How To Preserve Privacy In Information Management Systems

Transcription

1 Advanced Information and Knowledge Processing Series Editors Professor Lakhmi Jain Professor Xindong Wu For other titles published in this series, go to

2

3 Jordi Nin Javier Herranz Editors Privacy and Anonymity in Information Management Systems New Techniques for New Practical Problems 123

4 Editors Dr. Jordi Nin Universitat Politècnica de Catalunya Dept. Arquitectura de Computadors C. Jordi Girona Barcelona Spain Dr. Javier Herranz Universitat Politècnica de Catalunya Dept. Matemàtica Aplicada IV C. Jordi Girona Barcelona Spain AI&KP ISSN ISBN e-isbn DOI / Springer London Dordrecht Heidelberg New York British Library Cataloguing in Publication Data A catalogue record for this book is available from the British Library Library of Congress Control Number: c Springer-Verlag London Limited 2010 Apart from any fair dealing for the purposes of research or private study, or criticism or review, as permitted under the Copyright, Designs and Patents Act 1988, this publication may only be reproduced, stored or transmitted, in any form or by any means, with the prior permission in writing of the publishers, or in the case of reprographic reproduction in accordance with the terms of licenses issued by the Copyright Licensing Agency. Enquiries concerning reproduction outside those terms should be sent to the publishers. The use of registered names, trademarks, etc., in this publication does not imply, even in the absence of a specific statement, that such names are exempt from the relevant laws and regulations and therefore free for general use. The publisher makes no representation, express or implied, with regard to the accuracy of the information contained in this book and cannot accept any legal responsibility or liability for any errors or omissions that may be made. Printed on acid-free paper Springer is part of Springer Science+Business Media (

5 No one shall be subjected to arbitrary interference with his privacy, family, home or correspondence, nor to attacks upon his honour and reputation. Everyone has the right to the protection of the law against such interference or attacks Article 12 of Universal Declaration of Human Rights (1948)

6

7 Foreword As depicted in David Lodge s celebrated novel Small World, the perceived size of our world experienced a progressive decrease as jet airplanes became affordable to ever greater shares of the earth s population. Yet, the really dramatic shrinking had to wait until the mid-1990s, when Internet became widespread and the information age stopped being an empty buzzword. But small is not necessarily beautiful. We now live in a global village and, alas, some (often very powerful) voices state that we ought not expect any more privacy in it. Should this be true, we would have created our own nightmare: a global village combining the worst of conventional villages, where a lot of information on an individual is known by the other villagers, and conventional big cities, where the invidual feels lost in a grim and potentially dangerous place. Whereas security is essential for organizations to survive, individuals and sometimes even companies also need some privacy to develop comfortably and lead a free life. This is the reason why individual privacy is mentioned in the Universal Declaration of Human Rights (1948) and data privacy is protected by law in most Western countries. Indeed, without privacy, the rest of fundamental rights, like freedom of speech and democracy, are impaired. The outstanding challenge is to create technology that implements those legal guarantees in a way compatible with functionality and security. This book edited by Dr. Javier Herranz and Dr. Jordi Nin is devoted to edgecutting data privacy technologies devised to cope with the huge automated private data collection inherent to the information society. Indeed, electronic transactions over the Internet, mobile phones, etc., result in vast amounts of data being collected which add to the data traditionally collected by government agencies. If no special protective action was taken, pooling all those data would allow creating fairly accurate profiles of each citizen or consumer. Yet, the (avowable) purpose of data collection is not profiling specific individuals: rather, it is conducting statistical and/or data mining analyses in view of extracting knowledge on general trends or relationships between variables. Such analytical goals must be, and they actually are, compatible with the privacy of the individual people or organizations to which the data relate. The first part of the book gives an overview on privacy-preserving data management. Then there is a part devoted to statistical disclosure control, which aims at conciliating the utility of statistical data (whether microdata or tabular data) expected vii

8 viii Foreword by users with a sufficiently low disclosure risk required by respondents to whom the data correspond. The last part of the book deals with preserving privacy in a number of applications, like data mining, data sharing, and social networks. Hence, the book is accessible and relevant to a broad audience, including statisticians, data managers, data miners, privacy experts, and computer scientists in general. For a long time already, it has been my pleasure to do research with the coeditors and with several chapter contributors of this book. They are a fine blend of computer scientists doing research in database security and privacy, academic statisticians specializing in statistical disclosure control, and practitioners in data management and software development. Knowing nearly all of them professionally, I have every reason to expect that the reader will benefit from their proficiency and their communication skills in the area of private data management. Tarragona, 6th January 2010 (The Three Wise Men s Day) Josep Domingo-Ferrer Chairholder UNESCO Chair in Data Privacy Department of Computer Engineering and Mathematics Tarragona, Catalonia

9 Acknowledgments First of all, we want to thank the authors who accepted our invitation to prepare a chapter for this book. They did a great job, first by writing very interesting chapters and then by taking into account the comments that they got from the reviewers. They followed the guidelines and deadlines that we set, and in general, they made our editing work quite handy. We are also indebted to the external people who helped us to review the preliminary versions of the chapters. The list of reviewers is small, but their contribution has been really big. They are Mark J. Elliot, Vicenç Torra, and Alexandre Viejo. Special thanks also go to Prof. Josep Domingo-Ferrer for writing the foreword of the book. We would also like to thank the support that we have received from Springer, personified by Rebecca Mowat and Beverley Ford. Regarding institutional acknowledgments, the work of the two editors is supported by different public institutions. Both of them are supported by Spanish MEC Ministry (project ARES CONSOLIDER INGENIO 2010 CSD ). Javier Herranz enjoys a Ramón y Cajal grant, partially funded by the European Social Fund (ESF), from Spanish MICINN Ministry. Jordi Nin is supported by the European Community through the 7th Framework Programme Marie Curie Intra- European fellowship, contract No ix

10

11 Contents Part I Overview 1 Introduction to Privacy and Anonymity in Information Management Systems... 3 Javier Herranz and Jordi Nin 2 Advanced Privacy-Preserving Data Management and Analysis... 7 Alberto Trombetta, Wei Jiang, and Elisa Bertino Part II Theory of SDC 3 Practical Applications in Statistical Disclosure Control Using R Mathias Templ and Bernhard Meindl 4 Disclosure Risk Assessment for Sample Microdata Through Probabilistic Modeling Natalie Shlomo 5 Exploiting Auxiliary Information in the Estimation of Per-Record Risk of Disclosure Silvia Polettini and Loredana di Consiglio 6 Statistical Disclosure Control in Tabular Data Jordi Castro xi

12 xii Contents Part III Preserving Privacy in Distributed Applications 7 From Collaborative to Privacy-Preserving Sequential Pattern Mining Vishal Kapoor, Pascal Poncelet, Francois Trousset, and Maguelonne Teisseire 8 Pseudonymized Data Sharing David Galindo and Eric R. Verheul 9 Privacy-Aware Access Control in Social Networks: Issues and Solutions Barbara Carminati and Elena Ferrari Index...197

13 Contributors Elisa Bertino Department of Computer Science and CERIAS, Purdue University, 250 N. University Street, West Lafayette, IN, USA, Barbara Carminati Dipartimento di Informatica e Comunicazione, Università degli Studi dell Insubria, Via Mazzini 5, Varese, Italy, barbara.carminati@uninsubria.it Jordi Castro Department of Statistics and Operations Research, Universitat Politècnica de Catalunya, C. Jordi Girona 1-3, Barcelona, Catalonia, jordi.castro@upc.edu Loredana di Consiglio Istituto Nazionale di Statistica, Roma, Italy, diconsig@istat.it Elena Ferrari Dipartimento di Informatica e Comunicazione, Università degli Studi dell Insubria, Via Mazzini 5, Varese, Italy, elena.ferrari@uninsubria.it David Galindo University of Luxembourg, Luxembourg, david.galindo@uni.lu Javier Herranz Departament de Matemàtica Aplicada IV, Universitat Politècnica de Catalunya, C. Jordi Girona 1-3, Mòdul C3, Barcelona, Catalonia, jherranz@ma4.upc.edu Wei Jiang Department of Computer Science, Missouri Science and Technology University, 500 West 15th Street, Rolla, MO, USA, wjiang@cs.mst.edu Vishal Kapoor Microsoft, One Microsoft Way, Redmond, WA , USA, vishal.kapoor@microsoft.com Bernhard Meindl Department of Register, Classification and Methodology, Statistics Austria, Guglgasse 13, A-1110 Vienna, Austria, bernhard.meindl Jordi Nin Universitat Politècnica de Catalunya, Dept. Arquitectura de Computadors, C. Jordi Girona 1-3, Barcelona, Spain, nin@ac.upc.edu Silvia Polettini Dipartimento di Scienze Statistiche, Università degli Studi di Napoli Federico II, Napoli, Italy, s.polettini@unina.it xiii

14 xiv Contributors Pascal Poncelet LIRMM UMR CNR5 5506, 161 Rue Ada, 34392, Montpellier Cedex 5, France, Natalie Shlomo Southampton Statistical Sciences Research Institute, University of Southampton, Southampton, SO17 1BJ, UK, Maguelonne Teisseire UMR TETIS, Maison de la Télédetection, 500, rue J.F. Breton 34093, Montpellier Cedex 5, France, Mathias Templ Department of Statistics and Probability Theory, Vienna University of Technology, Wiedner Hauptstr. 7, A-1040 Vienna, Austria; Department of Register, Classification and Methodology, Statistics Austria, Guglgasse 13, A-1110 Vienna, Austria, Alberto Trombetta Dipartimento di Informatica e Comunicazione, Università degli Studi dell Insubria, Via Mazzini 5, Varese, Italy, alberto.trombetta@uninsubria.it Francois Trousset EMA-LGI2P/EERIE, Parc Scientifique Georges Besse, Nîmes Cedex, France, Francois.Trousset@mines-ales.fr Eric R. Verheul Radboud University Nijmegen & PricewaterhouseCoopers Advisory, The Netherlands, eric.verheul@nl.pwc.com, cs.ru.nl