Releasing individually identifiable microdata with privacy protection against stochastic threat: An application to health information

Information Systems Research

Volumn 18, Issue 1, 2007, Pages 23-41

  Garfinkel, Robert ^a   Gopal, Ram ^a   Thompson, Steven ^a  

^a UNIVERSITY OF CONNECTICUT   (United States)

Author keywords

Data security; Health information; Optimization; Privacy

Indexed keywords

DATA PRIVACY; LAWS AND LEGISLATION; NATIONAL SECURITY; OPTIMIZATION; PUBLIC HEALTH; SECURITY OF DATA; STOCHASTIC SYSTEMS;

COMPUTATIONAL RESULTS; CONFIDENTIAL DATA; CONFIDENTIAL INFORMATION; HEALTH AND SAFETY; HEALTH INFORMATIONS; PREVENTIVE PROTECTION; PRIVACY PROTECTION; STATISTICAL INFORMATION;

HEALTH RISKS;

EID: 34247541615     PISSN: 10477047     EISSN: 15265536     Source Type: Journal    
DOI: 10.1287/isre.1070.0112     Document Type: Article

References (36)

1. Adam, N. R., J. C. Wortmann. 1989. Security-control methods for statistical databases: A comparative study. ACM Comput. Surveys 21 515-556.
2. Aggarwal, C. 2005. On k-anonymity and the curse of dimensionality. Proc. 31st Internat. Canf. Very Large Databases (VLDB'05), Trondheim, Norway.
3. Aggarwal, C., T. Feder, K. Kenthapadi, R. Motwani, R. Panigrahy, D. Thomas, A. Zhu. 2005. Approximation algorithms for k-anonymity. J. Privacy Tech.
4. Carvalho, F. D., N. Dellaert, M. S. Osorio. 1994. Statistical disclosure in two-dimensional tables: General tables. J. Amer. Statist. Assoc. 89 1547-1557.
5. Causey, B. D., L. H. Cox, L. R. Ernst. 1985. Application of transportation thoery to statistical problems. J. Amer. Statist. Assoc. 80 909.
6. CDC. 2005. HIPAA privacy rule and public health: Guidance from CDC and the U.S. Department of Health and Human Services, http://www.cdc.gov/mmwr/ preview/mmwrhtml/m2e411al.htm.
7. Chowdhury, S. D., G. T. Duncan, R. Krishnan, S. F. Roehrig, S. Mukherjee. 1999. Disclosure detection in multivariate categorical databases: Auditing confidentiality protection through two new matrix operators. Management Sci. 45 1710-1723.
8. Cox, L. H. 1980. Suppression methodology and statistical disclosure control. J. Amer. Statist. Assoc. 75 377-385.
9. Cox, L. H. 1992. Solving confidentiality protection problems in tabulations using network optimization: A network model for cell suppression in U.S. economic censuses. R. Mokken, ed. Internat. Sem. Statist. Confidentiality. Eurostat, Dublin, Ireland, 229-245.
10. Dobra, A., S. E. Fienberg, M. Trottini. 2003. Assessing the risk of disclosure of confidential categorical data. J. M. Bernardo, M. J. Bayarri, J. O. Berger, A. P. Dawid, D. Heckerman, A. F. M. Smith, M. West, eds. Bayesian Statistics 7. Oxford University Press, Oxford, UK, 125-144.
11. Domingo-Ferrer, J., J. M. Mateo-Sanz. 2002. Practical data-oriented microaggregation for statistical disclosure control. IEEE Trans. Knowledge Data Engrg. 14(1) 189-201.
12. Domingo-Ferrer, D., V. Torra. 2005. Ordinal, continuous, and heterogeneous k-anonymity through microaggregation. Data Mining Knowledge Discovery 11(2) 195-212.
13. Duncan, G. T., S. Fienberg. 1999. Obtaining information while preserving privacy: A Markov perturbation method for tabular data. J. Domingo-Ferrer, ed. Statist. Data Protection (SDP 1998) Proc., IDS Press, Amsterdam, The Netherlands.
14. Duncan, G., R. Krishnan, R. Padman, P. Reuther, S. Roehrig. 2003a. Exact and heuristic methods for cell suppression in multi-dimensional linked tables. Working paper, Carnegie Mellon University, Pittsburgh, PA.
15. Duncan, G. T., S. Keller-McNulty, S. L. Stokes. 2003b. Disclosure risk vs. data utility: The R-U confidentiality map. Technical Report 2003-6, Heinz School of Public Policy and Management, Carnegie Mellon University, Pittsburgh, PA.
16. Fischetti, M., J. Salazar. 2001. Solving the cell suppression on tabular data with linear constraints. Management Sci. 47 1008-1027.
17. Garfinkel, R., R. D. Gopal, P. B. Goes. 2002. Privacy protection of binary confidential data against deterministic, stochastic, and insider threat. Management Sci. 48 749-764.
18. Gedik, B., L. Liu. 2005. A customizable k-anonymity model for protecting location privacy. Proc. 25th Internat. Conf. Distributed Comput. Systems (IEEE ICDCS), Columbus, OH.
19. Geurts, J. 1992. Heuristics for cell suppression in tables. Working paper, Central Bureau of Statistics, The Netherlands.
20. Gopal, R. D., P. B. Goes, R. Garfinkel. 1998. Interval protection of confidential information in a database. INFORMS J. Comput. 10 309-322.
21. Health Insurance Portability and Accountability Act (HIPAA). 1996.
22. Hundepool, A., L. Willenborg. 1996. μ- and τ-ARGUS: Software for statistical disclosure control. Proc. 3rd Internat. Seminar Statist. Confidentiality, Bled, Slovenia.
23. Jiang, W., C. Clifton. 2005. Privacy-preserving distributed k-anonymity. Proc. 19th Annual IFIP WG 113 Working Conf. Data Appl. Security, Storrs, CT.
24. Kelly, J. P. 1990. Confidentiality protection in two and three-dimensional tables. Unpublished doctoral dissertation, University of Maryland, College Park, MD.
25. Li, X., S. Sarkar. 2006a. Privacy protection in data mining: A perturbation approach for categorical data. Inform. Systems Res. 17(3) 254-270.
26. Li, X., S. Sarkar. 2006b. A tree-based perturbation approach for privacy-preserving data mining. IEEE Trans. Knowledge Data Engrg. 18(9) 1278-1283.
27. Menon, S., S. Sarkar, S. Mukherjee. 2005. Maximizing accuracy of shared databases when concealing sensitive patterns. Inform. Systems Res. 16(3) 256-270.
28. Meyerson, A., R. Williams. 2004. On the complexity of optimal k-anonymity. Proc. 23rd ACM-SIGMOD-SIGACT-SIGART Sympos. Principles Database Systems, Paris, France, 223-228.
29. Muralidhar, K., D. Batra, P. J. Kirs. 1995. Accessibility, security, and accuracy in statistical databases: The case for the multiplicative fixed data perturbation approach. Management Sci. 41 1549-1564.
30. Newton, E., L. Sweeney, B. Malin. 2005. Preserving privacy by deidentifying facial images. IEEE Trans. Knowledge Data Engrg. 17(2) 232-243.
31. Sweeney, L. 2002a. Guaranteeing anonymity when sharing medical data. Proc. J. Amer. Medical Inform. Assoc. Hanley & Belfus, Inc., Washington, D.C.
32. Sweeney, L. 2002b. Achieving k-anonymity privacy protection using generalization and suppression. Internat. J. Uncertainty, Fuzziness Knowledge-Based Systems 10(5) 571-588.
33. United States General Accounting Office. 1999. Report to congressional requesters: Medical records privacy. (February).
34. Willenborg, L., A. De Waal. 1996. Statistical Disclosure Control in Practice. Springer-Verlag, New York.
35. Willenborg, L., A. Hundepool. 1998. ARGUS for statistical disclosure control. J. Domingo-Ferrer, ed. Statist. Data Protection (SDP 1998) Proc., IDS Press, Amsterdam, The Netherlands.
36. Zayatz, L. 1992. Using linear programming methodology for disclosure avoidance purposes. Research report, Statistical Research Division, Bureau of the Census, Washington, D.C.