Personalized Privacy-Preserving Data Aggregation for Histogram Estimation
Space/time trade-offs in hash coding with allowable errors