Privacy in population protocols with probabilistic scheduling

Talley Amir and James Aspnes. Privacy in population protocols with probabilistic scheduling. Stabilization, Safety, and Security of Distributed Systems (SSS 2023), October 2023, pp. 400–413.

Abstract

The population protocol model offers a theoretical framework for designing and analyzing distributed algorithms among limited-resource mobile agents. While the original population protocol model considers the concept of anonymity, the issue of privacy is not investigated thoroughly. However, there is a need for time- and space-efficient privacy-preserving techniques in the population protocol model if these algorithms are to be implemented in settings handling sensitive data, such as sensor networks, IoT devices, and drones. In this work, we introduce several formal definitions of privacy, ranging from assuring only plausible deniability of the population input vector to having a full information-theoretic guarantee that knowledge beyond an agent’s input and output bear no influence on the probability of a particular input vector. We then apply these definitions to both existing and novel protocols. We show that the Remainder-computing protocol of Delporte-Gallet et al. (which is proven to satisfy output independent privacy under adversarial scheduling) is not information-theoretically private under probabilistic scheduling. In contrast, we provide a new algorithm and demonstrate that it correctly and information-theoretically privately computes Remainder under probabilistic scheduling.

BibTeX

Download
@inproceedings{AmirA2023,
author="Amir, Talley
and Aspnes, James",
editor="Dolev, Shlomi
and Schieber, Baruch",
title="Privacy in Population Protocols with Probabilistic Scheduling",
booktitle="Stabilization, Safety, and Security of Distributed Systems",
year="2023",
publisher="Springer Nature Switzerland",
address="Cham",
pages="400--413",
abstract="The population protocol model [3] offers a theoretical framework for designing and analyzing distributed algorithms among limited-resource mobile agents. While the original population protocol model considers the concept of anonymity, the issue of privacy is not investigated thoroughly. However, there is a need for time- and space-efficient privacy-preserving techniques in the population protocol model if these algorithms are to be implemented in settings handling sensitive data, such as sensor networks, IoT devices, and drones. In this work, we introduce several formal definitions of privacy, ranging from assuring only plausible deniability of the population input vector to having a full information-theoretic guarantee that knowledge beyond an agent's input and output bear no influence on the probability of a particular input vector. We then apply these definitions to both existing and novel protocols. We show that the Remainder-computing protocol from [10] (which is proven to satisfy output independent privacy under adversarial scheduling) is not information-theoretically private under probabilistic scheduling. In contrast, we provide a new algorithm and demonstrate that it correctly and information-theoretically privately computes Remainder under probabilistic scheduling.",
isbn="978-3-031-44274-2"
}

Consolidated BibTeX file
Return to James Aspnes's publications
Return to James Aspnes's home page