On privacy-preserving access to distributed heterogeneous healthcare information
- 1 January 2004
- conference paper
- conference paper
- Published by Institute of Electrical and Electronics Engineers (IEEE)
Abstract
Regional healthcare initiatives seek to improve the quality of healthcare by collecting, analyzing, and disseminating information about chronic diseases such as diabetes. The data required to support such initiatives comes from several organizations such as insurers, physicians, hospitals, pharmacies and labs each of which gather and maintain data for the purpose of healthcare delivery. Accessing data in this distributed and heterogeneous environment is difficult and has to deal with well-documented issues such as resolving semantic conflicts, multiple query languages etc. Data warehousing and mediator-based architectures are often proposed and used in these settings. In this paper, we focus on mediator-based architectures and the privacy problems that arise in the healthcare context owing to the linkage of information about patients, physicians, and diseases enabled by the mediator. Current proposals for security-conscious mediators do not address inferential disclosure resulting from record linkage. In particular, we study the problem of interval inference, a specific kind of disclosure that arises when participants are able to compute tight bounds on sensitive values of other participants, based on the aggregate information published by the mediator. We illustrate our approach with a real world example and propose an "audit and aggregate" methodology that chooses the optimal level of aggregation of the data taking into account both the risk of disclosure as well as the utility of the released data to legitimate users.Keywords
This publication has 13 references indexed in Scilit:
- Collaborative filtering with privacyPublished by Institute of Electrical and Electronics Engineers (IEEE) ,2005
- Information-theoretic disclosure risk measures in statistical disclosure control of tabular dataPublished by Institute of Electrical and Electronics Engineers (IEEE) ,2003
- Privacy preserving association rule mining in vertically partitioned dataPublished by Association for Computing Machinery (ACM) ,2002
- Preserving privacy in web servicesPublished by Association for Computing Machinery (ACM) ,2002
- Healthcare data warehousing and quality assuranceComputer, 2001
- On Heterogeneous Database Retrieval: A Cognitively Guided ApproachInformation Systems Research, 2001
- The state of the art in distributed query processingACM Computing Surveys, 2000
- Privacy Preserving Data MiningLecture Notes in Computer Science, 2000
- Disclosure Detection in Multivariate Categorical Databases: Auditing Confidentiality Protection Through Two New Matrix OperatorsManagement Science, 1999
- Suppression Methodology and Statistical Disclosure ControlJournal of the American Statistical Association, 1980