Local Generalization and Bucketization Technique for Personalized Privacy Preservation

TL;DR

This paper introduces a novel local generalization and bucketization method for anonymizing data, effectively protecting individual privacy by handling semi-sensitive attributes and allowing flexible, independent privacy protections across attributes.

Contribution

It proposes a new anonymization technique that combines local generalization and bucketization, addressing semi-sensitive attributes and enabling independent, customizable privacy protections.

Findings

The approach effectively prevents identity disclosure.

It protects sensitive values across various attributes.

Experiments demonstrate the method's effectiveness.

Abstract

Anonymization technique has been extensively studied and widely applied for privacy-preserving data publishing. In most previous approaches, a microdata table consists of three categories of attribute: explicit-identifier, quasi-identifier (QI), and sensitive attribute. Actually, different individuals may have different view on the sensitivity of different attributes. Therefore, there is another type of attribute that contains both QI values and sensitive values, namely, semi-sensitive attribute. Based on such observation, we propose a new anonymization technique, called local generalization and bucketization, to prevent identity disclosure and protect the sensitive values on each semi-sensitive attribute and sensitive attribute. The rationale is to use local generalization and local bucketization to divide the tuples into local equivalence groups and partition the sensitive values into local buckets, respectively. The protections of local generalization and local bucketization are independent, so that they can be implemented by appropriate algorithms without weakening other protection, respectively. Besides, the protection of local bucketization for each semi-sensitive attribute and sensitive attribute is also independent. Consequently, local bucketization can comply with various principles in different attributes according to the actual requirements of anonymization. The conducted extensive experiments illustrate the effectiveness of the proposed approach.