શੑΛଌΔई౓Ͱ͋ΔͨΊɺσʔλͦͷ΋ͷʹԿΒ͔ͷอূΛ ༩͑Δ΋ͷͰ͸ͳ͍ɻ͜ͷ఺͕͜Ε·Ͱͷʮಗ໊Խʯʮ౷ܭԽʯͰ࿦͡ΒΕ͖ͯͨ҆શੑͱ؍఺͕ҟͳΔ

    • ͦ΋ͦ΋Θ͔ΓͮΒ͍ • ೝূ੍౓ͷΑ͏ͳऔΓ૊Έ͕ඞཁ͔΋͠Εͳ͍͕ɺͦ΋ͦ΋ਖ਼͘͠ཧղ͍ͯ͠Δٕज़ऀ͕ࠃ಺Ͱ͸ رগͳଘࡏͰ͋Δ఺͕࠷େͷ՝୊ • ٕज़ऀͷෆ଍ • ࠃ಺Ͱࠩ෼ϓϥΠόγʔΛ஌͍ͬͯΔਓ͕গͳ͍͠ɺਖ਼͘͠ཧղ͍ͯ͠Δਓ͸ҰѲΓ • ۙ೥͸ɺൿີܭࢉͱͷϋΠϒϦου͕૿Ճɻٕज़త೉қ౓͕ߋʹߴ·͍ͬͯΔ • 64ͷϏοάςοΫ͕ٕज़ऀΛಠ઎ • ڭҭ͕ඞཁ