Differential privacy as a protocol constraint | IEEE Conference Publication | IEEE Xplore