Efficiently querying databases while providing differential privacy

摘要

Technologies are provided for efficiently querying a database using a plurality of oblivious random-access memories (ORAMs) while providing differential privacy. Subsets of a set of database records can be stored in a plurality of ORAMs. The subsets of database records in the separate ORAMs can be concurrently accessed (for example, by a database query server). When a database query is received, a number of database records that match the query can be identified for each of the ORAMs. A differential privacy constraint can be used to determine an additional number of database records to be retrieved from each ORAM. The differential privacy constraint can specify an upper bound on the number of records to be retrieved from each ORAM to prevent (or reduce the risk of) information leakage. Once all of the identified records are retrieved from the plurality of ORAMs, the additional records can be discarded.