Secure and scalable deduplication of horizontally partitioned health data for privacy-preserving distributed statistical computation
Open Access
- 3 January 2017
- journal article
- research article
- Published by Springer Nature in BMC Medical Informatics and Decision Making
- Vol. 17 (1) , 1-19
Abstract
Techniques have been developed to compute statistics on distributed datasets without revealing private information except the statistical results. However, duplicate records in a distributed dataset may lead to incorrect statistical results. Therefore, to increase the accuracy of the statistical analysis of a distributed dataset, secure deduplication is an important preprocessing step. We designed a secure protocol for the deduplication of horizontally partitioned datasets with deterministic record linkage algorithms. We provided a formal security analysis of the protocol in the presence of semi-honest adversaries. The protocol was implemented and deployed across three microbiology laboratories located in Norway, and we ran experiments on the datasets in which the number of records for each laboratory varied. Experiments were also performed on simulated microbiology datasets and data custodians connected through a local area network. The security analysis demonstrated that the protocol protects the privacy of individuals and data custodians under a semi-honest adversarial model. More precisely, the protocol remains secure with the collusion of up to N − 2 corrupt data custodians. The total runtime for the protocol scales linearly with the addition of data custodians and records. One million simulated records distributed across 20 data custodians were deduplicated within 45 s. The experimental results showed that the protocol is more efficient and scalable than previous protocols for the same problem. The proposed deduplication protocol is efficient and scalable for practical uses while protecting the privacy of patients and data custodians.Keywords
Funding Information
- The Research Council of Norway (174934, 248150/O70)
This publication has 62 references indexed in Scilit:
- The effect of data cleaning on record linkage qualityBMC Medical Informatics and Decision Making, 2013
- A Protocol for the Secure Linking of Registries for HPV SurveillancePLOS ONE, 2012
- Public Health Surveillance and Meaningful Use Regulations: A Crisis of OpportunityAmerican Journal of Public Health, 2012
- The re-identification risk of Canadians from longitudinal demographicsBMC Medical Informatics and Decision Making, 2011
- Physician privacy concerns when disclosing patient data for public health purposes during a pandemic influenza outbreakBMC Public Health, 2011
- A secure protocol for protecting the identity of providers when disclosing data for disease surveillanceJournal of the American Medical Informatics Association, 2011
- The Shared Health Research Information Network (SHRINE): A Prototype Federated Query Tool for Clinical Data RepositoriesJournal of the American Medical Informatics Association, 2009
- Privacy-preserving record linkage using Bloom filtersBMC Medical Informatics and Decision Making, 2009
- The Swedish personal identity number: possibilities and pitfalls in healthcare and medical researchEuropean Journal of Epidemiology, 2009
- The merge/purge problem for large databasesACM SIGMOD Record, 1995