Co-Utility: Self-Enforcing Protocols without Coordination Mechanisms

Performing some task among a set of agents requires the use of some protocol that regulates the interactions between them. If those agents are rational, they may try to subvert the protocol for their own benefit, in an attempt to reach an outcome that provides greater utility. We revisit the traditional notion of self-enforcing protocols implemented using existing game-theoretic solution concepts, we describe its shortcomings in real-world applications, and we propose a new notion of self-enforcing protocols, namely co-utile protocols. The latter represent a solution concept that can be implemented without a coordination mechanism in situations when traditional self-enforcing protocols need a coordination mechanism. Co-utile protocols are preferable in decentralized systems of rational agents because of their efficiency and fairness. We illustrate the application of co-utile protocols to information technology, specifically to preserving the privacy of query profiles of database/search engine users.Comment: Proceedings of the 2015 International Conference on Industrial Engineering and Operations Management-IEOM 2015, Dubai, United Arab Emirates, March 3-5, 2015. To appear in IEEE Explor

Differentially private data publishing via cross-moment microaggregation

Differential privacy is one of the most prominent privacy notions in the field of anonymization. However, its strong privacy guarantees very often come at the expense of significantly degrading the utility of the protected data. To cope with this, numerous mechanisms have been studied that reduce the sensitivity of the data and hence the noise required to satisfy this notion. In this paper, we present a generalization of classical microaggregation, where the aggregated records are replaced by the group mean and additional statistical measures, with the purpose of evaluating it as a sensitivity reduction mechanism. We propose an anonymization methodology for numerical microdata in which the target of protection is a data set microaggregated in this generalized way, and the disclosure risk limitation is guaranteed through differential privacy via record-level perturbation. Specifically, we describe three anonymization algorithms where microaggregation can be applied to either entire records or groups of attributes independently. Our theoretical analysis computes the sensitivities of the first two central cross moments; we apply fundamental results from matrix perturbation theory to derive sensitivity bounds on the eigenvalues and eigenvectors of the covariance and coskewness matrices. Our extensive experimental evaluation shows that data utility can be enhanced significantly for medium to large sizes of the microaggregation groups. For this range of group sizes, we find experimental evidence that our approach can provide not only higher utility but also higher privacy than traditional microaggregation.The authors are thankful to A. Azzalini for his clarifications on the sampling of multivariate skew-normal distributions. Partial support to this work has been received from the European Commission (projects H2020-644024 “CLARUS” and H2020-700540 “CANVAS”), the Government of Catalonia (ICREA Academia Prize to J. Domingo-Ferrer), and the Spanish Government (projects TIN2014-57364-C2-1-R “Smart-Glacis” and TIN2016-80250-R “Sec-MCloud”). J. Parra-Arnau is the recipient of a Juan de la Cierva postdoctoral fellowship, FJCI-2014-19703, from the Spanish Ministry of Economy and Competitiveness. The authors are with the UNESCO Chair in Data Privacy, but the views in this paper are their own and are not necessarily shared by UNESCO.Postprint (author's final draft

Association of a single nucleotide polymorphism combination pattern of the Klotho gene with non-cardiovascular death in patients with chronic kidney disease

Chronic kidney disease (CKD) is associated with an elevated risk of all-cause mortality, with cardiovascular death being extensively investigated. However, non-cardiovascular mortality represents the biggest percentage, showing an evident increase in recent years. Klotho is a gene highly expressed in the kidney, with a clear influence on lifespan. Low levels of Klotho have been linked to CKD progression and adverse outcomes. Single nucleotide polymorphisms (SNPs) of the Klotho gene have been associated with several diseases, but studies investigating the association of Klotho SNPs with noncardiovascular death in CKD populations are lacking. The main aim of this study was to assess whether 11 Klotho SNPs were associated with non-cardiovascular death in a subpopulation of the National Observatory of Atherosclerosis in Nephrology (NEFRONA) study (n ¼ 2185 CKD patients). After 48 months of follow-up, 62 cardiovascular deaths and 108 non-cardiovascular deaths were recorded. We identified a high non-cardiovascular death risk combination of SNPs corresponding to individuals carrying the most frequent allele (G) at rs562020, the rare allele (C) at rs2283368 and homozygotes for the rare allele (G) at rs2320762 (rs562020 GG/AG þ rs2283368 CC/CT þ rs2320762 GG). Among the patients with the three SNPs genotyped (n ¼ 1016), 75 (7.4%) showed this combination. Furthermore, 95 (9.3%) patients showed a low-risk combination carrying all the opposite genotypes (rs562020 AA þ rs2283368 TT þ rs2320762 GT/TT). All the other combinations [n ¼ 846 (83.3%)] were considered as normal risk. Using competing risk regression analysis, we confirmed that the proposed combinations are independently associated with a higher fhazard ratio [HR] 3.28 [confidence interval (CI) 1.51-7.12]g and lower [HR 6 × 10- (95% CI 3.3 × 10--1.1 × 10-)] risk of suffering a non-cardiovascular death in the CKD population of the NEFRONA cohort compared with patients with the normal-risk combination. Determination of three SNPs of the Klotho gene could help in the prediction of non-cardiovascular death in CKD