Anonymization of data
A computer-implemented method for anonymizing data via generalization, wherein the data includes a first number of first datasets at a first time point and a second number of second datasets at a second time point. The first datasets are a subset of the second datasets. The computer-implemented method comprises: generating a first generalization for the first datasets that fulfills a required anonymization, wherein the first generalization includes a first group of assignment ranges by which values of a quasi-identifier of the data are generalized; and generating a second generalization for the second datasets that fulfills the required anonymization, wherein the second generalization includes a second group of assignment ranges by which values of the quasi-identifier are generalized. The second group includes more assignment ranges than the first group.
1 . A computer-implemented method for anonymizing data via generalization, the data including first datasets at a first time point and second datasets at a second time point, the first datasets being a subset of the second datasets, and the computer-implemented method comprising:
generating a first generalization for the first datasets that satisfies an anonymization criterion, the first generalization including a first group of assignment ranges by which first values of a quasi-identifier of the data are generalized; and
generating a second generalization for the second datasets that satisfies the anonymization criterion, the second generalization including a second group of assignment ranges by which second values of the quasi-identifier are generalized, the second group including more assignment ranges than the first group, and a value set assigned to a totality of assignment ranges of the first group being identical to a value set assigned to a totality of assignment ranges of the second group.
2 . The computer-implemented method as claimed in claim 1 , wherein
each respective value of the quasi-identifier is assigned at most to one of the assignment ranges of the first group; and
each respective value of the quasi-identifier is assigned at most to one of the assignment ranges of the second group.
3 . The computer-implemented method as claimed in claim 2 , wherein
a first interval is assigned to a first assignment range among the first group of assignment ranges;
intervals of the first group have interval lengths independent of one another; and
a first interval length of the first interval is dependent on a number of the first datasets assigned to the first interval.
4 . The computer-implemented method as claimed in claim 2 , wherein
the data includes third datasets at a third time point;
the third datasets are a superset of preceding datasets at a preceding time point;
the computer-implemented method further comprises generating a third generalization for the third datasets based on a preceding generalization, the preceding generalization being the second generalization or a further generalization iteratively based on the second generalization;
the third generalization includes a third group of assignment ranges by which third values of the quasi-identifier are generalized; and
the third group includes more assignment ranges than a preceding group of assignment ranges of the preceding generalization.
5 . The computer-implemented method as claimed in claim 2 , further comprising:
determining a statistical distribution of third values of the quasi-identifier; and
generating a target generalization based on the statistical distribution, the target generalization including a target group of assignment ranges by which the third values of the quasi-identifier of the data are generalized, wherein
the generating the first generalization or the generating the second generalization is performed as a function of the target generalization.
6 . The computer-implemented method as claimed in claim 1 , wherein a value set of each among the second group of assignment ranges is a subset of a value set of one among the first group of assignment ranges.
7 . The computer-implemented method as claimed in claim 1 , wherein
a first interval is assigned to a first assignment range among the first group of assignment ranges;
intervals of the first group have interval lengths independent of one another; and
a first interval length of the first interval is dependent on a number of the first datasets assigned to the first interval.
8 . The computer-implemented method as claimed in claim 7 , wherein
the data includes third datasets at a third time point;
the third datasets are a superset of preceding datasets at a preceding time point;
the computer-implemented method further comprises generating a third generalization for the third datasets based on a preceding generalization, the preceding generalization being the second generalization or a further generalization iteratively based on the second generalization;
the third generalization includes a third group of assignment ranges by which third values of the quasi-identifier are generalized; and
the third group includes more assignment ranges than a preceding group of assignment ranges of the preceding generalization.
9 . The computer-implemented method as claimed in claim 7 , further comprising:
determining a statistical distribution of third values of the quasi-identifier; and
generating a target generalization based on the statistical distribution, the target generalization including a target group of assignment ranges by which the third values of the quasi-identifier of the data are generalized, wherein
the generating the first generalization or the generating the second generalization is performed as a function of the target generalization.
10 . The computer-implemented method as claimed in claim 1 , wherein
the data includes third datasets at a third time point;
the third datasets are a superset of preceding datasets at a preceding time point;
the computer-implemented method further comprises generating a third generalization for the third datasets based on a preceding generalization, the preceding generalization being the second generalization or a further generalization iteratively based on the second generalization;
the third generalization includes a third group of assignment ranges by which third values of the quasi-identifier are generalized; and
the third group includes more assignment ranges than a preceding group of assignment ranges of the preceding generalization.
11 . The computer-implemented method as claimed in claim 10 , further comprising:
determining a statistical distribution of fourth values of the quasi-identifier; and
generating a target generalization based on the statistical distribution, the target generalization including a target group of assignment ranges by which the fourth values of the quasi-identifier of the data are generalized, wherein
the generating the first generalization or the generating the second generalization is performed as a function of the target generalization.
12 . The computer-implemented method as claimed in claim 1 , further comprising:
determining a statistical distribution of third values of the quasi-identifier; and
generating a target generalization based on the statistical distribution, the target generalization including a target group of assignment ranges by which the third values of the quasi-identifier of the data are generalized, wherein
the generating the first generalization or the generating the second generalization is performed as a function of the target generalization.
13 . The computer-implemented method as claimed in claim 1 , wherein
each assignment range of the first group includes an at least two-dimensional assignment range by which the first values of the quasi-identifier and first values of at least one further quasi-identifier of the data are generalized; and
each assignment range of the second group includes an at least two-dimensional assignment range by which the second values of the quasi-identifier and second values of the at least one further quasi-identifier are generalized.
14 . The computer-implemented method as claimed in claim 13 , further comprising:
determining statistical distributions of third values of the quasi-identifier and of third values of the at least one further quasi-identifier; and
generating a target generalization based on the statistical distributions, the target generalization including a target group of at least two-dimensional assignment ranges by which the third values of the quasi-identifier and the third values of the at least one further quasi-identifier are generalized, wherein
the generating the first generalization or the generating the second generalization is performed as a function of the target generalization.
15 . A non-transitory computer program product including computer-readable program code embodied to cause a processing device to perform the method as claimed in claim 1 .
16 . A non-transitory computer-readable storage medium storing computer-executable instructions that, when executed by a processing device, cause the processing device to perform the method of claim 1 .
17 . A device for anonymizing data via generalization, the data including first datasets at a first time point and second datasets at a second time point, the first datasets being a subset of the second datasets, and the device comprising:
a processing device configured to
generate a first generalization for the first datasets that satisfies an anonymization criterion, the first generalization including a first group of assignment ranges by which first values of a quasi-identifier of the data are generalized, and
generate a second generalization for the second datasets that satisfies the anonymization criterion, the second generalization including a second group of assignment ranges by which second values of the quasi-identifier are generalized, the second group including more assignment ranges than the first group, and a value set assigned to a totality of assignment ranges of the first group being identical to a value set assigned to a totality of assignment ranges of the second group.
18 . A computer-implemented method for anonymizing data via generalization, the data including first datasets at a first time point and second datasets at a second time point, the first datasets being a subset of the second datasets, and the computer-implemented method comprising:
generating a first generalization for the first datasets that satisfies an anonymization criterion, the first generalization including a first group of assignment ranges by which first values of a quasi-identifier of the data are generalized; and
generating a second generalization for the second datasets that satisfies the anonymization criterion, the second generalization including a second group of assignment ranges by which second values of the quasi-identifier are generalized, the second group including more assignment ranges than the first group, and a value set of each among the second group of assignment ranges being a subset of a value set of one among the first group of assignment ranges.
19 . The computer-implemented method as claimed in claim 18 , wherein
each respective value of the quasi-identifier is assigned at most to one of the assignment ranges of the first group; and
each respective value of the quasi-identifier is assigned at most to one of the assignment ranges of the second group.
20 . The computer-implemented method as claimed in claim 18 , wherein
a first interval is assigned to a first assignment range among the first group of assignment ranges;
intervals of the first group have interval lengths independent of one another; and
a first interval length of the first interval is dependent on a number of the first datasets assigned to the first interval.