Improved Differentially Private Continual Observation Using Group Algebra
Monika Henzinger, Jalaj Upadhyay
Abstract
Differentially private weighted prefix sum under continual observation is a crucial component in the production-level deployment of private next-word prediction for Gboard, which, according to Google, has over a billion users. More specifically, Google uses a differentially private mechanism to sum weighted gradients in its private follow-the-regularized leader algorithm. Apart from efficiency, the additive error of the private mechanism is crucial as multiplied with the square root of the model's dimension d (with d ranging up to 10 trillion, for example, Switch Transformers or M6-10T), it determines the accuracy of the learning system. So, any improvement in leading constant matters significantly in practice.
In this paper, we show a novel connection between mechanisms for continual weighted prefix sum and a concept in representation theory known as the group matrix introduced in correspondence between Dedekind and Frobenius (Sitzungsber. Preuss. Akad. Wiss. Berlin, 1897) and generalized by Schur (Journal für die reine und angewandte Mathematik, 1904). To the best of our knowledge, this is the first application of group algebra in the analysis of differentially private algorithms. Using this connection, we analyze a class of matrix norms known as factorization norms that give upper and lower bounds for the additive error under general ℓp-norms of the matrix mechanism. This allows us to give (1) the first efficient factorization that matches the best-known non-constructive upper bound on the factorization norm by Mathias (SIAM Journal of Matrix Analysis and Applications, 1993) for the matrix used in Google's deployment, and also improves on the previous best-known constructive bound of Fichtenberger, Henzinger, and Upadhyay (ICML 2023) and Henzinger, Upadhyay, and Upadhyay (SODA 2023); thereby, partially resolving an open question in operator theory, (2) the first upper bound on the additive error for a large class of weight functions for weighted prefix sum problems, including the sliding window matrix (Bolot, Fawaz, Muthukrishnan, Nikolov, and Taft (ICDT 2013). We also improve the bound on factorizing the striped matrix used for outputting a synthetic graph that approximates all cuts (Fichtenberger, Henzinger, and Upadhyay (ICML 2023)); (3) a general improved upper bound on the factorization norms that depend on algebraic properties of the weighted sum matrices and that applies to a more general class of weighting functions than the ones considered in Henzinger, Upadhyay, and Upadhyay (SODA 2024). Using the known connection between these factorization norms and the ℓp-error of continual weighted sum, we give an upper bound on the ℓp-error for the continual weighted sum problem for p ≥ 2.
Ask about this paper
Your agent reads all of it.
Lune indexed this paper to the last equation, along with the top-tier papers that cite it. Ask a question and the answer quotes them.
Cited by top-tier papers6
- Back to Square Roots: An Optimal Bound on the Matrix Factorization Error for Multi-Epoch Differentially Private SGDNikita Kalinin, Ryan McKenna, Jalaj Upadhyay, Christoph H. LampertICLR 2026 · 10 citations
- Continual Release Moment Estimation with Differential PrivacyNikita P. Kalinin, Jalaj Upadhyay, Christoph H. LampertNeurIPS 2025 · 5 citations
- Continual Counting with Gradual Privacy ExpirationJoel Daniel Andersson, Monika Henzinger, Rasmus Pagh, Teresa Anna Steiner et al.NeurIPS 2024 · 4 citations
- Skirting Additive Error Barriers for Private Turnstile StreamsAnders Aamand, Justin Y. Chen, Sandeep SilwalICLR 2026 · 2 citations
- Edit-Neighboring Data Streams and Privacy under Continual ObservationJoel Daniel Andersson, Anamay Chaturvedi, Monika Henzinger, Roodabeh SafaviCCS 2026
Builds on11
- Improved Differential Privacy for SGD via Optimal Private Linear Operators on Adaptive StreamsSergey Denisov, H. Brendan McMahan, John Rush, Adam D. Smith et al.NeurIPS 2022 · 96 citations
- The Price of Differential Privacy under Continual ObservationPalak Jain, Sofya Raskhodnikova, Satchit Sivakumar, Adam D. SmithICML 2023 · 63 citations
- Multi-Epoch Matrix Factorization Mechanisms for Private Machine LearningChristopher A. Choquette-Choo, Hugh Brendan McMahan, J. Keith Rush, Abhradeep Guha ThakurtaICML 2023 · 62 citations
- Constant Matters: Fine-grained Error Bound on Differentially Private Continual ObservationHendrik Fichtenberger, Monika Henzinger, Jalaj UpadhyayICML 2023 · 34 citations
- A Smooth Binary Mechanism for Efficient Private Continual ObservationJoel Daniel Andersson, Rasmus PaghNeurIPS 2023 · 22 citations
Related papers
- A Unifying Framework for Differentially Private Sums under Continual ObservationMonika Henzinger, Jalaj Upadhyay, Sarvagya UpadhyaySODA 2024 · 4 citations
- Almost Tight Error Bounds on Differentially Private Continual CountingMonika Henzinger, Jalaj Upadhyay, Sarvagya UpadhyaySODA 2023 · 14 citations
- Private Continual Counting of Unbounded StreamsBen Jacobsen, Kassem FawazNeurIPS 2025 · 2 citations
- Online Matrix Factorization, Online Private Query Release, and Online Discrepancy MinimizationAleksandar Nikolov, Haohua Tang, Jonathan UllmanSTOC 2026 · 1 citation
- Efficient and Near-Optimal Noise Generation for Streaming Differential PrivacyKrishnamurthy Dj Dvijotham, H. Brendan McMahan, Krishna Pillutla, Thomas Steinke et al.FOCS 2024 · 6 citations
