Towards Sparse Federated Analytics: Location Heatmaps under Distributed Differential Privacy with Secure Aggregation
Not on the map. Why?
Abstract (arXiv)
We design a scalable algorithm to privately generate location heatmaps over decentralized data from millions of user devices. It aims to ensure differential privacy before data becomes visible to a service provider while maintaining high data accuracy and minimizing resource consumption on users' devices. To achieve this, we revisit distributed differential privacy based on recent results in secure multiparty computation, and we design a scalable and adaptive distributed differential privacy approach for location analytics. Evaluation on public location datasets shows that this approach successfully generates metropolitan-scale heatmaps from millions of user samples with a worst-case client communication overhead that is significantly smaller than existing state-of-the-art private protocols of similar accuracy.
Key facts. Cited by 10 papers in the map (data through 14 Oct 2026). Builds on 31 of its 76 references that are in the map. First posted on arXiv 3 Nov 2021.
Builds on
31 of 76 references.
References · 31
- 2019Advances and Open Problems in Federated Learningcited by 3,046
- 2018Improving the Gaussian Mechanism for Differential Privacy: Analytical Calibration and Optimal Denoisingcited by 218
- 2018A Hybrid Approach to Privacy-Preserving Federated Learningcited by 210
- 2016Practical Secure Aggregation for Federated Learning on User-Held Datacited by 178
- 2018Amplification by Shuffling: From Local to Central Differential Privacy via Anonymitycited by 164
- 2021The Distributed Discrete Gaussian Mechanism for Federated Learning with Secure Aggregationcited by 128
- 2018Distributed Differential Privacy via Shufflingcited by 115
- 2020Hiding Among the Clones: A Simple and Nearly Optimal Analysis of Privacy Amplification by Shufflingcited by 96
- 2019The Privacy Blanket of the Shuffle Modelcited by 74
- 2021The Skellam Mechanism for Differentially Private Federated Learningcited by 68
- 2020FastSecAgg: Scalable Secure Aggregation for Privacy-Preserving Federated Learningcited by 61
- 2016Discrete Distribution Estimation under Local Privacycited by 59
19 more
- 2017Prochlo: Strong Privacy for Analytics in the Crowdcited by 51
- 2020Encode, Shuffle, Analyze Privacy Revisited: Formalizations and Empirical Evaluationcited by 39
- 2020Private Summation in the Multi-Message Shuffle Modelcited by 34
- 2016Privacy Odometers and Filters: Pay-as-you-Go Compositioncited by 33
- 2019Federated Heavy Hitters Discovery with Differential Privacycited by 32
- 2017Optimal Schemes for Discrete Distribution Estimation under Locally Differential Privacycited by 29
- 2017Practical Locally Private Heavy Hitterscited by 29
- 2016PrivTree: A Differentially Private Algorithm for Hierarchical Decompositionscited by 22
- 2017Heavy Hitters and the Structure of Local Privacycited by 20
- 2019Separating Local & Shuffled Differential Privacy via Histogramscited by 16
- 2021Private Counting from Anonymous Messages: Near-Optimal Accuracy with Vanishing Communication Overheadcited by 16
- 2019Private Aggregation from Fewer Anonymous Messagescited by 15
- 2020Pure Differentially Private Summation from Anonymous Messagescited by 15
- 2020Shuffled Model of Federated Learning: Privacy, Communication and Accuracy Trade-offscited by 15
- 2020Connecting Robust Shuffle Privacy and Pan-Privacycited by 12
- 2017Marginal Release Under Local Differential Privacycited by 9
- 2017A Framework for Evaluating Epidemic Forecastscited by 8
- 2021Frequency Estimation Under Multiparty Differential Privacy: One-shot and Streamingcited by 8
- 2017Computational Differential Privacy from Lattice-based Cryptographycited by 6
Built on by
Citing papers per year: 2021: 1; 2022: 2; 2023: 1; 2024: 3; 2025: 2; 2026: 1.
10 papers.
- 2024PrE-Text: Training Language Models on Private Federated Data in the Age of LLMscited by 29
- 2022Federated Select: A Primitive for Communication- and Memory-Efficient Federated Learningcited by 11
- 2022FedWalk: Communication Efficient Federated Unsupervised Node Embedding with Differential Privacycited by 9
- 2021Location Leakage in Federated Signal Mapscited by 2
- 2023Differentially Private Heavy Hitter Detection using Federated Analyticscited by 2
- 2024PAPAYA Federated Analytics Stack: Engineering Privacy, Scalability and Practicalitycited by 1
- 2025How to Securely Shuffle? A survey about Secure Shufflers for privacy-preserving computationscited by 1
- 2024Federated Computing -- Survey on Building Blocks, Extensions and Systemscited by 0
- 2025DP-Hype: Federated Differentially Private Hyperparameter Searchcited by 0
- 2026TAPAS: Efficient Two-Server Asymmetric Private Aggregation Beyond Prio(+)cited by 0
- 2026TAPAS: Efficient Two-Server Asymmetric Private Aggregation Beyond Prio(+)20 Mar 2026
- 2025DP-Hype: Federated Differentially Private Hyperparameter Search6 Oct 2025
- 2025How to Securely Shuffle? A survey about Secure Shufflers for privacy-preserving computations2 Jul 2025
- 2024PAPAYA Federated Analytics Stack: Engineering Privacy, Scalability and Practicality3 Dec 2024
- 2024PrE-Text: Training Language Models on Private Federated Data in the Age of LLMs5 Jun 2024
- 2024Federated Computing -- Survey on Building Blocks, Extensions and Systems3 Apr 2024
- 2023Differentially Private Heavy Hitter Detection using Federated Analytics21 Jul 2023
- 2022Federated Select: A Primitive for Communication- and Memory-Efficient Federated Learning19 Aug 2022
- 2022FedWalk: Communication Efficient Federated Unsupervised Node Embedding with Differential Privacy31 May 2022
- 2021Location Leakage in Federated Signal Maps7 Dec 2021