<!DOCTYPE article PUBLIC "-//NLM//DTD JATS (Z39.96) Journal Archiving and Interchange DTD v1.0 20120330//EN" "JATS-archivearticle1.dtd">
<article xmlns:xlink="http://www.w3.org/1999/xlink">
  <front>
    <journal-meta />
    <article-meta>
      <title-group>
        <article-title>A Hierarchical-based Frequent Itemset Mining Method under Local Differential Privacy</article-title>
      </title-group>
      <contrib-group>
        <contrib contrib-type="author">
          <string-name>Deming Kong</string-name>
          <xref ref-type="aff" rid="aff0">0</xref>
        </contrib>
        <contrib contrib-type="author">
          <string-name>Jian Wang</string-name>
          <xref ref-type="aff" rid="aff0">0</xref>
        </contrib>
        <aff id="aff0">
          <label>0</label>
          <institution>Nanjing University of Aeronautics and Astronautics, College of Computer Science and Technology</institution>
          ,
          <addr-line>Nanjing, 210016</addr-line>
          ,
          <country country="CN">China</country>
        </aff>
      </contrib-group>
      <fpage>67</fpage>
      <lpage>75</lpage>
      <abstract>
        <p>Frequent itemset mining aims at finding the sets of items that occur together frequently in many transactions, which can lay the foundation for further association rule mining. In this paper, to deal with the problem of massive amount of data, we adopt a specific model which expresses the attributes of item hierarchically. Based on the layering attributes, we propose a novel frequent itemset mining method under local differential privacy which deals with the frequent itemset mining problem layer by layer and it greatly improves the search efficiency. Experimental analyses based on real and synthetic datasets show that our method outperforms the state-of-the-art in terms of the computation cost.</p>
      </abstract>
      <kwd-group>
        <kwd>1 local differential privacy</kwd>
        <kwd>frequent itemset mining</kwd>
        <kwd>layering attribute</kwd>
      </kwd-group>
    </article-meta>
  </front>
  <body>
    <sec id="sec-1">
      <title>1. Introduction</title>
      <p>
        Frequent Itemset Mining (FIM) is a key problem in data mining. By mining frequent itemset,
merchants can discover the links between products, and thus predict customers' buying habits and
improve their service quality, which is beneficial both for their own interests and the economic
development of society. However, in the process of collecting users’ information, there is a risk that
some sensitive personal information such as users’ purchase history, browsing preferences may leak
and users do not want to expose their privacy [15]. In recent years, in order to protect privacy, local
differential privacy [
        <xref ref-type="bibr" rid="ref1">1</xref>
        ] has been widely used in data analysis tasks as a secure and advanced
privacypreserving technique without the need for trusted third party and it can provide a better balance between
users’ privacy and data utility.
      </p>
      <p>
        There has been some research on frequent itemset mining of set-valued data under local differential
privacy [
        <xref ref-type="bibr" rid="ref5 ref6">5,6,13</xref>
        ]. However, there exits some problems in the process of frequent itemset mining under
local differential privacy, e.g., the excessive computation cost and low data utility. To deal with the
massive amount of data, we devise a novel framework based on dividing the category attributes of an
item into layers and step-by-step processing. The hierarchical expression of attributes makes full use of
the correlation between different layers of attributes. Specifically, the correlation here mainly refers to
the inclusion relationship of category attributes from different layers. Layer-division strategy of
attributes increases the available information dimension of the model and demonstrates the idea of
divide and rule [
        <xref ref-type="bibr" rid="ref4">4</xref>
        ]. In addition, step-by-step processing greatly reduces the complexity of problem and
improves the search efficiency.
      </p>
      <p>In real world, people may have complex personal requirements. Fortunately, based on the layering
structure of category attributes, our scheme can perfectly meet the complex requirements through
mining frequent itemset from high layer to low layer. Thus, users are able to obtain the frequent itemset
of different layers, rather than a single layer. Compared with other methods, our model is more flexible.</p>
      <p>The main contributions of this paper are as follows.
1) We adopt a hierarchical expression of category attributes to improve the search efficiency. In
addition, mining frequent itemset at different layers can meet the complex personal needs of users.</p>
      <p>2) Based on the layering attributes, we propose a novel frequent itemset mining method which
deals with the problem layer by layer.</p>
      <p>3) We introduce a specific model of local differential privacy to the method mentioned above, and
our experimental results validate the effectiveness of the proposed method.</p>
      <p>The rest of the paper is organized in the following order. Section 2 introduces background
knowledge and problem definition of frequent itemset mining, Section 3 presents some previous work,
Section 4 gives a complete implementation of our scheme, Section 5 shows experimental results of our
scheme and compares it with other methods, and Section 6 concludes our work.</p>
    </sec>
    <sec id="sec-2">
      <title>2. Preliminaries and Problem definition</title>
    </sec>
    <sec id="sec-3">
      <title>2.1. Local Differential Privacy</title>
      <p>Definition 1 (  -Local Differential Privacy ，  -LDP) a perturbation mechanism  :  → 
satisfies  -LDP if and only if for any two users' data  ,  ′ ∈  , and any possible output  ∈  satisfies
the following inequality (1).</p>
      <p>( ( ) =  )
 ( ( ′) =  )
≤  
(1)</p>
      <p>Theorem 1 (Sequential Composition Theorem) Let A1, A2, A3, … , A be a series of LDP
mechanisms where A implements   -LDP, when the mechanism A on the data  are run in an
independent random on A1( ), A2( ), A3( ), … , A ( ) or run them in some sequential primary order,
at this point the mechanism  is considered to satisfy the (∑ =1   )-LDP.
2.2.</p>
    </sec>
    <sec id="sec-4">
      <title>Unary Encoding</title>
      <p>
        To cope with the problem of input domain size larger than 2, Generalized Random Response (GRR)
[15] and Unary Encoding (UE) [
        <xref ref-type="bibr" rid="ref3">3</xref>
        ] were proposed. It was later investigated that when the input domain
size  &gt; 3  + 2, the variance of UE is smaller than that of GRR and is therefore more suitable as a
perturbation method [
        <xref ref-type="bibr" rid="ref3">3</xref>
        ].
      </p>
      <p>Definition 2 (Unary Encoding, UE) first maps the input  as a  bit length vector  where only
the bit corresponding to the user input  is set as 1. For the vector after the one-hot encoding  , UE is
perturbed separately for each bit as the following Equation (2).</p>
      <p>
        , 
 ( ′[ ] = 1) = {
 , 
[ ] = 1
[ ] = 0
(2)
According to the  -LDP definition, UE can provide  = ln  .(1− ) for LDP. In order to minimize the
 .(1− )
variance of UE, Wang [
        <xref ref-type="bibr" rid="ref3">3</xref>
        ] et al. proposed Optimal Unary Encoding (OUE), resulting in  = 1 ,  =
2
  1+1 . In the frequency estimation task, OUE has the smallest estimation variance of  =  ( 4−1)2 .
2.3.
      </p>
    </sec>
    <sec id="sec-5">
      <title>Padding-and-sampling</title>
      <p>
        For the frequency estimation of set-valued data, padding-and-sampling protocol [
        <xref ref-type="bibr" rid="ref2 ref7 ref8">2,7,8</xref>
        ] is proposed
to deal with the challenge of users’ difference in transaction length.
      </p>
      <p>
        Wang [
        <xref ref-type="bibr" rid="ref8">8</xref>
        ] proposed the Padding-and-Sampling-based Frequency Oracle (PSFO) protocol which is
based on the padding-and-sampling. PSFO protocol is specified by three parameters: a positive integer
 , a frequency oracle FO, and the privacy budget  . It is composed of a pair of algorithms: ⟨ ,  ⟩, where
 is used by each user to perturb his input value, and  is used by the aggregator;  takes as input the
reports from all users, and can be queried for the frequency of each value. Hence, PSFO can be defined
as the following Equation (3).
      </p>
      <p>( ,  ,  ) = ⟨  ( )(  ),   ( ).  ⟩
(3)
2.4.</p>
    </sec>
    <sec id="sec-6">
      <title>Problem definition</title>
      <p>In the frequent itemset problem, the data collector knows the set of all items which is referred to as
the full set  . There is a total of  users, and the   ℎ user has a set of items   ⊆  and we call this a
transaction. Similarly, an itemset  is a collection of items, and the frequency of any 
⊆  is defined
as the number of transactions containing that itemset  , which is also denoted as   = {  |
⊆   }.</p>
      <p>Our goal is to devise a secure and efficient scheme that enables data collector to implement frequent
itemset mining under local differential privacy. We denote the frequency of top-k frequent item as  ( ),
for the candidates of top-k frequent itemset  , our optimization goal is:   = argmax ∏ ∈  ( ). The
top-k frequent itemset refers to an itemset whose frequency is among the k highest for all itemsets.</p>
    </sec>
    <sec id="sec-7">
      <title>3. Related work</title>
      <p>
        There has been some researches devoted to mining frequent itemset under local differential privacy.
To address the problem of the varying number of items owned by users, Qin [
        <xref ref-type="bibr" rid="ref7">7</xref>
        ] proposes a two-phase
approach for better frequency estimation. She first pads the set of items to a certain length L by some
dummy items, and then samples a random item from it. They propose an algorithm for frequent item
mining based on this approach, called LDPMiner. However, this method can only find frequent items
while cannot be applied to the frequent itemset mining.
      </p>
      <p>
        Inspired by LDPMiner, Wang [
        <xref ref-type="bibr" rid="ref8">8</xref>
        ] groups users and each of them is involved in an independent query
task. This method improves the search accuracy and is known as the SVIM frequent item mining
algorithm. Based on SVIM, he then constructs the frequent itemset candidates and proposes the SVSM
frequent itemset mining algorithm, which is the first solution to the frequent itemset mining problem
under local differential privacy. However, SVSM focuses on items with only a single attribute, which
ignores the correlation between items in the real world.
      </p>
      <p>Zhang [16] devised a MRR algorithm to perform frequent itemset mining under local differential
privacy. It not only takes into account the multiple attributes of users’ data, but also can meet the needs
of users' personalized privacy protection. However, the process is inefficient in encoding because items
that do not have values in some attributes still consume large computation cost, and the computation of
frequent itemset supported by Bayes formula leads to low accuracy. Sharmin [15] proposed a novel
method to find frequent itemset on small datasets. The scheme framework is better at maintaining the
correlation between items, but the interactions between users and server are too complex to be applied
in reality.</p>
    </sec>
    <sec id="sec-8">
      <title>4. An efficient FIM method with layering attribute under LDP</title>
      <p>In this section, we propose the solution to the problem of mining frequent itemset under local
differential privacy. We first introduce the layering structure of category attribute, and then we present
the complete implementation of our proposed method under LDP.
4.1.</p>
    </sec>
    <sec id="sec-9">
      <title>Layering structure of category attribute</title>
      <p>
        Different from most of the researches nowadays which focus on the items with only a single category
attribute, we divide the category attributes into many layers and express them hierarchically. The
layering structure is shown in Figure 2. By dividing the attributes into layers, we are able to expand the
original single attribute of an item into multi-dimensional category attribute. Hence, the problem of
massive amount of data can be effectively solved by taking advantage of the correlation between
different layers of attributes [
        <xref ref-type="bibr" rid="ref4">4</xref>
        ].
      </p>
      <p>Based on the layering structure of category attribute, in order to improve the search efficiency, we
devise a novel scheme of finding frequent itemset step by step, from high layer to low layer. We find
the frequent itemset of large category firstly, and then to search the specific frequent itemset of small
category within the given frequent itemset of large category, from coarse to fine, to greatly reduce the
problem complexity.</p>
      <p>If the number of a small category item is increasing, the number of corresponding large category
will also increase, it makes sense that the frequent itemset of large category can be used for the further
search of small category frequent itemset. The complexity of the frequent 2-itemset problem is O ( 2).
e.g., there are ten large categories, and each large category contains 100 small category items. If we
find the top three large categories of frequent 2-itemset, the problem scale will decline to O (3 ∗ 2002),
which is much smaller than O (10002). Although there is some loss in accuracy, it greatly improves
the search efficiency.
4.2.</p>
    </sec>
    <sec id="sec-10">
      <title>Mining frequent itemset with layering attribute under LDP</title>
      <p>We propose a multi-phase scheme framework in which users obtain frequent itemset of each layer
after interacting with the server several times. Based on the idea of user pruning, after the itemset
frequency estimation of each layer has been performed, only the top-ranked frequent itemsets of the
current layer are sent to the next layer for continue mining. The iterative process of the frequent itemset
mining for each layer continues and all estimated frequent itemsets of each layer are discovered
eventually.
The total privacy budget  is divided into</p>
      <p>parts for  layers and each   is used in the   ℎ layer.</p>
      <p>Specifically, we allocate privacy budget  equally, which means each layer has the same average of
and the whole process satisfies  -LDP according to the sequential composition property.</p>
      <p>
        In LDP, a common approach is to partition users into different groups, each answering one separate
question than for all users to answer multiple questions each with part of the total privacy budget  [
        <xref ref-type="bibr" rid="ref8">8</xref>
        ].
It is proved that the over division of privacy budget will greatly reduce the data utility and the grouping
of users is beneficial to the accuracy of the final result. In our scheme, since there are   frequent
itemsets of the   ℎ layer, we randomly divide users into   groups and each group of users participate
in an independent task for the ( + 1) ℎ layer frequent itemset mining separately [
        <xref ref-type="bibr" rid="ref9">9</xref>
        ]. The top-level
framework is shown in Figure 3.
      </p>
      <p>For each group of users with  from the previous layer, each user first finds the items from his own
transaction which is in the range domain of the itemset  . If a user does not possess any item in the
range domain of  , he will be regarded as a useless participant and does not need to go through the
next series of operations. In other words, the frequent itemset is combined of the items only from the
range domain, and any item outside the domain is not considered, which demonstrates the idea of user
pruning. Algorithm 1 outlines the specific process of each layer.</p>
      <p>Step 1: Padding and Sampling. As the number of items in a user transaction varies, existing FO
protocols cannot handle this problem. Hence, it is necessary to adopt padding-and-sampling protocol to
select one item to report. If the user’s transaction length is less than  , the dummy item is padded; if the
user’s transaction length is larger than  , he randomly draws  items out. Although the dummy item
could be sampled, its frequency will be ignored by the server during the frequency estimation process
and it definitely could not be considered as a frequent item.
the perturbed value is submitted to the server for aggregation.</p>
      <p>Step 2: Encoding and Perturbing. Assuming that there are  users, each of whom   possesses an
item obtained by padding and sampling. Then, the sampled item is indexed up to get the value of the
  ℎ layer category attribute. Each user adopts OUE algorithm to perturb the value with   ⁄2. Finally,</p>
      <p>Step 3: Aggregation and Estimation. After receiving the perturbed value from users, the server
calculates the frequencies of all category attributes by multiplying the estimated results with  and
dropping the dummy item. Then, the server sorts attributes according to the estimated frequencies and
combines them two by two to construct the top-2k frequent itemset candidates. The 2k candidates are
sent to users.</p>
      <p>The following task is quite similar to the original problem, with the difference that the universe of
items becomes the 2k frequent itemset candidates, instead of the full set of  items. Specifically, the
final top-k frequent itemsets are chosen from the 2k candidates.</p>
      <p>Step 4: Candidates Estimation. After receiving 2k frequent itemset candidates, the user selects the
set of items he owns in the 2k candidates. He then adopts padding-and-sampling algorithm to randomly
select one item from the padded set. Note that at this time the padding length  becomes 2k rather than
90% of the number of users. Afterwards, the user adopts OUE algorithm to perturb the value with   ⁄
and sends it to the server.
frequent itemsets can be obtained.</p>
      <p>The server estimates the frequencies of all candidates from the perturbed value and thus top-k</p>
    </sec>
    <sec id="sec-11">
      <title>5. Experimental Results</title>
      <p>In this section, we experimentally evaluate our method of mining frequent itemset for category data
under local differential privacy, and verify that our proposed scheme performs effectively on real and
synthetic datasets. Basically, we want to answer the following questions: Firstly, how many frequent
itemsets can be effectively identified. Secondly, how much do we improve the search efficiency.</p>
      <p>Environment: all algorithms are implemented in Python 3.7 and all the experiments are conducted
on an Intel Core i5-9300H 2.4GHz PC with 16GB memory.</p>
      <p>Datasets: we use the real dataset (Retail) [15] to show that our proposed method is suitable for real
datasets. We show the results of the Retail dataset in Figure 4. We also implement our scheme on a
synthetic dataset called norm-user [16] which obeys normal distribution and the result is shown in
Figure 5. The synthetic normal distribution has mean of 4 and standard deviation of 0.1.</p>
      <p>
        Our main goal of this experiment is to prove that by taking the correlations between items into
account, our scheme can usually obtain frequent itemset results more accurately and efficiently,
compared to SVSM [
        <xref ref-type="bibr" rid="ref8">8</xref>
        ] and Priv_OA [15] mechanisms.
      </p>
      <p>Evaluation metrics: to compare the accuracy of the results of the mining, we adopt the F − Score
[16] to measure our performance. Let   = { 1,  2,  3, … ,   } denotes the ground truth for top-k
frequent itemset and   represents the set of frequent itemset generated by a specific algorithm. Then
  ∩   is the set of real top-k itemsets that are identified by the algorithm. In this case, F − Score
represents the accuracy of the search and is defined as the following Equation (4). In addition, we take
the program running time as the expression the computation cost.</p>
      <p>− 
= 2 ∗

(4)</p>
      <p>We conduct simulations on two kinds of datasets to compare the performance between three
mechanisms. The first algorithm performing is our proposed method, the second one is SVSM algorithm
and the last one is called Priv_OA which performs well on small datasets. The privacy budget  we
employ ranges from 1.0 to 5.0 with intervals of 1. In addition, we also explore the relationship between
the accuracy of the results and the value of k through experiments. The value k ranges from 30 to 70
with intervals of 10.</p>
      <p>In Figure 4, we evaluate three methods on Retail dataset and plot the F − Score diagram based on
the variation of privacy budget  and the value of k. As can be observed in Figure 4, the identification
accuracy which is denoted as F − Score increases with  , and basically maintain, even with a little
fluctuation when the value of k increases. It can be observed that our mechanism has an improvement
over the other two methods, and with the increase of privacy budget  and the value of k, that advantage
is more obvious. That means the data utility has been improved under our proposed method. We also
can find that with the increase of k, F − Score does not go up that fast. That is probably because the
frequency difference of itemset is not that obvious and the error in frequency estimation also increases
with k.</p>
      <p>In Figure 5, we evaluate three methods on synthetic dataset and plot the F − Score diagram based
on the variation of privacy budget  and the value of k. Similar to the Retail dataset, it can be observed
that the scheme we propose outperforms the other two methods. However, it can be noticed that when
the privacy budget  = 1, our approach doesn’t perform well compared to Priv_OA, probably because
data utility is low when the privacy budget is small, and at this time, users’ privacy can be better
protected.</p>
      <p>Furthermore, we also explore the relationship between computation time and variables (the privacy
budget  and k) and the result is shown in Figure 6. This suggests that for the set of real top-k itemsets
that are identified by algorithms, our proposed method can greatly reduce the computation cost, thus
improve the search efficiency.</p>
    </sec>
    <sec id="sec-12">
      <title>6. Conclusion</title>
      <p>In this paper, a novel method is proposed to mine frequent itemset under local differential privacy.
To improve the search accuracy, we divide the category attributes into layers and make full use of the
correlation between different layer of attributes. Based on the layering attributes, in order to reduce the
complexity of processing, frequent itemset mining is implemented step by step, from high layer to low
layer. In addition, we have experimentally verified that our approach performs effectively on both real
and synthetic datasets. Due to that we only consider the search of frequent 2-itemset in this paper, in
the future, we will continue to do research on frequent multi-itemset mining under LDP. Furthermore,
there can be more improvements in terms of different expressions of attribute structures.</p>
    </sec>
    <sec id="sec-13">
      <title>7. References</title>
      <p>[10] Wang T, Li N, Jha S. Locally differentially private heavy hitter identification [J]. IEEE</p>
      <p>Transactions on Dependable and Secure Computing, 2019.
[11] Fanti G, Pihur V, Erlingsson Ú. Building a RAPPOR with the Unknown: Privacy-Preserving
Learning of Associations and Data Dictionaries[J]. Proceedings on Privacy Enhancing
Technologies, 2016, 3: 41-61.
[12] Bassily R, Nissim K, Stemmer U, et al. Practical Locally Private Heavy Hitters [J]. Advances in</p>
      <p>Neural Information Processing Systems, 2017, 30: 2288-2296.
[13] Wang N, Xiao X, Yang Y, et al. PrivTrie: Effective frequent term discovery under local differential
privacy [C]//2018 IEEE 34th International Conference on Data Engineering (ICDE). IEEE, 2018:
821-832.
[14] Q. Xue, Y. Zhu and J. Wang, "Joint Distribution Estimation and Naïve Bayes Categoryification
Under Local Differential Privacy," in IEEE Transactions on Emerging Topics in Computing, vol.
9, no. 4, pp. 2053-2063, 1 Oct.-Dec. 2021, doi: 10.1109/TETC.2019.2959581.
[15] Sharmin Afrose, Tanzima Hashem, and Mohammed Eunus Ali. 2021. Frequent Itemsets Mining
with a Guaranteed Local Differential Privacy in Small Datasets. 33rd International Conference on
Scientific and Statistical Database Management Association for Computing Machinery, New York,
NY, USA, DOI:https://doi.org/10.1145/3468791.3468807
[16] Xinyuan Zhang, Liusheng Huang, Peng Fang, Shaowei Wang, Zhenyu Zhu, and Hongli Xu. 2017.</p>
      <p>Differentially Private Frequent Itemset Mining From Smart Devices in Local Setting. in WASA.
433-44</p>
    </sec>
  </body>
  <back>
    <ref-list>
      <ref id="ref1">
        <mixed-citation>
          [1]
          <string-name>
            <surname>Dwork</surname>
            <given-names>C.</given-names>
          </string-name>
          <string-name>
            <surname>Differential privacy</surname>
          </string-name>
          [C]//International Colloquium on Automata,
          <source>Languages, and Programming</source>
          . Springer, Berlin, Heidelberg,
          <year>2006</year>
          :
          <fpage>1</fpage>
          -
          <lpage>12</lpage>
          .
        </mixed-citation>
      </ref>
      <ref id="ref2">
        <mixed-citation>
          [2]
          <string-name>
            <surname>Duchi</surname>
            <given-names>J C</given-names>
          </string-name>
          ,
          <string-name>
            <surname>Jordan</surname>
            <given-names>M I</given-names>
          </string-name>
          ,
          <string-name>
            <surname>Wainwright M J.</surname>
          </string-name>
          <article-title>Local privacy and statistical minimax rates[C]//2013 IEEE 54th Annual Symposium on Foundations of Computer Science</article-title>
          . IEEE,
          <year>2013</year>
          :
          <fpage>429</fpage>
          -
          <lpage>438</lpage>
          .
        </mixed-citation>
      </ref>
      <ref id="ref3">
        <mixed-citation>
          [3]
          <string-name>
            <surname>Wang</surname>
            <given-names>T</given-names>
          </string-name>
          ,
          <string-name>
            <surname>Blocki</surname>
            <given-names>J</given-names>
          </string-name>
          ,
          <string-name>
            <surname>Li</surname>
            <given-names>N</given-names>
          </string-name>
          , et al.
          <article-title>Locally differentially private protocols for frequency estimation</article-title>
          [C]//26th {USENIX} Security Symposium ({
          <source>USENIX} Security 17)</source>
          .
          <year>2017</year>
          :
          <fpage>729</fpage>
          -
          <lpage>745</lpage>
          .
        </mixed-citation>
      </ref>
      <ref id="ref4">
        <mixed-citation>
          [4]
          <string-name>
            <surname>Wang</surname>
            <given-names>N</given-names>
          </string-name>
          ,
          <string-name>
            <surname>Xiao</surname>
            <given-names>X</given-names>
          </string-name>
          ,
          <string-name>
            <surname>Yang</surname>
            <given-names>Y</given-names>
          </string-name>
          , et al.
          <article-title>Collecting and analyzing multidimensional data with local differential privacy [C]//2019 IEEE 35th International Conference on Data Engineering (ICDE)</article-title>
          . IEEE,
          <year>2019</year>
          :
          <fpage>638</fpage>
          -
          <lpage>649</lpage>
          .
        </mixed-citation>
      </ref>
      <ref id="ref5">
        <mixed-citation>
          [5]
          <string-name>
            <surname>Wang</surname>
            <given-names>S</given-names>
          </string-name>
          ,
          <string-name>
            <surname>Huang</surname>
            <given-names>L</given-names>
          </string-name>
          ,
          <string-name>
            <surname>Nie</surname>
            <given-names>Y</given-names>
          </string-name>
          , et al.
          <article-title>Privset: set-valued data analyses with locale differential privacy</article-title>
          [C]//IEEE INFOCOM 2018-IEEE Conference on Computer Communications. IEEE,
          <year>2018</year>
          :
          <fpage>1088</fpage>
          -
          <lpage>1096</lpage>
          .
        </mixed-citation>
      </ref>
      <ref id="ref6">
        <mixed-citation>
          [6]
          <string-name>
            <surname>Wang</surname>
            <given-names>S</given-names>
          </string-name>
          ,
          <string-name>
            <surname>Qian</surname>
            <given-names>Y</given-names>
          </string-name>
          ,
          <string-name>
            <surname>Du</surname>
            <given-names>J</given-names>
          </string-name>
          , et al.
          <article-title>Set-valued data publication with local privacy: tight error bounds and efficient mechanisms[J]</article-title>
          .
          <source>Proceedings of the VLDB Endowment</source>
          ,
          <year>2020</year>
          ,
          <volume>13</volume>
          (
          <issue>8</issue>
          ):
          <fpage>1234</fpage>
          -
          <lpage>1247</lpage>
          .
        </mixed-citation>
      </ref>
      <ref id="ref7">
        <mixed-citation>
          [7]
          <string-name>
            <surname>Qin</surname>
            <given-names>Z</given-names>
          </string-name>
          ,
          <string-name>
            <surname>Yang</surname>
            <given-names>Y</given-names>
          </string-name>
          ,
          <string-name>
            <surname>Yu</surname>
            <given-names>T</given-names>
          </string-name>
          , et al.
          <article-title>Heavy hitter estimation over set-valued data with local differential privacy [C]//</article-title>
          <source>Proceedings of the 2016 ACM SIGSAC Conference on Computer and Communications Security</source>
          .
          <year>2016</year>
          :
          <fpage>192</fpage>
          -
          <lpage>203</lpage>
          .
        </mixed-citation>
      </ref>
      <ref id="ref8">
        <mixed-citation>
          [8]
          <string-name>
            <surname>Wang</surname>
            <given-names>T</given-names>
          </string-name>
          ,
          <string-name>
            <surname>Li</surname>
            <given-names>N</given-names>
          </string-name>
          ,
          <string-name>
            <surname>Jha</surname>
            <given-names>S.</given-names>
          </string-name>
          <article-title>Locally differentially private frequent itemset mining[C]//2018 IEEE Symposium on Security and Privacy (SP)</article-title>
          . IEEE,
          <year>2018</year>
          :
          <fpage>127</fpage>
          -
          <lpage>143</lpage>
          .
        </mixed-citation>
      </ref>
      <ref id="ref9">
        <mixed-citation>
          [9]
          <string-name>
            <surname>Kairouz</surname>
            <given-names>P</given-names>
          </string-name>
          ,
          <string-name>
            <surname>Bonawitz</surname>
            <given-names>K</given-names>
          </string-name>
          ,
          <string-name>
            <surname>Ramage</surname>
            <given-names>D.</given-names>
          </string-name>
          <article-title>Discrete distribution estimation under local privacy</article-title>
          [C]//International Conference on Machine Learning. PMLR,
          <year>2016</year>
          :
          <fpage>2436</fpage>
          -
          <lpage>2444</lpage>
          .
        </mixed-citation>
      </ref>
    </ref-list>
  </back>
</article>