{"id":"https://openalex.org/W3003615979","doi":"https://doi.org/10.1145/3372297.3417242","title":"Private Summation in the Multi-Message Shuffle Model","display_name":"Private Summation in the Multi-Message Shuffle Model","publication_year":2020,"publication_date":"2020-10-30","ids":{"openalex":"https://openalex.org/W3003615979","doi":"https://doi.org/10.1145/3372297.3417242","mag":"3003615979"},"language":"en","primary_location":{"id":"doi:10.1145/3372297.3417242","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3372297.3417242","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3372297.3417242","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2020 ACM SIGSAC Conference on Computer and Communications Security","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["arxiv","crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://dl.acm.org/doi/pdf/10.1145/3372297.3417242","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":null,"display_name":"Borja Balle","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Borja Balle","raw_affiliation_strings":["Unaffiliated, , United Kingdom"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Unaffiliated, , United Kingdom","institution_ids":[]}]},{"author_position":"middle","author":{"id":null,"display_name":"James Bell","orcid":null},"institutions":[{"id":"https://openalex.org/I4210128584","display_name":"The Alan Turing Institute","ror":"https://ror.org/035dkdb55","country_code":"GB","type":"facility","lineage":["https://openalex.org/I4210128584"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"James Bell","raw_affiliation_strings":["The Alan Turing Institute, London, United Kingdom"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"The Alan Turing Institute, London, United Kingdom","institution_ids":["https://openalex.org/I4210128584"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Adri\u00e0 Gasc\u00f3n","orcid":null},"institutions":[{"id":"https://openalex.org/I4210113297","display_name":"Google (United Kingdom)","ror":"https://ror.org/024bc3e07","country_code":"GB","type":"company","lineage":["https://openalex.org/I1291425158","https://openalex.org/I4210113297","https://openalex.org/I4210128969"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Adri\u00e0 Gasc\u00f3n","raw_affiliation_strings":["Google, London, United Kingdom"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Google, London, United Kingdom","institution_ids":["https://openalex.org/I4210113297"]}]},{"author_position":"last","author":{"id":null,"display_name":"Kobbi Nissim","orcid":null},"institutions":[{"id":"https://openalex.org/I184565670","display_name":"Georgetown University","ror":"https://ror.org/05vzafd60","country_code":"US","type":"education","lineage":["https://openalex.org/I184565670"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Kobbi Nissim","raw_affiliation_strings":["Georgetown University, Washington, DC, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Georgetown University, Washington, DC, USA","institution_ids":["https://openalex.org/I184565670"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":true,"cited_by_count":56,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"657","last_page":"676"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10237","display_name":"Cryptography and Data Security","score":0.9994999766349792,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9901000261306763,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/differential-privacy","display_name":"Differential privacy","score":0.6692000031471252},{"id":"https://openalex.org/keywords/bounded-function","display_name":"Bounded function","score":0.604200005531311},{"id":"https://openalex.org/keywords/protocol","display_name":"Protocol (science)","score":0.5630999803543091},{"id":"https://openalex.org/keywords/feature","display_name":"Feature (linguistics)","score":0.41519999504089355},{"id":"https://openalex.org/keywords/word-error-rate","display_name":"Word error rate","score":0.3549000024795532},{"id":"https://openalex.org/keywords/binary-logarithm","display_name":"Binary logarithm","score":0.3547999858856201},{"id":"https://openalex.org/keywords/communication-complexity","display_name":"Communication complexity","score":0.3138999938964844}],"concepts":[{"id":"https://openalex.org/C23130292","wikidata":"https://www.wikidata.org/wiki/Q5275358","display_name":"Differential privacy","level":2,"score":0.6692000031471252},{"id":"https://openalex.org/C34388435","wikidata":"https://www.wikidata.org/wiki/Q2267362","display_name":"Bounded function","level":2,"score":0.604200005531311},{"id":"https://openalex.org/C2780385302","wikidata":"https://www.wikidata.org/wiki/Q367158","display_name":"Protocol (science)","level":3,"score":0.5630999803543091},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5242999792098999},{"id":"https://openalex.org/C2776401178","wikidata":"https://www.wikidata.org/wiki/Q12050496","display_name":"Feature (linguistics)","level":2,"score":0.41519999504089355},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.39480000734329224},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.3885999917984009},{"id":"https://openalex.org/C40969351","wikidata":"https://www.wikidata.org/wiki/Q3516228","display_name":"Word error rate","level":2,"score":0.3549000024795532},{"id":"https://openalex.org/C63553672","wikidata":"https://www.wikidata.org/wiki/Q581168","display_name":"Binary logarithm","level":2,"score":0.3547999858856201},{"id":"https://openalex.org/C118615104","wikidata":"https://www.wikidata.org/wiki/Q121416","display_name":"Discrete mathematics","level":1,"score":0.33719998598098755},{"id":"https://openalex.org/C179145077","wikidata":"https://www.wikidata.org/wiki/Q5154130","display_name":"Communication complexity","level":2,"score":0.3138999938964844},{"id":"https://openalex.org/C77618280","wikidata":"https://www.wikidata.org/wiki/Q1155772","display_name":"Scheme (mathematics)","level":2,"score":0.31040000915527344},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.28450000286102295},{"id":"https://openalex.org/C2778744346","wikidata":"https://www.wikidata.org/wiki/Q1152224","display_name":"Distinctive feature","level":2,"score":0.27959999442100525},{"id":"https://openalex.org/C139945424","wikidata":"https://www.wikidata.org/wiki/Q1940696","display_name":"Mean squared error","level":2,"score":0.27140000462532043},{"id":"https://openalex.org/C93226319","wikidata":"https://www.wikidata.org/wiki/Q193137","display_name":"Differential (mechanical device)","level":2,"score":0.2628999948501587},{"id":"https://openalex.org/C158156997","wikidata":"https://www.wikidata.org/wiki/Q1416645","display_name":"Models of communication","level":2,"score":0.2621000111103058},{"id":"https://openalex.org/C12269588","wikidata":"https://www.wikidata.org/wiki/Q132364","display_name":"Communications protocol","level":2,"score":0.2605000138282776},{"id":"https://openalex.org/C149629883","wikidata":"https://www.wikidata.org/wiki/Q660926","display_name":"Fraction (chemistry)","level":2,"score":0.2551000118255615}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1145/3372297.3417242","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3372297.3417242","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3372297.3417242","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2020 ACM SIGSAC Conference on Computer and Communications Security","raw_type":"proceedings-article"},{"id":"pmh:oai:arXiv.org:2002.00817","is_oa":true,"landing_page_url":"http://arxiv.org/abs/2002.00817","pdf_url":"https://arxiv.org/pdf/2002.00817","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"}],"best_oa_location":{"id":"doi:10.1145/3372297.3417242","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3372297.3417242","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3372297.3417242","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2020 ACM SIGSAC Conference on Computer and Communications Security","raw_type":"proceedings-article"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G1633672591","display_name":null,"funder_award_id":"N510129","funder_id":"https://openalex.org/F4320334627","funder_display_name":"Engineering and Physical Sciences Research Council"},{"id":"https://openalex.org/G2932985130","display_name":null,"funder_award_id":"EP/N510129/1","funder_id":"https://openalex.org/F4320320279","funder_display_name":"University of Warwick"},{"id":"https://openalex.org/G3855435662","display_name":null,"funder_award_id":"N510129","funder_id":"https://openalex.org/F4320313467","funder_display_name":"Alan Turing Institute"},{"id":"https://openalex.org/G4072067573","display_name":null,"funder_award_id":"EP/N510129/1","funder_id":"https://openalex.org/F4320313467","funder_display_name":"Alan Turing Institute"},{"id":"https://openalex.org/G444630160","display_name":null,"funder_award_id":"EP/N510129/","funder_id":"https://openalex.org/F4320334627","funder_display_name":"Engineering and Physical Sciences Research Council"},{"id":"https://openalex.org/G4500485203","display_name":"The Alan Turing Institute","funder_award_id":"EP/N510129/1","funder_id":"https://openalex.org/F4320334627","funder_display_name":"Engineering and Physical Sciences Research Council"},{"id":"https://openalex.org/G777199097","display_name":null,"funder_award_id":"EPSRC grant EP/N510129/1","funder_id":"https://openalex.org/F4320334627","funder_display_name":"Engineering and Physical Sciences Research Council"},{"id":"https://openalex.org/G8597009950","display_name":null,"funder_award_id":"EP/N510129/1","funder_id":"https://openalex.org/F4320334627","funder_display_name":"Engineering and Physical Sciences Research Council"}],"funders":[{"id":"https://openalex.org/F4320306076","display_name":"National Science Foundation","ror":"https://ror.org/021nxhr62"},{"id":"https://openalex.org/F4320313467","display_name":"Alan Turing Institute","ror":"https://ror.org/035dkdb55"},{"id":"https://openalex.org/F4320314707","display_name":"Government of the United Kingdom","ror":"https://ror.org/05wnh3t63"},{"id":"https://openalex.org/F4320320279","display_name":"University of Warwick","ror":"https://ror.org/01a77tt86"},{"id":"https://openalex.org/F4320334627","display_name":"Engineering and Physical Sciences Research Council","ror":"https://ror.org/0439y7842"}],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W3003615979.pdf","grobid_xml":"https://content.openalex.org/works/W3003615979.grobid-xml"},"referenced_works_count":19,"referenced_works":["https://openalex.org/W1604615751","https://openalex.org/W1872473787","https://openalex.org/W1873763122","https://openalex.org/W1886087434","https://openalex.org/W2006737181","https://openalex.org/W2097272254","https://openalex.org/W2110824700","https://openalex.org/W2525846285","https://openalex.org/W2761138375","https://openalex.org/W2902964282","https://openalex.org/W2951475234","https://openalex.org/W2987044966","https://openalex.org/W2996422317","https://openalex.org/W3004634366","https://openalex.org/W3031144431","https://openalex.org/W6760558964","https://openalex.org/W6768004216","https://openalex.org/W6770716411","https://openalex.org/W6771925198"],"related_works":[],"abstract_inverted_index":{"The":[0,242],"shuffle":[1,44,90,205],"model":[2,45,91,206],"of":[3,88,97,123,128,261,306],"differential":[4],"privacy":[5],"(Erlingsson":[6],"et":[7,12,22,139,162,226,272],"al.":[8,13,23,140,163,227,273],"SODA":[9],"2019;":[10],"Cheu":[11,138],"EUROCRYPT":[14],"2019)":[15,165],"and":[16,35,192,210,251,301],"its":[17],"close":[18],"relative":[19],"encode-shuffle-analyze":[20],"(Bittau":[21],"SOSP":[24],"2017)":[25],"provide":[26,287,295],"a":[27,61,75,169,182,217,246,258,288],"fertile":[28],"middle":[29],"ground":[30],"between":[31,298],"the":[32,40,43,72,89,95,111,115,121,126,157,190,204,222,262],"well-known":[33],"local":[34,41,191],"central":[36,116,158,193],"models.":[37,194],"Similarly":[38],"to":[39,66,71,105,110,149,175,267],"model,":[42],"assumes":[46],"an":[47],"untrusted":[48],"data":[49],"collector":[50,73],"who":[51],"receives":[52],"privatized":[53],"messages":[54,68,80,98,145,239,253,282],"from":[55,69,82,224,264],"users,":[56,137],"but":[57],"in":[58,74,114,156,189,203],"this":[59],"case":[60],"secure":[62,265],"shuffler":[63],"is":[64,92,187,216,245],"used":[65],"transmit":[67],"users":[70],"way":[76],"that":[77,93,142,168,292],"hides":[78],"which":[79,83],"came":[81],"user.":[84,241],"An":[85],"interesting":[86],"feature":[87],"increasing":[94],"amount":[96],"sent":[99],"by":[100,134,270],"each":[101],"user":[102,147,173,255],"can":[103],"lead":[104],"protocols":[106,200,294],"with":[107,207,235,248],"accuracies":[108],"comparable":[109],"ones":[112],"achievable":[113,188],"model.":[117],"In":[118],"particular,":[119],"for":[120,201,303],"problem":[122],"privately":[124],"computing":[125],"sum":[127],"n":[129,135],"bounded":[130],"real":[131],"values":[132,305],"held":[133],"different":[136],"showed":[141,167],"O(sqrtn":[143],")":[144,177],"per":[146,172,240,254,283],"suffice":[148],"achieve":[150],"O(1)":[151,249,252],"error":[152,234,250],"(the":[153,276],"optimal":[154],"rate":[155,183],"model),":[159],"while":[160],"Balle":[161,225],"(CRYPTO":[164],"recently":[166],"single":[170],"message":[171],"leads":[174],"Theta(n^1/3":[176],"MSE":[178],"(mean":[179],"squared":[180],"error),":[181],"strictly":[184],"in-between":[185],"what":[186],"This":[195],"paper":[196],"introduces":[197],"two":[198],"new":[199],"summation":[202,266],"improved":[208],"accuracy":[209,300],"communication":[211,302],"trade-offs.":[212],"Our":[213],"first":[214],"contribution":[215,244],"recursive":[218],"construction":[219],"based":[220,256],"on":[221,257],"protocol":[223,247],"mentioned":[228],"above,":[229],"providing":[230],"poly(log":[231],"log":[232,237],"n)":[233,238,281],"O(log":[236,280],"second":[243],"novel":[259],"analysis":[260],"reduction":[263,278],"shuffling":[268],"introduced":[269],"Ishai":[271],"(FOCS":[274],"2006)":[275],"original":[277],"required":[279],"user).":[284],"We":[285],"also":[286],"numerical":[289],"evaluation":[290],"showing":[291],"our":[293],"good":[296],"trade-offs":[297],"privacy,":[299],"realistic":[304],"n.":[307]},"counts_by_year":[{"year":2026,"cited_by_count":6},{"year":2025,"cited_by_count":5},{"year":2024,"cited_by_count":16},{"year":2023,"cited_by_count":14},{"year":2022,"cited_by_count":4},{"year":2021,"cited_by_count":7},{"year":2020,"cited_by_count":4}],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2020-02-07T00:00:00"}
