Personal Data Management with the Databox: What's Inside the Box?
Differential Privacy