面向医疗数据交易与服务的数据隐私保护理论研究

医疗数据共享是医学研究和临床科研的基础，然而医疗数据不仅涉及个人隐私，也包含医生、医疗机构的隐私。这种多重隐私性给医疗数据的隐私保护带来了巨大挑战。本项目基于医疗数据的内在多重隐私特征，针对现有研究在隐私性、可用性和可扩展性等方面的局限，聚焦医疗数据交易与服务过程的隐私保护理论研究，重点解决交易定价、数据发布、安全分析和服务审计的难点问题：1）引入知识商品价格理论，探索医疗数据价值链构造和演化规律，对医疗数据合理定价，推动交易与共享；2）研究多重隐私约束下的医疗数据隐私保护发布机制；3）面向医疗数据的有限域特征，研究基于同态加密的医疗数据多项式表达及安全、高效计算方法，支持基于医疗数据的挖掘分析服务；4）研究外包服务模式下支持敏感信息隐藏的通用医疗数据服务完整性验证技术，确保医疗数据服务的可验证性。项目力求在医疗数据共享与服务的隐私保护新理论与新方法上取得突破，推动医疗数据应用蓬勃发展。

Medical data sharing is the foundation of medical and clinical research. The medical data involve not only personal privacy but also the privacy of doctors and hospitals. This multiplicity of privacy brings a great challenge to the privacy protection of medical data. Based on the inherent multi-privacy features of medical data, aiming at the limitations of privacy, availability, and scalability in existing research, our project focuses on the theories on privacy protection of medical data in the processes of transactions and services and especially solves the problems of pricing, data releasing, security analysis, and service audit. Firstly, we introduce the price theory of knowledge commodity to explore the rules of the structure and the evolution of medical data value chain. By the pricing theory, we make a reasonable price to the medical data and improve the data transaction and sharing. Secondly, we research the privacy-preserving medical data release mechanism under multiple privacy constraints. Thirdly, based on the limited domain characteristics of medical data, we research the expression of common polynomials over medical data with homomorphic encryption and the corresponding safe and efficient calculation algorithm. Finally, we research the integrity verification algorithm for medical data services supporting sensitive information hiding under the outsourced service mode to ensure verifiability of medical data services. This project tries to make a breakthrough in the new theory and method of privacy protection of medical data sharing and service, and improve the development of medical data applications.