Statistical database
Appearance
a database where query access is to be granted only to aggregate data, not individual records. however, it is a difficult problem, since intelligent users can use a combination of aggregate queries to derive information about a single individual.