Program operation sequence determination for reduced potential leakage of personally identifiable information

Abstract

Program operation sequence determination for reduced potential leakage of personally identifiable information is performed by identifying a plurality of candidate program operations for capturing a data sample including first class information and second class information and reducing the second class information of the data sample, assigning a leakage cost representing potential leakage of personally identifiable information associated with each valid combination of a candidate program operation among the plurality of candidate program operations and a computational resource among a plurality of computational resources, and applying an objective function to the valid combinations and assigned leakage costs to determine a sequence of program operations, wherein each program operation of the sequence is performed by one or more selected computational resources such that the sum leakage cost is below a threshold leakage cost, and the amount of first class information is above a data threshold value.