EAGER: Exploring the Use of Secure Multi-Party Computation in the Context of Organ Donation

非正式地说，安全多方计算（SMPC）允许两方或多方以分布式方式联合计算其私有输入上的某个函数（即，没有可信的第三方的参与），使得除了其专用输出以及它可以从考虑该输出和它自己的私有输入两者中推断出什么之外，没有任何一方学习到任何东西。自1982年由姚明创立以来，SMPC取得了很大的进步，多年来已经开发了大量的工作。迄今为止，SMPC的突出应用包括私有集合交集，拍卖和数据挖掘。 然而，尽管取得了所有进展，但仍有许多应用领域尚未探索SMPC的使用。 考虑到SMPC允许实现强安全保证的事实，SMPC的使用应该进一步推进到需要以集中方式处理多方的高度敏感信息的应用领域，并且因此表现出极大的希望从SMPC技术的使用中实质性地受益。 这种应用领域是器官捐赠。目前，仅在美国就有超过12万名患者等待接受救命的器官移植，需求远远超过可用器官的数量。增加器官捐献者的数量是一项挑战，器官丑闻的报道甚至导致潜在器官捐献者的数量下降。一方面，分配过程的透明度和公平性被证明会影响器官捐献的意愿。反过来，有人认为，在活体捐赠的情况下（病人有一个自愿的捐赠者，但捐赠者的医疗特征与病人的不相容），器官捐赠的接受者应该有权限制透明度。 因此，该项目旨在探讨是否有可能有效和高效地将SMPC引入器官捐赠的背景下，以确保捐赠者和接受者都有适当的透明度和隐私保障。这项工作的潜在影响是巨大的-对于个体患者和整个社会-因为解决对传统器官捐赠系统的常见攻击不仅有助于重建失去的信任，甚至可能导致比以往任何时候都更大的购买。该项目旨在制定初步议定书，以便以循环方式确定捐助者，它不需要可信的第三方，（B）所有患者和捐赠者的属性在任何时候都保持私密，（c）所有各方都对交换感到满意，（d）满足应用特定的要求，以及（e）即使在存在对手的情况下也是安全的。对于死后捐赠，该项目将探索传统的隐私保护匹配方法的适用性-认识到匹配器官的特征具有独特的挑战和要求。 此外，该项目还将调查是否可以对目前的死后器官捐赠方式进行系统性改革。

Informally speaking, Secure Multi-Party Computation (SMPC) allows two or more parties to jointly compute some function on their private inputs in a distributed fashion (i.e., without the involvement of a trusted third party) such that none of the parties learns anything beyond its dedicated output and what it can deduce from considering both this output and its own private input. Since its inception in 1982 by Yao, SMPC has advanced greatly and over the years a large body of work has been developed. To date, prominent applications for SMPC include private set intersection, auctions, and data mining. However, despite all advances, there still are many areas of application for which the use of SMPC has not yet been explored. Considering the fact that SMPC allows one to achieve strong security guarantees, the use of SMPC should be further advanced into fields of application which require the handling of highly-sensitive information of multiple parties in a centralized fashion and as such exhibit great promise to substantially benefit from the use of SMPC techniques. Such an area of application is organ donation. Currently, more than 120,000 patients in the U.S. alone are waiting to receive a lifesaving organ transplant and the need by far outweighs the number of available organs. Increasing the pool of organ donors is challenging and reports of organ scandals have even resulted in a decline in the number of potential organ donors. On one hand, transparency and fairness in the allocation process was shown to influence the willingness to donate organs. In turn, it is argued that in the case of living donations (where a patient has a willing donor but the donor's medical characteristics are not compatible with those of the patient), the recipient of the organ donation should have the right for the transparency to be limited. As such this project seeks to explore whether it is possible to effectively and efficiently introduce SMPC into the context of organ donation with the goal to ensure suitable transparency and privacy guarantees for donors and recipients alike. The potential impact of this work is substantial---for individual patients and society at large---in that addressing common attacks on traditional organ donation systems may not only help rebuild lost trust but may even lead to a greater buy-in than ever before.For living donations, the project seeks to devise initial protocols which allow the determination of donors in a cyclic fashion such that (a) it does not require a trusted third party, (b) the attributes of all patients and donors are kept private at all times, (c) all parties are satisfied with the exchange, (d) application-specific requirements are met, and (e) it is secure even in the presence of adversaries. For post-mortem donations, the project will explore the suitability of traditional privacy-preserving matching approaches---recognizing that matching the characteristics of organs come with unique challenges and requirements. Also, the project will investigate whether it is feasible to introduce a systemic change to how post-mortem organ donation is carried out today.