원래 이름 기록: Lemon Inc.; Beijing Zitiao Network Technology Co., Ltd.

Methods, systems, and apparatus, including computer programs encoded on computer storage media, for evaluating a protocol for hashing data on client devices. One of the methods includes obtaining a size of a hashing domain for one or more hash functions, each configured to process source data to generate an output value; obtaining a probability of including each output value in a corresponding message; obtaining a differential privacy parameter; and generating a variance of the quantity of times the source data was a cause of a message over the one or more hash functions using the size of the hashing domain, the probability, and a value based on the differential privacy parameter.

Methods, systems, and apparatus, including computer programs encoded on computer storage media, for hashing data on client devices. One of the methods includes generating, using a hash function, an output value that is in a hashing domain for the hash function; accessing a message size that is a smaller value than a domain size of the hashing domain; generating, using the hash function and the message size, one or more noise values; generating a message that includes the one or more noise values; and providing, to an external system, the message.

Methods, systems, and apparatus, including computer programs encoded on computer storage media, for encoding data on client devices. One of the methods includes obtaining dataset for transmission; dividing the dataset into two subsets according to one or more selection criteria, wherein data items that satisfy the one or more criteria are added to a first subset and the data items that do not satisfy the one or more criteria are added to a second subset, wherein the first subset is smaller than the second subset; encoding the data items of the first subset according to a first encoding technique and encoding the data items of the second subset according to a second encoding technique; applying a local differential privacy (LDP) mechanism to data elements of the first subset and the second subset to generate an LDP message; and transmitting the LDP message to an external recipient.