{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2017:PYRJRILWCMSQDVSPBCHYHZ2MNB","short_pith_number":"pith:PYRJRILW","canonical_record":{"source":{"id":"1705.00831","kind":"arxiv","version":4},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2017-05-02T07:36:35Z","cross_cats_sorted":["cs.CY","cs.IR","cs.LG"],"title_canon_sha256":"3930224ead37daf1212ceeccf1f8b8df870d5becfad6da0aa6e084f808e87c7b","abstract_canon_sha256":"05e8504fba01593d08b118bdb7839583896a7fe1522c52c2962b7f02e6c359bb"},"schema_version":"1.0"},"canonical_sha256":"7e2298a176132501d64f088f83e74c68722520e64bbb0197e23f30e125632342","source":{"kind":"arxiv","id":"1705.00831","version":4},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1705.00831","created_at":"2026-07-05T00:21:03Z"},{"alias_kind":"arxiv_version","alias_value":"1705.00831v4","created_at":"2026-07-05T00:21:03Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1705.00831","created_at":"2026-07-05T00:21:03Z"},{"alias_kind":"pith_short_12","alias_value":"PYRJRILWCMSQ","created_at":"2026-07-05T00:21:03Z"},{"alias_kind":"pith_short_16","alias_value":"PYRJRILWCMSQDVSP","created_at":"2026-07-05T00:21:03Z"},{"alias_kind":"pith_short_8","alias_value":"PYRJRILW","created_at":"2026-07-05T00:21:03Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2017:PYRJRILWCMSQDVSPBCHYHZ2MNB","target":"record","payload":{"canonical_record":{"source":{"id":"1705.00831","kind":"arxiv","version":4},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2017-05-02T07:36:35Z","cross_cats_sorted":["cs.CY","cs.IR","cs.LG"],"title_canon_sha256":"3930224ead37daf1212ceeccf1f8b8df870d5becfad6da0aa6e084f808e87c7b","abstract_canon_sha256":"05e8504fba01593d08b118bdb7839583896a7fe1522c52c2962b7f02e6c359bb"},"schema_version":"1.0"},"canonical_sha256":"7e2298a176132501d64f088f83e74c68722520e64bbb0197e23f30e125632342","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T00:21:03.789031Z","signature_b64":"OavXF4qgbisLe7kiFmZ1VRX2ss1aCjlclvNdQkXipPqPiwF7dQJeVE3Sfh1JPNFBKvUdZWAxqP1gbjMLCBObBA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"7e2298a176132501d64f088f83e74c68722520e64bbb0197e23f30e125632342","last_reissued_at":"2026-07-05T00:21:03.788676Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T00:21:03.788676Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"1705.00831","source_version":4,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T00:21:03Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Ehj2rJ82ohp2lDaBXHZhiXMA4yg2QK46sX2sDq6qJMf2P1sg6fcBwO5Iita92hQmu+Ud6ojRkvNWzOUMCoSiCQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-07T05:48:29.666295Z"},"content_sha256":"e2518f51882b1faf3a7884f3601e83aa9e4197810cdbf7eaaa71a92e4e7ed1d8","schema_version":"1.0","event_id":"sha256:e2518f51882b1faf3a7884f3601e83aa9e4197810cdbf7eaaa71a92e4e7ed1d8"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2017:PYRJRILWCMSQDVSPBCHYHZ2MNB","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"BLENDER: Enabling Local Search with a Hybrid Differential Privacy Model","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CY","cs.IR","cs.LG"],"primary_cat":"cs.CR","authors_text":"Aleksandra Korolova, Benjamin Livshits, Brendan Avent, David Zeber, Torgeir Hovden","submitted_at":"2017-05-02T07:36:35Z","abstract_excerpt":"We propose a hybrid model of differential privacy that considers a combination of regular and opt-in users who desire the differential privacy guarantees of the local privacy model and the trusted curator model, respectively. We demonstrate that within this model, it is possible to design a new type of blended algorithm for the task of privately computing the head of a search log. This blended approach provides significant improvements in the utility of obtained data compared to related work while providing users with their desired privacy guarantees. Specifically, on two large search click da"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1705.00831","kind":"arxiv","version":4},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/1705.00831/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T00:21:03Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"TjwTnzbJxsEks2cobHiS8CdVfgIwL6BFQZe4GHWntHPDo8z+9p8LeDyUXN61RzHgKD5fXJYneID/3xNvNdl9Dw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-07T05:48:29.667035Z"},"content_sha256":"b54b048d3cb4c7080cfe681f1c2b12331fe9cae4563f7bb1ee2a784a68de0987","schema_version":"1.0","event_id":"sha256:b54b048d3cb4c7080cfe681f1c2b12331fe9cae4563f7bb1ee2a784a68de0987"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/PYRJRILWCMSQDVSPBCHYHZ2MNB/bundle.json","state_url":"https://pith.science/pith/PYRJRILWCMSQDVSPBCHYHZ2MNB/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/PYRJRILWCMSQDVSPBCHYHZ2MNB/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-07T05:48:29Z","links":{"resolver":"https://pith.science/pith/PYRJRILWCMSQDVSPBCHYHZ2MNB","bundle":"https://pith.science/pith/PYRJRILWCMSQDVSPBCHYHZ2MNB/bundle.json","state":"https://pith.science/pith/PYRJRILWCMSQDVSPBCHYHZ2MNB/state.json","well_known_bundle":"https://pith.science/.well-known/pith/PYRJRILWCMSQDVSPBCHYHZ2MNB/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2017:PYRJRILWCMSQDVSPBCHYHZ2MNB","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"05e8504fba01593d08b118bdb7839583896a7fe1522c52c2962b7f02e6c359bb","cross_cats_sorted":["cs.CY","cs.IR","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2017-05-02T07:36:35Z","title_canon_sha256":"3930224ead37daf1212ceeccf1f8b8df870d5becfad6da0aa6e084f808e87c7b"},"schema_version":"1.0","source":{"id":"1705.00831","kind":"arxiv","version":4}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1705.00831","created_at":"2026-07-05T00:21:03Z"},{"alias_kind":"arxiv_version","alias_value":"1705.00831v4","created_at":"2026-07-05T00:21:03Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1705.00831","created_at":"2026-07-05T00:21:03Z"},{"alias_kind":"pith_short_12","alias_value":"PYRJRILWCMSQ","created_at":"2026-07-05T00:21:03Z"},{"alias_kind":"pith_short_16","alias_value":"PYRJRILWCMSQDVSP","created_at":"2026-07-05T00:21:03Z"},{"alias_kind":"pith_short_8","alias_value":"PYRJRILW","created_at":"2026-07-05T00:21:03Z"}],"graph_snapshots":[{"event_id":"sha256:b54b048d3cb4c7080cfe681f1c2b12331fe9cae4563f7bb1ee2a784a68de0987","target":"graph","created_at":"2026-07-05T00:21:03Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/1705.00831/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"We propose a hybrid model of differential privacy that considers a combination of regular and opt-in users who desire the differential privacy guarantees of the local privacy model and the trusted curator model, respectively. We demonstrate that within this model, it is possible to design a new type of blended algorithm for the task of privately computing the head of a search log. This blended approach provides significant improvements in the utility of obtained data compared to related work while providing users with their desired privacy guarantees. Specifically, on two large search click da","authors_text":"Aleksandra Korolova, Benjamin Livshits, Brendan Avent, David Zeber, Torgeir Hovden","cross_cats":["cs.CY","cs.IR","cs.LG"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2017-05-02T07:36:35Z","title":"BLENDER: Enabling Local Search with a Hybrid Differential Privacy Model"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1705.00831","kind":"arxiv","version":4},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:e2518f51882b1faf3a7884f3601e83aa9e4197810cdbf7eaaa71a92e4e7ed1d8","target":"record","created_at":"2026-07-05T00:21:03Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"05e8504fba01593d08b118bdb7839583896a7fe1522c52c2962b7f02e6c359bb","cross_cats_sorted":["cs.CY","cs.IR","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2017-05-02T07:36:35Z","title_canon_sha256":"3930224ead37daf1212ceeccf1f8b8df870d5becfad6da0aa6e084f808e87c7b"},"schema_version":"1.0","source":{"id":"1705.00831","kind":"arxiv","version":4}},"canonical_sha256":"7e2298a176132501d64f088f83e74c68722520e64bbb0197e23f30e125632342","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"7e2298a176132501d64f088f83e74c68722520e64bbb0197e23f30e125632342","first_computed_at":"2026-07-05T00:21:03.788676Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T00:21:03.788676Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"OavXF4qgbisLe7kiFmZ1VRX2ss1aCjlclvNdQkXipPqPiwF7dQJeVE3Sfh1JPNFBKvUdZWAxqP1gbjMLCBObBA==","signature_status":"signed_v1","signed_at":"2026-07-05T00:21:03.789031Z","signed_message":"canonical_sha256_bytes"},"source_id":"1705.00831","source_kind":"arxiv","source_version":4}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:e2518f51882b1faf3a7884f3601e83aa9e4197810cdbf7eaaa71a92e4e7ed1d8","sha256:b54b048d3cb4c7080cfe681f1c2b12331fe9cae4563f7bb1ee2a784a68de0987"],"state_sha256":"c82bb465d270519f3f4bbd4a5194d3f1ed3d8faf7f858c6b8cbc2db912941440"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"NzaIB1LrpvvHoTvFzXLe43mW4UWXzVBYa6oIyZokK14JGKeRiJFwWbNB3Mf9l/VpqLZLIw7swLbB3gVTEWggDA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-07T05:48:29.671233Z","bundle_sha256":"3c1b197247eb890226bec4947af016059ec026ea5b0eb0947812fc0f605af938"}}