Privacy preserving indexing for eHealth information networks

Abstract

The past few years have witnessed an increasing demand for the next generation health information networks (e.g., NHIN [1]), which hold the promise of supporting large-scale information sharing across a network formed by autonomous healthcare providers. One fundamental capability of such information network is to support efficient, privacy-preserving (for both users and providers) search over the distributed, access controlled healthcare documents. In this paper we focus on addressing the privacy concerns of content providers; that is, the search should not reveal the specific association between contents and providers (a.k.a. content privacy). We propose SS-PPI, a novel privacy-preserving index abstraction, which, in conjunction of distributed access control-enforced search protocols, provides theoretically guaranteed protection of content privacy. Compared with existing proposals (e.g., flipping privacy-preserving index[2]), our solution highlights with a series of distinct features: (a) it incorporates access control policies in the privacy-preserving index, which improves both search efficiency and attack resilience; (b) it employs a fast index construction protocol via a novel use of the secrete-sharing scheme in a fully distributed manner (without trusted third party), requiring only constant (typically two) round of communication; (c) it provides information-theoretic security against colluding adversaries during index construction as well as query answering. We conduct both formal analysis and experimental evaluation of SS-PPI and show that it outperforms the state-of-the-art solutions in terms of both privacy protection and execution efficiency.

Privacy-Preserving Multi-Party Directory Services

“…For instance, in HIE, the similarity between hospitals (producers) can be defined by hospital specialties and geographic locations. In this work, we mainly use the notion of ǫ-privacy [61] to drive further presentation. The main idea of ǫ privacy is to bound the number of noises or false positives in the published list of producers by a percentage of ǫ.…”

“…"No-protection" is the baseline which publishes raw location meta-data (i.e., patient-tohospital information) without any noises. Grouping PPIs [19,61] are based on the idea of K-anonymity (note to avoid confusion, we use K for K-anonymity, and k for top-k), which works by randomly grouping K hospitals together. We present our study results in Table 8.…”

“…PPI Privacy-Preserving Index or PPI is proposed to federate and index distributed access-controlled documents [18,19] and databases (e.g., patient medical records in the HIE locator service) [61] among autonomous providers. Being stored on an untrusted server, PPI entails preserving the content privacy of all participant providers or hospitals.…”

Survey on Privacy Preservation for Multi-Keyword Search on Data Network

“…SS-PPI -This SS-PPI [3] is novel privacy preserving index deliberation, which, in conjunction of circulated access control-implemented search protocols which, gives hypothetically ensured protection of content security. Contrasted with existing system this proposal highlights with a progression of distinct components: (an) it joins access control arrangements in the privacy preserving file, which moves forward both search effectiveness and attack resilience; (b) it utilizes a quick file development convention by means of a novel utilization of the secret sharing plan in a completely conveyed way (without trusted outsider), requiring just consistent (normally two) round of correspondence; (c) it gives data theoretic security against colluding adversaries during record development and inquiry replying.…”

Secure Cloud Storage Service with an Efficient DOKS Protocol

“…That is, the cloud storage service should provide high computation and communication efficiency and support query-based access to allow users to selectively and privately retrieve any desired segment of the whole data on demand. Finding a good security-functionality tradeoff for outsourcing is a challenging research problem, which has received a great deal of attention recently [1,2].…”