A Framework and Decision Tool for Confidentiality Protection in Public Use Data

公共数据保密保护框架和决策工具

• 批准号: 8051852
• 负责人: James P. Kelly
• 金额: $ 37.06万
• 依托单位: OPTTEK SYSTEMS, INC.
• 依托单位国家: 美国
• 财政年份: 2010
• 资助国家: 美国
• 起止时间: 2010-04-01 至 2013-06-30
• 项目状态: 已结题
• 来源: https://reporter.nih.gov/project-details/8051852
• 关键词: Algorithms; American; Area; Binding; Businesses; Cells; Centers for Disease Control and Prevention (U.S.); Computer software; Computers; Confidential Information; Confidentiality; Data; Data Quality; Data Set; Databases; Decision Making; Disadvantaged; Disclosure; Elements; Feedback; Fostering; Health Personnel; Lead; Manuals; Marketing; Measurement; Measures; Methods; National Institute of Mental Health; National Security; Nature; Phase; Policies; Privacy; Private Sector; Public Health; Public Sector; Publishing; Records; Research; Research Personnel; Research Project Grants; Research Support; Resort; Resource Sharing; Risk; Secure; Services; Simulate; Small Business Innovation Research Grant; Social Welfare; Societies; Strategic Planning; System; Techniques; Technology; Testing; Time; United States Dept. of Health and Human Services; United States National Center for Health Statistics; Work; Writing; base; data integrity; data sharing; design; experience; health organization; improved; innovation; interest; prevent; prototype; public health relevance; research study; software development; tool; usability

DESCRIPTION (provided by applicant): Statistical databases for public use pose a critical problem: how to make the data available for analysis without disclosing information that would infringe on privacy, violate confidentiality, or endanger national security. Organizations in the public and private sectors have a major stake in this confidentiality protection problem, given the fact that access to data is essential for advancing research and formulating policy. Yet, the possibility of extracting certain sensitive elements of information from the data can jeopardize the welfare of these organizations and potentially, the welfare of the society in which they operate. The challenge is, therefore, to represent the data in a form that permits accurate analysis for supporting research, decision-making and policy initiatives, while preventing an unscrupulous or ill- intentioned party from exploiting the data for harmful consequences. The objective of this project is to develop a practical, computer-based framework for assessing, measuring, and mitigating disclosure risk in public use data. Our proposed framework, called OptShield, overcomes the disadvantages found in currently deployed disclosure limitation methods. We achieve this by combining perturbation and suppression methods with optimal switching of sensitive records at the micro-data level, to produce a method that protects confidentiality while preserving data integrity. In Phase II we are proposing to continue algorithmic and software development to achieve the objective of a working prototype of the software and service. This software will serve as the core technology to provide an application for a broad market in which customers have a major stake in confidentiality protection. The application we ultimately plan to offer in Phase III will consist of a three-phased approach to the disclosure limitation problem: (1) Assess a user's qualitative and quantitative disclosure risks inherent in the organization's data publishing and sharing plans; (2) Measure the disclosure risks in a user's proposed data products; and (3) Protect the user's data by applying the appropriate disclosure limitation techniques. PUBLIC HEALTH RELEVANCE: Public health organizations that collect and share sensitive data are apprehensive about the risk of inadvertently disclosing confidential information, given the fact that access to their data is essential for advancing research and formulating policy. Yet, the possibility of extracting certain vulnerable elements of information from the data, even after personal identifiers have been removed, can jeopardize the welfare of these organizations and potentially the welfare of the society in which they operate. Within the US Department of Health and Human Services, for example, preserving the confidentiality of records in order to continue to elicit information from the American people and from health care providers is "a matter of primary concern" (CDC/NCHS confidentiality guide). OptTek Systems, Inc. (OptTek) is developing a comprehensive framework designed to help public health and other organizations to avoid the disclosure of confidential information in public-use data. The application consists of a three-phased approach to the disclosure limitation problem: (1) Assess a user's qualitative and quantitative disclosure risks; (2) Measure the disclosure risks in a user's proposed data publishing and sharing plans; and (3) Protect the user's data by applying the appropriate disclosure limitation techniques.

说明（申请人提供）：供公众使用的统计数据库提出了一个关键问题：如何使数据可用于分析，而不泄露可能侵犯隐私、违反保密性或危害国家安全的信息。公共和私营部门的组织在这个保密问题上有着重大的利害关系，因为获取数据对于推进研究和制定政策至关重要。然而，从数据中提取某些敏感信息元素的可能性可能会危及这些组织的福利，并可能危及其所在社会的福利。因此，挑战在于以一种允许准确分析的形式表示数据，以支持研究、决策和政策举措，同时防止不道德或恶意的一方利用数据造成有害后果。该项目的目标是开发一个实用的、基于计算机的框架，用于评估、衡量和减轻公共使用数据的披露风险。我们提出的框架，称为OptShield，克服了目前部署的披露限制方法中发现的缺点。我们通过将扰动和抑制方法与微观数据级别敏感记录的最佳切换相结合来实现这一目标，以产生一种在保护机密性的同时保持数据完整性的方法。在第二阶段，我们建议继续进行算法和软件开发，以实现软件和服务的工作原型的目标。该软件将作为核心技术，为客户在保密保护方面拥有重大利益的广阔市场提供应用程序。我们最终计划在第三阶段提供的应用程序将包括一个三阶段的方法来解决披露限制问题：（1）评估用户在组织的数据发布和共享计划中固有的定性和定量披露风险;（2）衡量用户提议的数据产品中的披露风险;（3）通过应用适当的披露限制技术来保护用户的数据。 公共卫生关系：收集和共享敏感数据的公共卫生组织担心无意中泄露机密信息的风险，因为获取其数据对于推进研究和制定政策至关重要。然而，从数据中提取某些易受攻击的信息要素的可能性，即使在个人标识符被删除之后，也可能危及这些组织的福利，并可能危及它们运作所在社会的福利。例如，在美国卫生与公众服务部，为了继续从美国人民和医疗保健提供者那里获取信息，保护记录的机密性是“首要关注的问题”（CDC/NCHS保密指南）。OptTek Systems，Inc. OptTek正在开发一个综合框架，旨在帮助公共卫生和其他组织避免公开使用数据中的机密信息。该应用程序包括一个三阶段的方法来解决披露限制问题：（1）评估用户的定性和定量披露风险;（2）衡量用户提出的数据发布和共享计划中的披露风险;（3）通过应用适当的披露限制技术来保护用户的数据。