Protecting statistical databases against retrieval of private information

The paper discusses problems arising from the 'abuse' of statistical databases by retrieving private information on individuals. The paper first demonstrates how such retrieval is made possible. It then provides a general algorithm that describes the retrieval procedures. Several protective measures are reviewed and critized. Enhancements to those measures, particularly by employing encryption methods, are suggested.