Chapter 8
E N D
Presentation Transcript
Chapter 8 Multilateral Security Information flowing across boundaries
Multilateral Models • Compartmentation • Chinese wall • BMA (British Medical Association) • Develop system to track from conception to autopsy • Policy consists of nine principles listed on pages 170-171 • Pilot implementations of BMA are in service
Inference Control • If take name off of medical record is that enough? • Medicare keeps 3 sets of records • Complete records • Beneficiary encrypted • Public access • Inference control first looked at in census data • One record in 1000 made available • Noise added • Extreme values not included in averages
Theory of inference control • Query set size control • Trackers • Cell suppression • Which sometimes requires complementary cell suppression • Limit number of attributes of query • Audit based controls • Randomization
De-identification • It is hard • Issues can be politically fraught • How to pick out specific data in a sea of information
Residual problem • Insurers get all the data in order to pay claim • They want to know who the most expensive doctors and patients are • These are politically charged issue that seldom have rational solutions
Medical records • Easy problem setting up system of access controls to the record can only be viewed by sensible number of staff • Harder problem statistical security • Hardest problem managing interface between the 2 • Specifically to medicine how to prevent spread of payment information
Discussion articles • Current state of BMA • Genetic database in Iceland • Inference cases
List of Resources • Multilateral security • http://csrc.nist.gov/nissc/2000/proceedings/papers/202ra.pdf • Chinese Wall • http://www.gammassl.co.uk/topics/chinesewall.html
List of Resources • Inference control • http://www.parc.xerox.com/research/publications/details.php?id=5264 • http://www.parc.xerox.com/research/publications/files/5264.pdf • http://www.informatik.uni-trier.de/~ley/db/conf/icsd/icsd2002.html • http://www.iis.sinica.edu.tw/~tshsu/projects/inf.html
List of resources • De-identification • http://www.mii.ucla.edu/dataserver-documentation-features-de-identification • http://www.haifa.ibm.com/projects/software/udip/index.html • http://www.sunclinical.com/old%20site_back%20up/about/privacy.htm