How to Find a Point in the Convex Hull Privately

We study the question of how to compute a point in the convex hull of an input set S of n points in mathbb Rd in a differentially private manner. This question, which is trivial non-privately, turns out to be quite deep when imposing differential privacy. In particular, it is known that the input points must reside on a fixed finite subset Gsubseteqmathbb Rd, and furthermore, the size of S must grow with the size of G. Previous works focused on understanding how n needs to grow with |G|, and showed that n=Oleft(d2.5·8log^*|G|right) suffices (so n does not have to grow significantly with |G|). However, the available constructions exhibit running time at least |G|d2, where typically |G|=Xd for some (large) discretization parameter X, so the running time is in fact Omega(Xd3). In this paper we give a differentially private algorithm that runs in O(nd) time, assuming that n=Omega(d4log X). To get this result we study and exploit some structural properties of the Tukey levels (the regions D≥ k consisting of points whose Tukey depth is at least k, for k=0,1,...). In particular, we derive lower bounds on their volumes for point sets S in general position, and develop a rather subtle mechanism for handling point sets S in degenerate position (where the deep Tukey regions have zero volume). A naive approach to the construction of the Tukey regions requires nO(d2) time. To reduce the cost to O(nd), we use an approximation scheme for estimating the volumes of the Tukey regions (within their affine spans in case of degeneracy), and for sampling a point from such a region, a scheme that is based on the volume estimation framework of Lov'asz and Vempala (FOCS 2003) and of Cousins and Vempala (STOC 2015). Making this framework differentially private raises a set of technical challenges that we address.