论文标题
在没有隐私的情况下删除合规性
Deletion-Compliance in the Absence of Privacy
论文作者
论文摘要
Garg，Goldwasser和Vasudevan（Eurocrypt 2020）发明了删除合规的概念，以正式建模“被遗忘的权利”，这一概念使个人更加控制其数字数据。删除合并的要求对于删除请求者来说是强大的隐私，因为没有外部观察者必须能够确定是否曾经存在删除数据。自然，许多现实世界系统可以自动排除信息。 本文的主要论点是，遵守删除是一个独立的概念，与隐私不同。我们提出了一个替代定义，该定义有意义地捕获了符合删除符合性，而没有任何隐私影响。这使得更广泛的数据收集器可以证明符合删除请求的合规性，并与各种隐私概念配对。我们的新定义具有几个吸引人的属性： - 这是Garg等人的更强定义所暗示的。在自然条件下，当我们添加隐私要求时，这是等效的。 - 它自然可以与最小的假设相结合。 - 它的要求是通过没有揭示运行顺序的数据结构实现来满足其要求的，该概念被称为历史独立。 一路上，我们讨论了在提供对“被遗忘权”的普遍定义时仍然存在的许多挑战。
Garg, Goldwasser and Vasudevan (Eurocrypt 2020) invented the notion of deletion-compliance to formally model the "right to be forgotten", a concept that confers individuals more control over their digital data. A requirement of deletion-compliance is strong privacy for the deletion requesters since no outside observer must be able to tell if deleted data was ever present in the first place. Naturally, many real world systems where information can flow across users are automatically ruled out. The main thesis of this paper is that deletion-compliance is a standalone notion, distinct from privacy. We present an alternative definition that meaningfully captures deletion-compliance without any privacy implications. This allows broader class of data collectors to demonstrate compliance to deletion requests and to be paired with various notions of privacy. Our new definition has several appealing properties: - It is implied by the stronger definition of Garg et al. under natural conditions, and is equivalent when we add a privacy requirement. - It is naturally composable with minimal assumptions. - Its requirements are met by data structure implementations that do not reveal the order of operations, a concept known as history-independence. Along the way, we discuss the many challenges that remain in providing a universal definition of compliance to the "right to be forgotten."
