Frequency Estimation in the Shuffle Model with Almost a Single Message

We present a protocol in the shuffle model of differential privacy (DP) for the frequency estimation problem that achieves error 𝜔 (1) • 𝑂 (log 𝑛), almost matching the central-DP accuracy, with 1 + 𝑜 (1) messages per user. This exhibits a sharp transition phenomenon, as there is a lower bound of Ω(𝑛 1/4 ) if each user is allowed to send only one message. Previously, such a result is only known when the domain size 𝐵 is 𝑜 (𝑛). For a large domain, we also need an efficient method to identify the heavy hitters (i.e., elements that are frequent enough). For this purpose, we design a shuffle-DP protocol that uses 𝑜 (1) messages per user and can identify all heavy hitters in time polylogarithmic in 𝐵. Finally, by combining our frequency estimation and the heavy hitter detection protocols, we show how to solve the 𝐵-dimensional 1-sparse vector summation problem in the high-dimensional setting 𝐵 = Ω(𝑛), achieving the optimal central-DP MSE Õ (𝑛) with 1 + 𝑜 (1) messages per user. In addition to error and message number, our protocols improve in terms of message size and running time as well. They are also very easy to implement. The experimental results demonstrate order-ofmagnitude improvement over prior work. CCS CONCEPTS • Security and privacy → Privacy-preserving protocols.