EAGER: Exploring the Use of Secure Multi-Party Computation in the Context of Organ Donation

EAGER：探索在器官捐赠背景下使用安全多方计算

• 批准号: 1646999
• 负责人: Susanne Wetzel
• 金额: $ 12.57万
• 依托单位: Stevens Institute of Technology
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2016
• 资助国家: 美国
• 起止时间: 2016-09-01 至 2021-08-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1646999&HistoricalAwards=false
• 关键词: EAGER; Exploring; Use; Secure; Multi

Informally speaking, Secure Multi-Party Computation (SMPC) allows two or more parties to jointly compute some function on their private inputs in a distributed fashion (i.e., without the involvement of a trusted third party) such that none of the parties learns anything beyond its dedicated output and what it can deduce from considering both this output and its own private input. Since its inception in 1982 by Yao, SMPC has advanced greatly and over the years a large body of work has been developed. To date, prominent applications for SMPC include private set intersection, auctions, and data mining. However, despite all advances, there still are many areas of application for which the use of SMPC has not yet been explored. Considering the fact that SMPC allows one to achieve strong security guarantees, the use of SMPC should be further advanced into fields of application which require the handling of highly-sensitive information of multiple parties in a centralized fashion and as such exhibit great promise to substantially benefit from the use of SMPC techniques. Such an area of application is organ donation. Currently, more than 120,000 patients in the U.S. alone are waiting to receive a lifesaving organ transplant and the need by far outweighs the number of available organs. Increasing the pool of organ donors is challenging and reports of organ scandals have even resulted in a decline in the number of potential organ donors. On one hand, transparency and fairness in the allocation process was shown to influence the willingness to donate organs. In turn, it is argued that in the case of living donations (where a patient has a willing donor but the donor's medical characteristics are not compatible with those of the patient), the recipient of the organ donation should have the right for the transparency to be limited. As such this project seeks to explore whether it is possible to effectively and efficiently introduce SMPC into the context of organ donation with the goal to ensure suitable transparency and privacy guarantees for donors and recipients alike. The potential impact of this work is substantial---for individual patients and society at large---in that addressing common attacks on traditional organ donation systems may not only help rebuild lost trust but may even lead to a greater buy-in than ever before.For living donations, the project seeks to devise initial protocols which allow the determination of donors in a cyclic fashion such that (a) it does not require a trusted third party, (b) the attributes of all patients and donors are kept private at all times, (c) all parties are satisfied with the exchange, (d) application-specific requirements are met, and (e) it is secure even in the presence of adversaries. For post-mortem donations, the project will explore the suitability of traditional privacy-preserving matching approaches---recognizing that matching the characteristics of organs come with unique challenges and requirements. Also, the project will investigate whether it is feasible to introduce a systemic change to how post-mortem organ donation is carried out today.

非正式地说，安全多方计算（SMPC）允许两方或多方以分布式方式（即，没有可信第三方的参与）共同计算他们的私有输入上的某些函数，这样任何一方都不会了解其专用输出之外的任何东西，也不会从考虑该输出和自己的私有输入中推断出什么。自Yao于1982年成立以来，SMPC已经取得了很大的进步，多年来已经开展了大量的工作。迄今为止，SMPC的主要应用包括私有集交集、拍卖和数据挖掘。然而，尽管取得了所有进展，但仍有许多应用领域尚未对SMPC的使用进行探索。考虑到SMPC允许人们获得强大的安全保证，SMPC的使用应该进一步推进到需要以集中方式处理多方高度敏感信息的应用领域，并且因此显示出从使用SMPC技术中获得实质性利益的巨大希望。这样一个应用领域就是器官捐赠。目前，仅在美国就有超过12万名患者在等待接受挽救生命的器官移植，而需求远远超过了可用器官的数量。增加器官捐献者的数量是一项挑战，器官丑闻的报道甚至导致潜在器官捐献者的数量下降。一方面，分配过程的透明度和公平性影响了捐赠器官的意愿。反过来，有人认为，在活体捐赠的情况下（患者有一个自愿的捐赠者，但捐赠者的医学特征与患者的医学特征不相容），器官捐赠的接受者应该有权限制透明度。因此，本项目旨在探索是否有可能有效和高效地将SMPC引入器官捐赠的背景下，以确保捐赠者和接受者都有适当的透明度和隐私保障。这项工作的潜在影响是巨大的——对于个体患者和整个社会——因为解决对传统器官捐赠系统的常见攻击可能不仅有助于重建失去的信任，甚至可能导致比以往任何时候都更大的支持。对于活体捐赠，该项目寻求设计初始协议，允许以循环方式确定捐赠者，以便(a)不需要可信的第三方，(b)所有患者和捐赠者的属性始终保密，(c)所有各方都对交换感到满意，(d)满足特定应用的要求，以及(e)即使在对手存在的情况下也是安全的。对于死后捐赠，该项目将探索传统的隐私保护匹配方法的适用性——认识到匹配器官的特征具有独特的挑战和要求。此外，该项目还将调查对目前的死后器官捐赠方式进行系统性改革是否可行。

项目成果

Privacy-Preserving Trade Chain Detection

保护隐私的贸易链检测

• DOI: 10.1007/978-3-030-00305-0_26
• 发表时间: 2018
• 期刊: Data Privacy Management Workshop
• 作者: Wueller, Stefan;Breuer, Malte;Meyer, Ulrike;Wetzel, Susanne
• 通讯作者: Wetzel, Susanne