There is a need to represent high-level aggregating requests
such as querying the average, maximum, or minimum
reading of specified sensing data. This privacy capability
must be supported by anonymizing aggregation functions.
This need arises for applications related to longitudinal
studies and social networking.