Cited by 214Privacy-Preserving Technologies in DataCryptography and Data SecurityCloud Data Security Solutions

The Privacy Blanket of the Shuffle Model

Open access
Balle, Borja, Bell, James, Gascón, Adrià, Nissim, Kobbi·2019·Lecture Notes in Computer Science

The claims and statistics of this paper haven’t been checked yet.

Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.

A few free checks a day · papers already verified open instantly · results are public

Integrity signals

Registry

Crossref · 10.1007/978-3-030-26951-7_22

Cites

24 of 24 references verified0 citation errors · 0 not checkable

Statistics

Claims the paper makes

The claims and statistics of this paper haven’t been checked yet.

Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.

A few free checks a day · papers already verified open instantly · results are public

Claims other papers make about this one

Each is checked against this paper’s own text: does it say what the citing paper says it does?

  • Bounded gradient variance is often used when clients use stochastic local updates.

    “Bounded gradient variance, which is a widely used assumption to analyze stochastic gradient methods, is often used when clients use stochastic local updates [305, 303, 304, 469, 265].”

    From Advances and Open Problems in Federated Learning (2021) · cites this paper as [304]

    Section 5.3 (pp. 22–23) discusses the variance of privacy-amplification random variables, not gradient variance. Searches for bounded gradient variance, stochastic gradient methods, and stochastic local updates found no passage addressing the attributed assumption. (LLM, conf=0.76)

    Experimental — accuracy not yet measured
  • Li et al. [304] extended PD-SGD to the non-IID case.

    “This algorithm is extended by Li et al. [304] to the non-IID case.”

    From Advances and Open Problems in Federated Learning (2021) · cites this paper as [304]

    Section 4.2.1 (p. 13) discusses an i.i.d. assumption for a lower bound on summation protocols, not an extension of PD-SGD. Searches for PD-SGD, Li et al., and a non-IID stochastic-gradient extension found no passage addressing the attributed claim. (LLM, conf=0.76)

    Experimental — accuracy not yet measured

Self-check

Percentages, sums and reported differences re-computed from the paper’s own numbers.

The self-check needs the paper’s full text.

Cites

Flagged first, then by citations

4 of the 28 references couldn’t be matched to a known paper.

Research works printed but not linked: 2

  1. [21][21] Peter Kairouz, Sewoong Oh, and Pramod Viswanath. Extremal mechanisms for local differential privacy. Journal of Machine Learning Research , 17:17:1-17:51, 2016. -
  2. [24][24] Apple's Differential Privacy Team. Learning with privacy at scale. Apple Machine Learning Journal , 1(9), 2017.

Cited by

Sorted by citations

Authors
Balle, B., Bell, J., Gascón, A., & Nissim, K.
Affiliations
  • Georgetown University (US)
  • The Alan Turing Institute (GB)
  • University of Warwick (GB)
Corresponding author
  • Bell, James
  • Gascón, Adrià
Venue
Lecture Notes in Computer Science
Published
2019
Pages
638-667
ISSN
  • 0302-9743 (ISSN-L)
  • 1611-3349
OpenAlex
W2921572731
Cited by
214
References
28
Citations by year
2026: 19 · 2025: 22 · 2024: 33 · 2023: 34 · 2022: 35 · 2021: 36 · 2020: 24 · 2019: 10 · 2018: 1
FWCI
10.04
Type
conference paper
Language
en
Open access
Locations
  • Lecture notes in computer science (publishedVersion)
  • arXiv (Cornell University) (submittedVersion)
  • Warwick Research Archive Portal (University of Warwick) (submittedVersion)
  • arXiv (Cornell University)
Funders
  • National Science Foundation (1565387)
  • Alan Turing Institute (EP/N510129/1., N510129)
  • Government of the United Kingdom
  • University of Cambridge
  • University of Warwick (EP/N510129/1)
  • Engineering and Physical Sciences Research Council (N510129, EP/N510129/, EP/N510129/1)
Topics
  • Physical Sciences › Computer Science › Artificial Intelligence › Privacy-Preserving Technologies in Data
  • Physical Sciences › Computer Science › Artificial Intelligence › Cryptography and Data Security
  • Physical Sciences › Computer Science › Information Systems › Cloud Data Security Solutions
Keywords
shuffle model, differential privacy, privacy amplification, local differential privacy, lower bounds, privacy-utility trade-off

About these checks

Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.

Statistics and arithmetic are recomputed, not judged.

Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.

What counts as a claim ›How we measure confidence ›How we check this ›

Are you an author, or do you see a problem with this page? Request a review