Cooperative Differentially Private LQG Control With Measurement Aggregation

When multiple agents solve cooperatively a joint optimal control problem, it is generally beneficial for them to coordinate their control signals. However, such strategies require that the agents share their local measurements, which may be privacy-sensitive. Motivated by this issue, this letter considers the Linear Quadratic Gaussian (LQG) control problem subject to differential privacy constraints. Differential privacy ensures that the published signals of an algorithm are not too sensitive to the data of any single participating agent. We propose a two-stage architecture for differentially private LQG control and show how to optimize it by leveraging a solution that we previously developed for the Kalman filtering problem. The first stage of this architecture is most easily implemented by a coordinator aggregating and perturbing the agents’ measurements appropriately, but it can also be implemented without a trusted aggregator by using a secure sum protocol. Numerical simulations illustrate the performance improvement of this architecture over simpler alternatives such as directly perturbing the agents’ measurements.