privacy protection; data utility; efficiency measurement; system modelling