title: A flexible approach to distributed data anonymization.
abstract: Sensitive biomedical data is often collected from distributed sources, involving different information systems and different organizational units. Local autonomy and legal reasons lead to the need of privacy preserving integration concepts. In this article, we focus on anonymization, which plays an important role for the re-use of clinical data and for the sharing of research data. We present a flexible solution for anonymizing distributed data in the semi-honest model. Prior to the anonymization procedure, an encrypted global view of the dataset is constructed by means of a secure multi-party computing (SMC) protocol. This global representation can then be anonymized. Our approach is not limited to specific anonymization algorithms but provides pre- and postprocessing for a broad spectrum of algorithms and many privacy criteria. We present an extensive analytical and experimental evaluation and discuss which types of methods and criteria are supported. Our prototype demonstrates the approach by implementing k-anonymity, ℓ-diversity, t-closeness and δ-presence with a globally optimal de-identification method in horizontally and vertically distributed setups. The experiments show that our method provides highly competitive performance and offers a practical and flexible solution for anonymizing distributed biomedical datasets.
authors: Technische Universität München, University Medical Center (MRI), Ismaninger Strasse 22, 81675 München, Germany. Electronic address: florian.kohlmayer@tum.de.
authors: Florian
authors: F
authors: Kohlmayer
authors: Technische Universität München, University Medical Center (MRI), Ismaninger Strasse 22, 81675 München, Germany.
authors: Fabian
authors: F
authors: Prasser
authors: Technische Universität München, Department of Computer Science, Boltzmannstrasse 3, 85748 Garching bei München, Germany.
authors: Claudia
authors: C
authors: Eckert
authors: Technische Universität München, University Medical Center (MRI), Ismaninger Strasse 22, 81675 München, Germany.
authors: Klaus A
authors: KA
authors: Kuhn
mesh_terms: D000465:Algorithms; D016347:Medical Records Systems, Computerized; D008962:Models, Theoretical; D018907:Privacy
keywords: Anonymization; Commutative encryption; Distribution; Personal data protection; Privacy; SMC; Secure multi-party computing