L Jean Camp and J D Tygar
Historically, there has been tension between performance and privacy of information systems because of the crucial role of collection of usage data. The methods used by a number of different architectures to approach this tension are examined. Both enhancements to traditional software architectures and an architecture that resolves this conflict are presented. A cryptographic technique for storing data, called secret counting, is discussed. This technique makes possible anonymous updates of secure, aggregate information. The research clearly demonstrates that the conflict between privacy and utility of information is not always necessary. Suitable technology resolves this conflict. The techniques and architectures described have applications for other information providers.