A. Pavan, Sourav Chakraborty, N. V. Vinodchandran, Kuldeep S. Meel
{"title":"On the Feasibility of Forgetting in Data Streams","authors":"A. Pavan, Sourav Chakraborty, N. V. Vinodchandran, Kuldeep S. Meel","doi":"10.1145/3651603","DOIUrl":null,"url":null,"abstract":"In today's digital age, it is becoming increasingly prevalent to retain digital footprints in the cloud indefinitely. Nonetheless, there is a valid argument that entities should have the authority to decide whether their personal data remains within a specific database or is expunged. Indeed, nations across the globe are increasingly enacting legislation to uphold the \"Right To Be Forgotten\" for individuals. Investigating computational challenges, including the formalization and implementation of this notion, is crucial due to its relevance in the domains of data privacy and management.\n \n This work introduces a new streaming model: the 'Right to be Forgotten Data Streaming Model' (RFDS model). The main feature of this model is that any element in the stream has the right to have its history removed from the stream. Formally, the input is a stream of updates of the form (a, Δ) where Δ ∈ {+, ⊥} and a is an element from a universe U. When the update Δ=+ occurs, the frequency of a, denoted as f\n a\n , is incremented to f\n a\n +1. When the update Δ=⊥, occurs, f\n a\n is set to 0. This feature, which represents the forget request, distinguishes the present model from existing data streaming models.\n \n \n This work systematically investigates computational challenges that arise while incorporating the notion of the right to be forgotten. Our initial considerations reveal that even estimating F\n 1\n (sum of the frequencies of elements) of the stream is a non-trivial problem in this model. Based on the initial investigations, we focus on a modified model which we call α-RFDS where we limit the number of forget operations to be at most α fraction. In this modified model, we focus on estimating F\n 0\n (number of distinct elements) and F\n 1\n . We present algorithms and establish almost-matching lower bounds on the space complexity for these computational tasks.\n","PeriodicalId":498157,"journal":{"name":"Proceedings of the ACM on Management of Data","volume":" 98","pages":""},"PeriodicalIF":0.0000,"publicationDate":"2024-05-10","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":"0","resultStr":null,"platform":"Semanticscholar","paperid":null,"PeriodicalName":"Proceedings of the ACM on Management of Data","FirstCategoryId":"0","ListUrlMain":"https://doi.org/10.1145/3651603","RegionNum":0,"RegionCategory":null,"ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":null,"EPubDate":"","PubModel":"","JCR":"","JCRName":"","Score":null,"Total":0}
引用次数: 0
Abstract
In today's digital age, it is becoming increasingly prevalent to retain digital footprints in the cloud indefinitely. Nonetheless, there is a valid argument that entities should have the authority to decide whether their personal data remains within a specific database or is expunged. Indeed, nations across the globe are increasingly enacting legislation to uphold the "Right To Be Forgotten" for individuals. Investigating computational challenges, including the formalization and implementation of this notion, is crucial due to its relevance in the domains of data privacy and management.
This work introduces a new streaming model: the 'Right to be Forgotten Data Streaming Model' (RFDS model). The main feature of this model is that any element in the stream has the right to have its history removed from the stream. Formally, the input is a stream of updates of the form (a, Δ) where Δ ∈ {+, ⊥} and a is an element from a universe U. When the update Δ=+ occurs, the frequency of a, denoted as f
a
, is incremented to f
a
+1. When the update Δ=⊥, occurs, f
a
is set to 0. This feature, which represents the forget request, distinguishes the present model from existing data streaming models.
This work systematically investigates computational challenges that arise while incorporating the notion of the right to be forgotten. Our initial considerations reveal that even estimating F
1
(sum of the frequencies of elements) of the stream is a non-trivial problem in this model. Based on the initial investigations, we focus on a modified model which we call α-RFDS where we limit the number of forget operations to be at most α fraction. In this modified model, we focus on estimating F
0
(number of distinct elements) and F
1
. We present algorithms and establish almost-matching lower bounds on the space complexity for these computational tasks.
在当今的数字时代,在云中无限期保留数字足迹的做法越来越普遍。然而,有一种合理的观点认为,实体应有权决定其个人数据是保留在特定数据库中还是被删除。事实上,全球越来越多的国家正在立法维护个人的 "被遗忘权"。研究计算方面的挑战,包括这一概念的形式化和实现,对数据隐私和管理领域至关重要。 这项工作引入了一种新的流模型:"被遗忘权数据流模型"(RFDS 模型)。该模型的主要特点是,数据流中的任何元素都有权将其历史记录从数据流中删除。形式上,输入是一个形式为 (a, Δ) 的更新流,其中 Δ∈ {+,⊥},a 是一个宇宙 U 中的一个元素。当更新 Δ=+ 发生时,a 的频率(表示为 f a)会增加到 f a+1。当更新 Δ=⊥, 发生时,f a 被设为 0。这个代表遗忘请求的特征使本模型有别于现有的数据流模型。 这项工作系统地研究了在纳入被遗忘权概念时出现的计算挑战。我们的初步研究表明,在该模型中,即使是估算数据流的 F 1(元素频率之和)也是一个非同小可的问题。在初步研究的基础上,我们重点研究了一个改进的模型,我们称之为 α-RFDS,在这个模型中,我们将遗忘操作的次数限制为最多α 次。在这个改进模型中,我们重点估算 F 0(不同元素的数量)和 F 1。我们提出了算法,并为这些计算任务的空间复杂度建立了几乎匹配的下限。