{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T04:17:14Z","timestamp":1750220234307,"version":"3.41.0"},"reference-count":30,"publisher":"Association for Computing Machinery (ACM)","issue":"1","license":[{"start":{"date-parts":[[2021,12,23]],"date-time":"2021-12-23T00:00:00Z","timestamp":1640217600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":["J. Data and Information Quality"],"published-print":{"date-parts":[[2022,3,31]]},"abstract":"<jats:p>Workflows have been adopted in several scientific fields as a tool for the specification and execution of scientific experiments. In addition to automating the execution of experiments, workflow systems often include capabilities to record provenance information, which contains, among other things, data records used and generated by the workflow as a whole but also by its component modules. It is widely recognized that provenance information can be useful for the interpretation, verification, and re-use of workflow results, justifying its sharing and publication among scientists. However, workflow execution in some branches of science can manipulate sensitive datasets that contain information about individuals. To address this problem, we investigate, in this article, the problem of anonymizing the provenance of workflows. In doing so, we consider a popular class of workflows in which component modules use and generate collections of data records as a result of their invocation, as opposed to a single data record. The solution we propose offers guarantees of confidentiality without compromising lineage information, which provides transparency as to the relationships between the data records used and generated by the workflow modules. We provide algorithmic solutions that show how the provenance of a single module and an entire workflow can be anonymized and present the results of experiments that we conducted for their evaluation.<\/jats:p>","DOI":"10.1145\/3460207","type":"journal-article","created":{"date-parts":[[2021,12,23]],"date-time":"2021-12-23T10:35:54Z","timestamp":1640255754000},"page":"1-27","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":0,"title":["On the Anonymization of Workflow Provenance without Compromising the Transparency of Lineage"],"prefix":"10.1145","volume":"14","author":[{"ORCID":"https:\/\/orcid.org\/0000-0001-6938-0820","authenticated-orcid":false,"given":"Khalid","family":"Belhajjame","sequence":"first","affiliation":[{"name":"PSL, Universit\u00e9 Paris-Dauphine, LAMSADE, Paris, France"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2021,12,23]]},"reference":[{"key":"e_1_3_2_2_2","doi-asserted-by":"publisher","DOI":"10.1186\/s40537-017-0110-7"},{"key":"e_1_3_2_3_2","article-title":"k-anonimity as a Privacy Measure","year":"2018","unstructured":"AEPD. 2018. k-anonimity as a Privacy Measure. Spanish Agen. Data Protect.Retrieved from https:\/\/www.aepd.es\/media\/notas-tecnicas\/nota-tecnica-kanonimidad-en.pdf.","journal-title":"Spanish Agen. Data Protect."},{"key":"e_1_3_2_4_2","first-page":"111","volume-title":"Privacy-aware Workflow Management","author":"Alhaqbani B.","year":"2013","unstructured":"B. Alhaqbani, M. Adams, C. J. Fidge, and A. H. M. ter Hofstede. 2013. Privacy-aware Workflow Management. Springer, 111\u2013128."},{"key":"e_1_3_2_5_2","doi-asserted-by":"publisher","DOI":"10.1109\/ICDE.2009.103"},{"key":"e_1_3_2_6_2","volume-title":"Lineage Preserving Annonymization of the Provenance of Collection-based Workflows","author":"Belhajjame Khalid","year":"2020","unstructured":"Khalid Belhajjame. 2020. Lineage Preserving Annonymization of the Provenance of Collection-based Workflows. Technical Report. PSL, Paris-Dauphine University. Retrieved from https:\/\/hal.archives-ouvertes.fr\/hal-02430624\/file\/techreport.pdf."},{"key":"e_1_3_2_7_2","first-page":"229","volume-title":"EDBT","author":"Belhajjame Khalid","year":"2020","unstructured":"Khalid Belhajjame. 2020. Lineage-preserving anonymization of the provenance of collection-based workflows. In EDBT, Angela Bonifati, Yongluan Zhou, Marcos Antonio Vaz Salles, Alexander B\u00f6hm, Dan Olteanu, George H. L. Fletcher, Arijit Khan, and Bin Yang (Eds.). OpenProceedings.org, 229\u2013240. DOI: https:\/\/doi.org\/10.5441\/002\/edbt.2020.21"},{"key":"e_1_3_2_8_2","volume-title":"EDBT\/ICDT Workshops (CEUR Workshop Proceedings)","volume":"2322","author":"Belhajjame Khalid","year":"2019","unstructured":"Khalid Belhajjame, Noura Faci, Zakaria Maamar, Vanilson Arruda Bur\u00e9gio, Edvan Soares, and Mahmoud Barhamgi. 2019. Privacy-preserving data analysis workflows for escience. In EDBT\/ICDT Workshops (CEUR Workshop Proceedings), Vol. 2322. CEUR-WS.org."},{"key":"e_1_3_2_9_2","doi-asserted-by":"publisher","DOI":"10.5555\/1325851.1326016"},{"key":"e_1_3_2_10_2","doi-asserted-by":"publisher","DOI":"10.1109\/WAIM.2008.41"},{"key":"e_1_3_2_11_2","volume-title":"ISWC\u201907 Workshops","author":"Cheung William Kwok-Wai","year":"2007","unstructured":"William Kwok-Wai Cheung and Yolanda Gil. 2007. Privacy enforcement through workflow systems in e-science and beyond. In ISWC\u201907 Workshops. CEUR.WS. http:\/\/ceur-ws.org\/Vol-320\/paper5.pdf."},{"key":"e_1_3_2_12_2","doi-asserted-by":"publisher","DOI":"10.5555\/2612167.2612170"},{"key":"e_1_3_2_13_2","first-page":"400","volume-title":"e-Science","author":"Silva Rafael Ferreira da","year":"2016","unstructured":"Rafael Ferreira da Silva, et\u00a0al. 2016. Automating environmental computing applications with scientific workflows. In e-Science. IEEE, 400\u2013406. DOI: https:\/\/doi.org\/10.1109\/eScience.2016.7870926"},{"key":"e_1_3_2_14_2","doi-asserted-by":"publisher","DOI":"10.1145\/1989284.1989305"},{"key":"e_1_3_2_15_2","unstructured":"Dheeru Dua and Casey Graff. 2017. UCI Machine Learning Repository. Retrieved fromhttp:\/\/archive.ics.uci.edu\/ml."},{"key":"e_1_3_2_16_2","doi-asserted-by":"publisher","DOI":"10.1007\/11787006_1"},{"key":"e_1_3_2_17_2","volume-title":"AAAI","author":"Gil Yolanda","year":"2010","unstructured":"Yolanda Gil and Christian Fritz. 2010. Reasoning about the appropriate use of private data through computational workflows. In AAAI. AAAI. Retrieved from http:\/\/www.aaai.org\/ocs\/index.php\/SSS\/SSS10\/paper\/view\/1150."},{"key":"e_1_3_2_18_2","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2017.02.014"},{"key":"e_1_3_2_19_2","doi-asserted-by":"publisher","DOI":"10.1109\/SCC.2015.32"},{"key":"e_1_3_2_20_2","doi-asserted-by":"publisher","DOI":"10.1109\/ICDE.2006.101"},{"key":"e_1_3_2_21_2","doi-asserted-by":"publisher","DOI":"10.5555\/1855795.1855796"},{"key":"e_1_3_2_22_2","doi-asserted-by":"publisher","DOI":"10.1145\/1055558.1055591"},{"key":"e_1_3_2_23_2","doi-asserted-by":"publisher","DOI":"10.1145\/1739041.1739079"},{"key":"e_1_3_2_24_2","doi-asserted-by":"publisher","DOI":"10.5555\/1350745.1350753"},{"key":"e_1_3_2_25_2","doi-asserted-by":"publisher","DOI":"10.1109\/TKDE.2008.210"},{"key":"e_1_3_2_26_2","doi-asserted-by":"publisher","DOI":"10.14778\/3231751.3231757"},{"key":"e_1_3_2_27_2","doi-asserted-by":"publisher","DOI":"10.1145\/275487.275508"},{"key":"e_1_3_2_28_2","doi-asserted-by":"publisher","DOI":"10.1016\/j.jcss.2009.11.009"},{"key":"e_1_3_2_29_2","doi-asserted-by":"publisher","DOI":"10.14778\/1453856.1453874"},{"key":"e_1_3_2_30_2","volume-title":"Algorithms for Scheduling Problems","author":"Werner Frank","year":"2018","unstructured":"Frank Werner, Larysa Burtseva, and Yuri Sotskov. 2018. Algorithms for Scheduling Problems. MDPI."},{"key":"e_1_3_2_31_2","doi-asserted-by":"publisher","DOI":"10.1093\/nar\/gkt328"}],"container-title":["Journal of Data and Information Quality"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3460207","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3460207","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,17]],"date-time":"2025-06-17T19:30:19Z","timestamp":1750188619000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3460207"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2021,12,23]]},"references-count":30,"journal-issue":{"issue":"1","published-print":{"date-parts":[[2022,3,31]]}},"alternative-id":["10.1145\/3460207"],"URL":"https:\/\/doi.org\/10.1145\/3460207","relation":{},"ISSN":["1936-1955","1936-1963"],"issn-type":[{"type":"print","value":"1936-1955"},{"type":"electronic","value":"1936-1963"}],"subject":[],"published":{"date-parts":[[2021,12,23]]},"assertion":[{"value":"2020-12-01","order":0,"name":"received","label":"Received","group":{"name":"publication_history","label":"Publication History"}},{"value":"2021-04-01","order":1,"name":"accepted","label":"Accepted","group":{"name":"publication_history","label":"Publication History"}},{"value":"2021-12-23","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}