3 ms·
no mention of k-anon or l-diversity in the aggregates. was that just to keep things simple, or do you really not enforce that?
by andrewcooke 13y ago
no mention of k-anon or l-diversity in the aggregates. was that just to keep things simple, or do you really not enforce that?
- samphippen 13y agoHi Andrew, to cut a long story short, we've done some work to decrease the resolution of the encrypted data in the aggregates. For example: we store age to nearest year instead of date of birth, location is severely reduced in resolution from address to state and so on. By this way we're confident these attacks aren't directly applicable, whilst the aggregates are still useful. Your own doctor always has access to the full resolution data via access to your data key. These attacks are something we're concerned about too and we're looking to bring in third parties to ensure that our system is secure. Thanks -- Sam Phippen How are you? Engineer
- andrewcooke 13y agogreat - sounds good, thanks for replying.