Abstract
Between the 2011 and 2016 national censuses, the Australian Bureau of Statistics changed its anonymity policy compliance system for the distribution of census data. The new method has resulted in dramatic inconsistencies when comparing lowresolution data to aggregated highresolution data. Hence, aggregated totals do not match true totals, and the mismatch gets worse as the data resolution gets finer. Here, we address several aspects of this inconsistency with respect to the 2016 usualresidence to placeofwork travel data. We introduce a resampling system that rectifies many of the artifacts introduced by the new ABS protocol, ensuring a higher level of consistency across partition sizes. We offer a surrogate highresolution 2016 commuter dataset that reduces the difference between the aggregated and true commuter totals from ~34% to only ~7%, which is on the order of the discrepancy across partition resolutions in data from earlier years.
Design Type(s)  modeling and simulation objective • network analysis objective • data validation objective 
Measurement Type(s)  population data 
Technology Type(s)  computational modeling technique 
Factor Type(s)  geographic location 
Sample Characteristic(s)  Australia • anthropogenic habitat 
Machineaccessible metadata file describing the reported data (ISATab format)
Background & Summary
Highresolution commuter network information, as well as general information describing population distributions^{1}, is a major factor in the computational modeling of diffusion phenomena in various contexts: demographic^{2}, epidemiological^{3,4,5,6}, economic^{7}, ecological^{8} and so on. However, privacy constraints on released Census data, in the presence of intricate dependencies between population and employment distributions in relatively small, highly urbanized, but spatially spread countries, such as Australia, coupled with changes in data protocols across census years, present specific challenges in reconstructing commuter (traveltowork) networks with sufficiently high fidelity^{1,9,10,11,12}.
These challenges manifest in two ways. The first of these pertains to individual microdata, which is organized by household to capture information about both the individual and housing unit. While the collective microdata is a powerful resource, variations in questions asked, possible responses, and record structure often present difficulties in comparing results across years^{13}. The second challenge relates to the specific methods used by agencies that gather and report census data, in protecting the anonymity of individuals. While it is necessary for these methods to introduce perturbations, the details of how such perturbations are applied can result in unintended consequences when highresolution data is aggregated. This is because biases introduced by the perturbation protocol are magnified by aggregation.
In the recent Australian census datasets^{14}, these challenges manifest themselves as loss of accuracy in very finely partitioned data, where individual population counts can be on the order 1 to 10 individuals. An important example of such a data set is the commuter network, describing the normal work travel behaviour of the population. The loss of accuracy in such data is primarily due to the specific noiseinducing protocols that the Australian Bureau of Statistics (ABS) employs to ensure the anonymity of census participants. At the same time, this loss in accuracy severely diminishes the usefulness of the commuter networks in modelling contagion phenomena, such as epidemics. In such models, work mobility is a primary driver of contagious diffusion. As such, the accuracy of the commuter network is crucial for realistic outputs regarding aggregate demographic and epidemiological characteristics, such as the community and national attack rates. Furthermore, without trustworthy inputs, such models cannot accurately identify salient routes of contagion spread, or analyze mitigation strategies based on network theory.
Similar challenges from noiseinducing protocols, which may also differ across census years, occur in other scenarios in which there is a need to estimate demographic and phenomenological dynamics. This is relevant not only to networkcentric studies, but also to more general agentbased simulations, or any study aimed at the finegrained reconstruction of spatiotemporal dynamics^{15}. Thus, the goal of the present work is not only to reconstruct the specific commuter networks of Australia between 2011 and 2016, but also to present a method of microdata reconstruction. The method aims to correct discrepancies that may arise due to the noise protocols used to anonymize the Census, improving consistency across partition scales while preserving anonymity. The secondary aim is to increase the interoperability of Census datasets, in line with the Integrated Public Use Microdata Series (IPUMS) approach^{13}.
To further these ambitions we first formalize the network structure and identify discrepancies between different scales of spatial partitioning. We then describe the technical details for constructing our resampled network using additional datasets. Finally, we show several comparisons between the ABS provided and the resampled data that demonstrate the distinction and validity of the resulting dataset.
The ABS provides access to most census data through the online system Census TableBuilder, free of charge, for the 2006 census onward. A subset of the available data is the accumulated microdata of usualresidence (UR) to placeofwork (POW) which constitutes the commuter mobility network (we will refer to this as the TTW, or, traveltowork dataset). Each census has undergone some repartitioning of residential and work areas with the latest hierarchical structure divided into four levels of statistical areas for UR (UR = [SA1, SA2, SA3, SA4]), and POW (POW = [DZN, SA2, SA3, SA4]), respectively. This system is defined by the Australian Statistical Geography Standard^{16}. The smallest of these residential partitions, SA1, is designed to house a population of about 200 to 800 people. Maps of SA2, SA1, and DZN partitions for the Greater Sydney region are displayed in Fig. 1. SA1 and DZN partitions accumulate to exact partitions on the SA2 scale, this is displayed for SA1 partitions in Fig. 1a, and for DZN partitions in Fig. 1b. This exact correspondence allows unambiguous amalgamation of statistics from smaller to larger spatial scales. Note that the uneven distribution of employment centers in Australia’s cities produces a corresponding nonuniformity in DZN partition density, as displayed in Fig. 1b.
This partitioned commuter data translates to a bipartite network G_{[UR→POW]} = (V_{G}, E_{G}) where V_{G} is a set of vertices (nodes) of two types V_{G} = X ∪ Y, where X = {x_{1}, x_{2}, …, x_{n}} represent the n partitioned UR locations, and Y = {y_{1}, y_{2},…, y_{k}} represent the k partitioned POW locations. The set of edges
defines the unique connections between these vertices. For example, UR x_{i} and POW y_{j} may be connected by an edge e_{ij} = (x_{i}, y_{j}). Each subset of edges has a corresponding set of weights, defined by the function:
which gives a set of commuter numbers indexed to the corresponding location pairs in {e_{ij}}, over the network G. The use of the argument G is necessary, as the same location pairs may have different numbers of commuters in different networks. For brevity, we will omit the subscripts i and j in cases where they are not required for specificity. We will use similar notation to refer to the sets of UR and POW locations associated with edge sets {e} as x({e}) and y({e}), as well [Note: the second argument is not necessary here, as the required information is contained in the set {e}, and does not vary between networks with the same sets of nodes].
As mentioned above, these data sets are subject to a perturbation protocol to prevent cross referencing different variables that may allow the identification of specific individuals^{17} even with the application of safeguards^{18,19}. Not doing so would violate the Australian Census and Statistics Act 1905 to preserve the anonymity of individuals. The ABS applies two general categories of perturbations, data suppression in which tabular data that presents a high risk of crossidentification is simply removed, and data modification. Data suppression typically involves the introduction of a highpass threshold below which entries are set to zero. Data modification involves various methods of additive noise perturbation as discussed in ABS publications^{20,21,22}. [Note: The referenced ABS publications contain various descriptions of perturbation methods that may or may not have actually been applied by the ABS whose data perturbation policies are subject to change and may vary between data sets.]
The sizes of UR and POW population partitions affect the magnitudes of the populations moving between them. Relative to these magnitudes, different levels of noise addition and data suppression are required to preserve the anonymity of individuals. Furthermore, for the 2016 census, the ABS changed their perturbation protocol by removing a step designed to conserve the total population across different spatial partitions, a property they refer to as ‘additivity’. Some major practical consequences of removing the additivityensuring step are observable discrepancies in the total number of commuters, \({N}_{G}=\sum w({E}_{G},G)\), accounted for by the network G on different partition scales.
Edge weight distributions, and cumulative population distributions as functions of edge weight for the SA2 → SA2 and SA1 → DZN commuter networks of 2011 and 2016 are displayed in Fig. 2. Lowerresolution TTW networks such as those representing connections on the SA2 scale display relatively consistent weight distributions between censuses. Comparison across years shows moderate increases in the numbers of edges across the weight range as could be expected for an increasing employed population between 2011 and 2016 (Fig. 2a,b). The corresponding distribution of this increased population across the edge weight range is illustrated in Fig. 2c, which does not show any alarming trends or obvious artifacts in the data. Unfortunately, this consistency does not hold for the finegrained SA1 → DZN network. The weight distributions for this network shown in Fig. 2d,e indicate a counterintuitive drop in the numbers of small edges between 2011 and 2016, which corresponds to a dramatic decrease in the total commuting population accounted for by the network. The distribution of the commuting population across the edge weight range (Fig. 2f) confirms that major discrepancies exist between partition schemes, likely due to a significant drop in the number of small edges included in the network.
As the partitions that comprise the vertices V_{G} are increasingly subdivided, the weights of the edges connecting them get smaller. The new perturbation protocol appears to dramatically reduce the number of small edges included in the network, particularly around the minimum value of w = 3. This adversely effects the network both quantitatively, by lowering the commuter populations throughout the network, and structurally, by removing edges from E_{G}, which alters the binary structure of the network. In the case of the highresolution SA1 → DZN network, small edges are a crucial aspect of the network structure, and carry a large portion of the total edge strength.
The need for a method to ensure consistency in commuter numbers across partition scales is further exemplified in Fig. 3a, which plots the total working population (N_{G}) in networks built by distributing commuters from SA1 partitions into each of the possible POW partition schemes. As the sizes of the POW partitions decrease from the entire nation down to individual destination zones, the total number of commuters drops by 34% while the total number of edges increases by four orders of magnitude.
The structural inconsistency across partition scales that this problem introduces can be understood by amalgamating the vertices of network G_{[SA1→DZN]} into the corresponding SA2 partitions. By doing so, we create network A_{[SA2→SA2]} = (V_{A}, E_{A}), that can be compared to the network constructed from ABS data on the SA2 scale [which we will label network B_{[SA2→SA2]} = (V_{B}, E_{B})]. Network B is missing only 6% of the total commuter population because the edges are composed of more commuters and therefore receive relatively less perturbation from the ABS protocol. This smaller discrepancy is comparable with that of previous years for which the additivityensuring step was still included.
Figure 3b illustrates the discrepancies between edge weights (commuter numbers between a given pair of locations) for edges appearing in both networks A and B. To compute these discrepancies, we define the set of edges appearing in both E_{A} and E_{B} as the intersection E_{AB} = E_{B} ∩ E_{A}, the weights of these edges for networks B and A, respectively, as w_{B} = w(E_{AB}, B), and w_{A} = w(E_{AB}, A), and the discrepancies Δw between the weights of edges existing in both sets
Using this notation, Fig. 3b plots Δw_{ij} as a function of w ∈ w_{B}, and demonstrates that the perturbations to small edges in the SA1 → DZN network produce large negative discrepancies in edge weight when the data is aggregated to the SA2 → SA2 scale.
To understand this result in more detail, it is helpful to note that the spatial distribution of the working population is very heterogeneous, with an exponentially larger fraction of the working population employed within the central business districts of major cities. However, only the DZN partitions are designed to accommodate this heterogeneity, as they are delineated based on employee population (the number of people who work in a region), rather than residential population. On the other hand, SA2 partitions are designed based on residential population which results in a few SA2 business hubs containing many DZN partitions (see Fig. 1b). In some cases, over 10^{3} component SA1 → DZN edges amalgamate to single, larger SA2 → SA2 edges.
It is clear that many SA1 → DZN edges are being removed entirely (their weight set to zero) because there are 97,881 edges appearing in the asprovided SA2 → SA2 network B that do not appear after aggregating the SA1 → DZN edges to produce network A. This gives E_{A} ≈ 0.64E_{B} for the SA2level networks. The frequency distribution for the weights of missing edges, w({E_{B}\E_{A}}, B) (where the symbol\denotes the set complement), is shown in Fig. 3c which indicates an exponential decrease in removal frequency as a function of edge weight. The data in Figs 2 and 3 indicate conclusively that many small perturbations on the SA1 → DZN scale accumulate, producing the large discrepancies observed when they are aggregated.
In this work, we develop and apply a method to restore the lost network structure and improve quantitative consistency across commuter networks on different partition scales. The result is a surrogate network S_{[SA1→DZN]} = (V_{S}, E_{S}), on the resolution of SA1 to DZN. This reconstructed commuter network will serve as a platform for ongoing research efforts that utilize Australian travel networks, such as agentbased epidemiological modeling^{5,23}.
Methods
Our method is essentially a resampling process that we use to introduce new edges into the SA1 → DZN network to improve quantitative consistency upon aggregation to the SA2 scale. The method does not introduce any new edges to the SA2 → SA2 network upon aggregation, and therefore cannot correct for the missing edges distributed as shown in Fig. 3c. However, most of the missing commuters are accounted for by correcting the discrepancies shown in Fig. 3b, and our method emphasizes this aspect of the problem.
Before commencing our procedure, we preprocessed all data provided by the ABS to remove the edges that link to nongeographic regions such as “Migratory/offshore/shipping” and “No usual address”. For the 2016 SA1 → DZN network this accounts for 53,135 edges and 469,854 commuters.
In addition to the original, perturbed SA1 → DZN network, the method requires the following sets and quantities that we obtained from independent ABS databases:

\({N}_{X}=\{{N}_{{x}_{1}},\,{N}_{{x}_{2}},\,\ldots {N}_{{x}_{n}}\}\) and \({N}_{Y}=\{{N}_{{y}_{1}},\,{N}_{{y}_{2}},\,\ldots {N}_{{y}_{n}}\}\), the set of local worker populations for SA1 and DZN partitions, respectively.

The SA2 → SA2 commuter numbers from the ABSprovided SA2 → SA2 network (B).

The set of (unweighted) SA2 → DZN edges found by creating a mixedpartition network.

P(w  N_{x}), the normalized distribution of edge weights w given residential population N_{x}.
The last item refers to the relationship between the local distribution of edge weights and the population of the associated SA1, as calculated from 2011 census data obtained without the updated privacy policy compliance protocol.
Our method can be summarized as a twostep process:

1.
Produce a set of q candidate outedges
\(M=\{{m}_{1},\,{m}_{2},\,\ldots {m}_{q}\}=\{({x}_{{i}_{1}},\,{w}_{1}),({x}_{{i}_{2}},\,{w}_{2})\ldots ({x}_{{i}_{q}},\,{w}_{q})\}\), specifying the SA1 (x) and the number of commuters (w). This set accounts for the missing workers from each SA1 while maintaining a realistic dependence of the weight distribution on the UR population P(w  N_{x}).

2.
Build network S: add the candidate edges in M into the SA1 → DZN network by specifying a DZN (y) without violating the topology of the SA2 → DZN network, exceeding the population of the DZN, adding edges that are not present in the SA2 → SA2 network, or exceeding the known commuter populations between locations in the SA2 → SA2 network.
In addition to the networks A, B, and S defined above, we will refer to several distinct network sets that are important for the explicit description of our process. For clarity, we will summarize these here and give a brief description of their role in our method.
Network R is the ABSprovided SA1 → DZN network (referred to above as G_{[SA1→DZN]}), which was released by the ABS subject to the perturbations this work is intended to correct. Network A is the SA2 → SA2 network aggregated from R. Network B is the ABSprovided SA2 → SA2 network that exhibits relatively consistent aggregation behavior (that is, the total number of commuters it accounts for is roughly 94% of the known total). We use network B as a quantitative groundtruth while generating the surrogate network. Network H is the ABSprovided SA1 → DZN network from the 2011 census, which exhibits acceptable aggregation behavior. We use network H to build up the set of probability distributions describing P(w  N_{x}). A key assumption of our method is that this relationship between local population and outedge weight distribution is relatively invariant across census years. Network Γ is the ABSprovided SA2 → DZN network which we use as a topological constraint while assigning the candidate edges from each residential zone to appropriate destination zones. That is, we only incorporate SA1 → DZN edges into S that have a corresponding SA2 → DZN pair existing in Γ. Finally, network S is the surrogate SA1 → DZN network that is the final output of our method and network C is the SA2 → SA2 network aggregated from network S. We compare networks B and C when evaluating the aggregation behaviour of S. Some quantitative features of these networks are summarized in Table 1.
The following two sections describe our method in detail. The first describes the process of generating the list of (SA1, w) pairs which we refer to as the “candidate edges”. The second describes the process of assigning these candidate edges to DZN partitions subject to our selected constraints.
SA1 candidate edges
We observed the behavior of P(w) as a function of N_{x} to be similar across 2006 and 2011 censuses. This dependence appears to reflect a consistent feature of the commuter mobility network. Although the underlying mechanism producing this set of conditional distributions is not in the scope of this report, it is a subtle aspect of the network structure that should be taken into account. Network H_{[SA1→DZN]} = (V_{H}, E_{H}), derived directly from the 2011 ABS census, along with the 2011 worker populations, gives the distribution of commuter edge weights as a function of the local SA1 population P(wN_{x}) (shown in Fig. 4). While the method we used to generate these distributions is casespecific, a similar process could be applied in any situation where there is some confidence in the separation of timescales between real network evolution and artifact introduction due to institutional data processing protocols. Indeed, a more general approach to this aspect of the problem may be needed in cases where true network dynamics are more difficult to distinguish from artifacts. This is an ongoing question that we will continue to address in future work. One promising future direction is to derive a maximum entropy distribution for the weights of the edges leaving each location, constrained by the known numbers of commuters and the worker populations in the destination zones allowed by the topology and SA2 → DZN edge weights of network Γ. In general, the maximum entropy principle determines the least biased probability distributions, consistent with specific constraints on the average values of measurable quantities^{24}. Other approaches are possible as well, for example, Shannon information could be computed for fragments of the network that exhibit acceptable aggregation behavior, and local weight distributions defined so that sampling from them explicitly addresses information loss in parts of the network adversely affected by the removal of data from the original traveltowork matrix. Techniques for doing so could be adapted from existing methods where networks are iteratively grown from fragments based on node assortativity constraints, leveraging the relationships between node assortativity and mutual information of the target network^{25,26}.
Once these conditional distributions are established, we sample from them to account for the number of missing commuters from each SA1. The number of missing commuters associated with a given SA1 partition x^{*} is computed as the discrepancy between the known working population (\({N}_{{x}_{i}}\)) and the sum \({\sum }_{j=1}^{k}\,w(\{({x}^{* },{y}_{j})\},R)\), which is the total outweight associated with the partition x^{*}. The set of these accumulated populations gives \({N}_{{X}_{R}}\):
which allows us to calculate the discrepancy in the local worker population for each SA1:
The algorithm then generates M as follows: for each SA1 partition x_{i}, individual weights w′ are iteratively sampled from \(P(w {N}_{{x}_{i}})\) to produce the candidate edges m′ = (x_{i}, w′) which are included in M under the condition that
where \(\delta ({x}_{{i}_{j}},{x}_{i})\) is equal to 1 if \({x}_{{i}_{j}}={x}_{i}\) and equal to 0 otherwise. If the condition above is not met the candidate edge m′ is rejected. The sampling process is repeated until the discrepancies \({\rm{\Delta }}{N}_{{X}_{n}}\) are all less than three, the smallest edge size. That is, candidate edges are generated to precisely account for the number of workers missing from each SA1. Quantitative features for an instance of the candidate edge set M, and the local populations used to constrain its construction (N_{X}) and assignment (N_{Y}) are shown in Table 2. The algorithmic process for creating the set of candidate edges is outlined by the pseudocode in Box 1. The following section describes the process of assigning the candidate edges to destination zones.
Assigning edges
Once the set of candidate edges is generated, each specifying an edge weight and SA1 origin vertex, all that remains is to assign them DZN vertices. Then, the new edges can be included in the network R to create the surrogate network S. The procedure we used for these assignments is described in this section and outlined in Box 2.
We assign candidate edges from M to reasonable DZN partitions by employing Γ_{[SA2→DZN]}, B_{[SA2→SA2]}, E_{AB}, and N_{Y} to conditionally restrict the connections that can be added in order to maintain the lowerresolution topology and the worker populations at the destination zones. The networks Γ and E_{AB} are used as binary topological constraints, restricting the possible set of {SA2, DZN} and {SA2, SA2} location pairs that are compatible with the topology of the new network E_{S}. We use Γ as a topological constraint because it represents a good compromise between resolution and quantitative consistency. Because of the larger partitioning of the residential zones X_{Γ}, the network loses approximately 8% of total commuters due to ABS perturbations, which is much better aggregation behavior than we observe on the SA1 → DZN scale, but worse than the SA2level network on these terms. On the other hand, it explicitly accounts for the connectivity between SA2 residential partitions and DZNs, making it a stronger constraint than the SA2 → SA2 network. We use the overlapping edge set E_{AB} as a topological constraint because it restricts our procedure to those parts of the network in which we have the most confidence. We take this conservative approach in order to avoid introducing edges to the network that could artificially increase connectivity across disparate regions. The local worker populations at each DZN (N_{Y}) are used as quantitative constraints, ensuring that the local populations are not exceeded due to the addition of new edges. Similarly, w(E_{AB}, B), the number of commuters between SA2(UR) and SA2(POW) in the portions of network B that overlap with A, constrains the number of commuters that can be added to particular edges in S.
To select SA1 vertices for the candidate edges M, we iterate through the DZN partitions and perform the following procedure:
For each DZN destination vertex y_{i} we use Γ and E_{AB} to determine the set of possible SA1 origin vertices. These define the subset M′ ⊆ M compatible with both the SA2 → DZN and SA2 → SA2 topologies. We then sample M′ uniformly at random, combining the sample with the current destination zone y_{i} to produce a new edge. The new edge is added to the surrogate network under the condition that doing so does not exceed the known number of commuters between SA2 partitions when the surrogate network is aggregated.
To be precise, Γ, E_{AB}, and y_{i} define the subset of SA2 → DZN edges
where \({\Upsilon }_{{y}_{i}}\) is the SA2 partition containing the DZN y_{i}. In words, \(E{^{\prime} }_{{\rm{\Gamma }}}\) is the set of SA2 → DZN edges that point to the destination zone y_{i} and are consistent with the SA2 → SA2 topology E_{AB}. These define the SA2 partitions Φ_{i} = x(\(E{^{\prime} }_{{\rm{\Gamma }}}\)) and the subset of SA1 partitions contained by them which we will call \({X}_{{{\rm{\Phi }}}_{i}}\). From these, the subset of candidate edges is simply determined by selecting only those that contain an element of \({X}_{{{\rm{\Phi }}}_{i}}\) as origin vertex:
Once M′ is defined, we randomly select a candidate m^{*} ∈ M′ = (x^{*}, w^{*}) with uniform probability, producing a potential new edge e^{*} = (x^{*}, y_{i}) with weight w(e^{*}) = w^{*}. The new SA1 → DZN edge e^{*} aggregates into the SA2 → SA2 edge
where X_{x} and Y_{y} are the sets of SA1 and DZN zones contained (respectively) by the SA2(UR) and SA2(POW) partitions in each element of E_{B}.
To check whether or not the new edge e^{*} should be added to the surrogate network, we aggregate E_{S} over the SA1 and DZN vertices contained by the SA2 partitions x_{B} and y_{B}, and determine whether adding the new edge will exceed the known number of commuters between the SA2 zones. That is, the edge e^{*} is added to E_{S} under the condition that
where \({X}_{{x}_{B}}\) and \({Y}_{{y}_{B}}\) are the sets of SA1 and DZN partitions contained by the SA2(UR) and SA2(POW) zones specified by x_{B} and y_{B}, respectively, and
To summarize, our algorithm allows the addition of e^{*} to E_{S} if the aggregation of E_{S} to larger partitions only produces edges that already exist in E_{Γ} and E_{AB}, these topological constraints are illustrated in Fig. 5. The aggregated edge weights are constrained as well, so that the addition of w({e^{*}}) does exceed the value given by w({e_{B}}, B) upon aggregation of E_{S} to the SA2 → SA2 scale. After the successful assignment of edge e^{*} into E_{S}, the candidate edge m^{*} is removed from M and the process is repeated until edges meeting this condition cannot be found.
In principle, the above criterion is sufficient to ensure selfconsistency across differentlypartitioned data sets, however, the criteria must still account for the effect of the privacy policy compliance perturbations. To account for possible mismatch between employee numbers, we added the additional criterion that the number of workers assigned to destination y_{i} must not exceed the local worker population \({N}_{{y}_{i}}\in {N}_{Y}\). Therefore, the condition
must be met, or the edge is not added to E_{S}. Here, δ(y({e_{ij}}), y_{i}) is equal to 1 if y({e_{ij}}) = y_{i}, and equals 0 otherwise.
Of the 2,572,117 commuters accounted for by the full set of 683,239 candidate edges M, there were 729,209 commuters comprising 61,855 edges remaining unassigned when our process terminated due to an inability to assign edges under the above criteria. Two factors are responsible for the inability of the algorithm to assign these edges. The first is that the privacy protocol, by design, ensures cross referencing totals do not match in perturbed data released by the ABS. The second is that our groundtruth topology omits the nonoverlapping set w({E_{B}\E_{A}}, B), therefore, the 612,215 missing commuters tabulated in Fig. 3c cannot be accounted for by our resampling procedure.
This surrogate network (S) has an additional 546,992 SA1 → DZN edges, a 25% increase as compared to network R, with a total number of commuters N(S) comparable to that of the SA2 → SA2 network, N(B). The total number of commuters in the asprovided SA1 → DZN network N(G) is 7,023,571 the total for the surrogate network N(S) is 9,336,333 and our quantitative groundtruth N(B) is 10,073,246.
Data Records
We have made an instance of the reconstructed surrogate commuter network publicly available^{27}. All of the data sets we used, including the original SA1 → DZN commuter mobility network, the SA2 → DZN network, the SA2 → SA2 mobility network, the number of employees in each SA1 (N_{X}), the number of employees in each DZN (N_{Y}), the SA1 to SA2 correspondence files, and the DZN to SA2 correspondence files are publicly available for both 2011 and 2016 through either Census TableBuilder (http://www.abs.gov.au/websitedbs/D3310114.nsf/Home/2016%20TableBuilder) or the ABS website (http://www.abs.gov.au/). The 2011 SA1 → DZN network (H) is no longer publicly available with the additivityincluding privacy policy compliance protocol so we provide the version we used along with our surrogate network. The stability of the files available through ABS may vary with time, as evident in the removal of the additivityensuring step from the perturbation protocol used for all presently distributed data. To ensure reproducibility, all necessary input data sets, which were subject to our preprocessing procedure to remove nongeographic partitions, are available in our script input file located on the Zenodo repository^{27} (see Usage Notes below).
Technical Validation
To quantitatively assess the aggregation behavior of the surrogate network S, we first accumulated its component edges into the corresponding SA2 → SA2 topology (which we will refer to as network C). This new aggregated surrogate network was then compared to both the ABSprovided SA2 → SA2 network and the aggregate of the original SA1 → DZN network (A), by several different metrics. To assess the overall agreement between the three networks, we first translated their edge lists and weights into adjacency matrices (Fig. 6a), and computed the 2D correlation coefficient between each pair:
where α and β represent each of the two adjacency matrices being compared. This comparison demonstrates a high degree of similarity between all three networks, with a significant improvement in correlation between the ABSprovided SA2 → SA2 network and the accumulated surrogate (Table 3). [Note: For technical validation purposes, we treat the SA2 → SA2 network as a unipartite weighted graph, even though the TTW matrix it represents is in actuality a bipartite network. The results here should be interpreted as a quantitative comparison only, as they do not analyze the bipartite structure and therefore do not represent the functional properties of the network].
Plotting the frequency distribution of edge weights for the ABSprovided SA1 → DZN commuter networks of 2016 and 2011, along with the corresponding distribution for the surrogate network (Fig. 6b) indicates a partial repair of the discrepancy in lowweight (w < 10) edge numbers observed between 2011 and 2016 (Fig. 2d).
The discrepancies in edge weights between the amalgamated surrogate network (C) and the ABSprovided SA2 → SA2 network (B) are plotted in Fig. 6c as functions of the edge weight from network B. Comparison of these discrepancies to those plotted in Fig. 3b indicates a dramatic improvement, comparable to the corresponding discrepancies computed for the 2011 commuter network. To further demonstrate the structural repair imparted to the surrogate network, we computed the distributions of the weighted degrees (the sum of all edge weights incident on each node), for networks A, B, and C (Fig. 6d). The distribution corresponding to the aggregated surrogate network more closely matches that of the raw SA2 → SA2 network.
We further quantify the similarity between our amalgamated surrogate (C) and the groundtruth network (the edges in network B that also exist in network A), by calculating the meansquared error (MSE) in the weights over all UR → POW pairs in E_{AB}. Here, we compute the MSE over the edge weight sets
and
as
where subscripts ij indicate specific UR → POW pairs. This quantity provides an estimate of how much our algorithm rectified the discrepancies between SA2 → SA2 edges, given our conservative choice not to add edges to the overlapping set E_{AB}. The results are shown in Table 4 below, and indicate a significant quantitative improvement, as expected from comparison between Figs 3b and 6c.
To evaluate the improvement in the structural properties of the surrogate relative to the asprovided network we analyzed two key network measures for the common components of the networks A and B. The first is simply the average shortest path between nodes, as computed by applying Dijkstra’s shortestpath algorithm to the weighted networks, interpreting edge weight as inverse distance. The second is a version of the clustering coefficient adapted to weighted networks^{28} that defines the weighted clustering coefficient for a node i by evaluating the fraction of its neighbors j and k that share connections, weighted based on the relative weights of the edges connecting the triangle, as
and reports the average of this quantity over all nodes in the network. Here, the weights of nodes in a triangular cluster are scaled by the largest weight in the network \({{\hat{w}}}_{ij}=w(\{{e}_{ij}\})/{\rm{\max }}(w(E))\), and k_{v} is the degree of node v.
These network statistics are shown in Table 5 and indicate an improved correspondence between the network properties of the overlapping sets w(E_{AB}, C) and w(E_{AB}, B), as compared to the aggregate of the original network w(E_{AB}, A). These edge sets correspond to the networks labeled as C^{*}, B^{*}, and A^{*} in Table 5, respectively. The improvement is apparent in that the difference between C^{*} and B^{*} is smaller than the difference between A^{*} and B^{*}.
The number of commuters in the surrogate network is 9,336,333 constituting a 25% increase in the commuter population as compared to the aggregated ABSprovided SA1 → DZN network. Our procedure added nearly half a million new SA1 to DZN edges. The increase in correlation and closer network statistics at the SA2 scale, as well as the edgewise decrease in meansquared error indicates both a quantitative and structural improvement over the original dataset provided by the ABS.
The surrogate network proffered here represents a significant improvement over the original SA1 partitioned commuter mobility network. It reconstructs the population and network statistics of the less perturbed SA2level network by adding additional SA1 → DZN connections that have been lost to the ABS privacy protocol. Access to the surrogate network, and our example of a method for recovering data on high resolution, anonymized networks is useful for the computational modeling of diffusion and transport phenomena in various disciplines that rely on highfidelity survey data. The redistribution of ABS data is protected under Creative Commons licensing.
Network statistics for different instantiations
The process of generating the surrogate networks is stochastic. However, the constraints placed on the new edge generation leads to very consistent surrogate network statistics across instantiations. This is evident in comparing the network statistics of the surrogate network analyzed here with several additional instantiations. These are shown in Table 6.
Likewise, the MSE and 2D correlation demonstrate an excellent agreement between the specific surrogate network used for our study, and additional generated surrogates. These are shown in Table 7.
Convergence
The process of building the new edges e^{*} from the sample edge distributions is the most time consuming part of creating the surrogate networks. Each run generating a surrogate network was given 100 hours to reach the endpoint criteria, however a small proportion of commuters remain impossible to assign, as the larger candidate edges become disallowed by the algorithm’s constraints. Figure 7 shows the number of unassigned commuters as a function of time when placing the new edges. As edges are added, the constraints of SA1 population, DZN population, and SA2 → SA2 edge weights reduce the likelihood of finding a suitable sample. This results in convergence on a nonzero number of unassigned commuters.
Usage Notes
The MATLAB script ‘creating_surrogate.m’, available in the online repository^{27}, implements the method outlined in this paper. The inputs required for this script are located in the repository file ‘inputs.mat’. This workspace includes:

2016 SA1DZN commuter network (R),

2011 SA1DZN commuter network (H),

2011 SA1 UR populations,

2016 SA1 employed residents (N_{X}),

2016 DZN employees (N_{Y}),

2016 SA2DZN ABS network (Γ),

SA2SA2 network accumulated from R (A),

SA2SA2 ABS network (B).
Using this script first produces the commuter residential distribution based on the 2011 census data, then a list of possible SA1 edges (M) using the residential distribution, and finally assigns them to DZN partitions, creating e^{*} samples. These are then combined with the existing edges of network R to create the surrogate network S. A complete description of each network and the file header information is located in the corresponding’README.txt’. The data format is simply a table of edges, the first column corresponding to the SA1 label, the second column corresponding to the DZN label, and the third column giving the number of commuters assigned to the pair.
Code Availability
The custom code used to generate the surrogate network via the method outlined in this text was run on MATLAB version R2017b. The script and the required inputs can be accessed on the online repository^{27}, along with usage notes and descriptions of relevant parameters.
References
 1.
Yu, F. & James, W. J. Highresolution reconstruction of the United States human population distribution, 1790 to 2010. Sci. Data 5, 180067 (2018).
 2.
Eubank, S. et al. Modelling disease outbreaks in realistic urban social networks. Nature 429, 180–184 (2004).
 3.
Longini, I. M. et al. Containing Pandemic Influenza at the Source. Science 309, 1083–1087 (2005).
 4.
Germann, T. C., Kadau, K., Longini, I. M. & Macken, C. A. Mitigation strategies for pandemic influenza in the United States. PNAS 103, 5935–5940 (2006).
 5.
Cliff, O. et al. Investigating spatiotemporal dynamics and synchrony of influenza epidemics in Australia: an agentbased modelling approach. Simulat. Model. Pract. Theor 87, 412–431 (2018).
 6.
Wang, Z. et al. Statistical physics of vaccination. Phys. Rep 664, 1–113 (2016).
 7.
Farmer, D. J. & Foley, D. The economy needs agentbased modelling. Nature 460, 685–686 (2009).
 8.
D’Alelio, D., Libralato, S., Wyatt, T. & d’Alcalà, M. R. Ecologicalnetwork models link diversity, structure and function in the plankton foodweb. Sci. Rep 6, 21806 (2016).
 9.
Einav, L. & Levin, J. Economics in the age of big data. Science 346, 1243089 (2014).
 10.
Lee, J. Y. L., Brown, J. J. & Ryan, L. M. Sufficiency revisited: rethinking statistical algorithms in the big data era. Am. Stat 71, 202–208 (2017).
 11.
Coull, S. E., Monrose, F., Reiter, M. K. & Bailey, M. The challenges of effectively anonymizing network data. In 2009 Cybersecurity Applications & Technology Conference for Homeland Security 230–236 (IEEE, 2009).
 12.
Wooton J. & Fraser B. A review of confidentiality protections for statistical tables, with special reference to the differencing problem. Australian Bureau of Statistics Methodology Report ABS Catalogue No. 1352.0.55.072 (2007).
 13.
Kugler, T. A. & Fitch, C. A. Interoperable and accessible census and survey data from IPUMS. Sci. Data 5, 180007 (2018).
 14.
Australian Bureau of Statistics TableBuilder, http://www.abs.gov.au/websitedbs/D3310114.nsf/Home/2016%20TableBuilder/ (2018)
 15.
Rogers, D. J. & Cegielski, W. H. Opinion: Building a better past with the help of agentbased modeling. PNAS 114, 12841–12844 (2017).
 16.
Australian Bureau of Statistics Australian Statistical Geography Standard (ASGS): Correspondences, July 2011 ABS Catalogue No. 1270.0.55.006 (2013).
 17.
Coull, S. E., Narayanan, A. & Shmatikov, V. Robust Deanonymization of Large Sparse Datasets. In 2008 IEEE symposium on security and privacy 111–125 (IEEE, 2008).
 18.
Sweeney, L. Kanonymity: A model for protecting privacy. Int. J. Uncaertain. Fuzz 10, 557–570 (2002).
 19.
Homer, N. et al. Resolving individuals contributing trace amounts of DNA to highly complex mixtures using highdensity SNP genotyping microarrays. PLoS Genet. 8, 1000167 (2008).
 20.
Fraser, B. & Wooten, J. A proposed method for confidentialising tabular output to protect against differencing. Monographs of Official Statistics: Work Session on Statistical Data Confidentiality 299–302 (2005).
 21.
Leaver, V. Implementing a method for automatically protecting userdefined Census tables. Joint ECE/Eurostat Worksession on Statistical Confidentiality in Bilbao, December 2009 (2009).
 22.
Wooton, J. Measuring and Correcting for Information Loss in Confidentialised Census Counts. Australian Bureau of Statistics Research Paper ABS Catalogue No. 1352.0.55.083 (2007).
 23.
Zachreson, C. et al. Urbanization affects peak timing, prevalence, and bimodality of influenza pandemics in Australia: Results of a censuscalibrated model Science Advances 4(12), eaau5294 (2018).
 24.
Harding, N., Nigmatullin, R. & Prokopenko, M. Thermodynamic efficiency of contagions: a statistical mechanical analysis of the SIS epidemic model. Interface Focus 8, 20180036 (2018).
 25.
Piraveenan, M., Prokopenko, M. & Zomaya, A. Y. InformationCloning of ScaleFree Networks. Advances in Artificial Life 925–935 (2007).
 26.
Piraveenan, M., Prokopenko, M. & Zomaya, A. Y. Assortativeness and information in scalefree networks. The European Physical Journal B 67, 291–300 (2009).
 27.
Fair, K. M., Zachreson, C. & Prokopenko, M. Creating a surrogate commuter network from Australian Bureau of Statistics census data. Zenodo. https://doi.org/10.5281/zenodo.2578459 (2018).
 28.
Onnela, J. P., Saramäki, J., Kertész, J. & Kaski, K. Intensity and coherence of motifs in weighted complex networks. Phys. Rev. E 71, 065103 (2005).
Acknowledgements
We acknowledge the Australian Bureau of Statistic (ABS) for providing all of the raw data as well as general advice in regards to the nature of their perturbation procedures. The Authors were supported through the Australian Research Council Discovery Project DP160102742.
Author information
Affiliations
Contributions
K.F., C.Z. and M.P. designed the research; K.F. and C.Z. designed the algorithm; K.F. implemented the algorithm code; C.Z. and K.F. designed the validation strategy; K.F. performed data analysis for validation; C.Z., K.F. and M.P. composed the manuscript.
Corresponding author
Ethics declarations
Competing Interests
The authors declare no competing interests.
Additional information
Publisher’s note: Springer Nature remains neutral with regard to jurisdictional claims in published maps and institutional affiliations.
ISATab metadata file
Rights and permissions
Open Access This article is licensed under a Creative Commons Attribution 4.0 International License, which permits use, sharing, adaptation, distribution and reproduction in any medium or format, as long as you give appropriate credit to the original author(s) and the source, provide a link to the Creative Commons license, and indicate if changes were made. The images or other third party material in this article are included in the article’s Creative Commons license, unless indicated otherwise in a credit line to the material. If material is not included in the article’s Creative Commons license and your intended use is not permitted by statutory regulation or exceeds the permitted use, you will need to obtain permission directly from the copyright holder. To view a copy of this license, visit http://creativecommons.org/licenses/by/4.0/.
The Creative Commons Public Domain Dedication waiver http://creativecommons.org/publicdomain/zero/1.0/ applies to the metadata files associated with this article.
About this article
Cite this article
Fair, K.M., Zachreson, C. & Prokopenko, M. Creating a surrogate commuter network from Australian Bureau of Statistics census data. Sci Data 6, 150 (2019). https://doi.org/10.1038/s415970190137z
Received:
Accepted:
Published:
Further reading

Modelling transmission and control of the COVID19 pandemic in Australia
Nature Communications (2020)