arXiv:2602.22699cs.CRcs.DB2026-02中稿 · TPDP 2026

DPSQL+让数据库查询既私密又合规,支持最小频次规则。

DPSQL+: A Differentially Private SQL Library with a Minimum Frequency Rule

  • 通过静态验证和隐私累加器,同时保障用户级差分隐私与最小频次规则
  • 在TPC-H测试中,相同隐私预算下比现有工具支持更多查询类型
  • 模块化设计兼容多种数据库,适合需严格数据治理的分析场景

SQL是探索性数据分析的通用接口,但直接发布精确查询结果可能引发成员身份或属性推断攻击。差分隐私(DP)提供严格的隐私保障,但在实际应用中,仅靠DP难以满足如“最小频次规则”等治理要求——即每个输出单元必须包含至少k个不同个体的贡献。本文提出DPSQL+,一个同时满足用户级(ε,δ)-DP与最小频次规则的隐私保护SQL库。其采用模块化架构:(i) 验证器静态限制查询至安全的SQL子集;(ii) 账户器持续追踪多查询累积隐私损耗;(iii) 后端对接多种数据库引擎,保证可移植性与可扩展性。在TPC-H基准测试中,DPSQL+在各类分析工作负载(从基础聚合到二次统计、连接操作)上均实现良好准确率,并在固定全局隐私预算下支持的查询量显著超过已有工具。

原文摘要 · Abstract (English)

SQL is the de facto interface for exploratory data analysis; however, releasing exact query results can expose sensitive information through membership or attribute inference attacks. Differential privacy (DP) provides rigorous privacy guarantees, but in practice, DP alone may not satisfy governance requirements such as the \emph{minimum frequency rule}, which requires each released group (cell) to include contributions from at least $k$ distinct individuals. In this paper, we present \textbf{DPSQL+}, a privacy-preserving SQL library that simultaneously enforces user-level $(\varepsilon,δ)$-DP and the minimum frequency rule. DPSQL+ adopts a modular architecture consisting of: (i) a \emph{Validator} that statically restricts queries to a DP-safe subset of SQL; (ii) an \emph{Accountant} that consistently tracks cumulative privacy loss across multiple queries; and (iii) a \emph{Backend} that interfaces with various database engines, ensuring portability and extensibility. Experiments on the TPC-H benchmark demonstrate that DPSQL+ achieves practical accuracy across a wide range of analytical workloads -- from basic aggregates to quadratic statistics and join operations -- and allows substantially more queries under a fixed global privacy budget than prior libraries in our evaluation.

差分隐私数据库隐私SQL数据治理

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。