Privacy-preserving string comparisons in record linkage systems: A review

Information Security Journal

Volumn 17, Issue 5-6, 2008, Pages 253-266

  Trepetin, Stanley ^a  

^a NEW YORK CITY DEPARTMENT OF HEALTH AND MENTAL HYGIENE   (United States)

Author keywords

Anonymization; Data matching; Fuzzy string comparisons; Privacy preserving; Record linkage

Indexed keywords

EID: 70349844175     PISSN: 19393555     EISSN: 19393547     Source Type: Journal    
DOI: 10.1080/19393550802492503     Document Type: Article

References (36)

1. America's Health Insurance Plans. Retrieved May 18, 2008, from http://www.ahip.org/
2. Brenner, H., Schmidtmann, I. and Stegmaier, C. (1997). Effects of record linkage errors on registry-based follow-up studies, Statistics in Medicine, 16, pp. 2633-2643.
3. Centers for Disease Control and Prevention. (2007, December). Summary health statistics for U.S. adults: National health interview survey, 2006. Retrieved August 17, 2008, from http://www.cdc.gov/nchs/data/series/ sr_10/sr10_235.pdf
4. Churches, T. and Christen, P. (2004). Some methods for blindfolded record linkage, BMC Medical Informatics and Decision Making, 4, pp. 1-17. Retrieved April 8, 2008, from http://www.biomedcentral. com/content/pdf/1472-6947-4-9.pdf
5. Cook, L.J., Olson, L.M. and Dean, J.M. (2001). Probabilistic records linkage: Relationships between file sizes, identifiers, and match weights, Methods of Information in Medicine, 40, pp. 196-203. Customer Service Staff, Harvard Pilgrim, telephone interview with author, June 9, 2004.
6. Davida, G.I. and Wells, D. (1981). A database encryption system with subkeys, ACM Transactions on Database Systems, 6, pp. 312-328.
7. Du, W. and Atallah, M. (2000). Protocols for secure remote database access with approximate matching. 7th ACM Conference on Computer and Communications Security (ACMCCS 2000), The First Workshop on Security and Privacy in E-Commerce. November 2000, Athens.
8. Fair, M. (1999). Recent developments at statistics Canada in the linking of complex health files. Retrieved August 4, 2008, from http://www.fcsm. gov/99papers/fair.pdf
9. Government Accountability Office. (2001, April). Record linkage and privacy. Retrieved August 20, 2008, from http://www.gao.gov/ new.items/d01126sp.pdf
10. Grannis, S., Overhage, J.M. and McDonald, C. (2004). Real world performance of approximate string comparators for use in patient matching, in Proceedings of the 11th World Congress on Medical Informatics, 2004, Part 1. M. Fieschi, E. Coiera, and Y. Li (eds.), pp. 43-7. Retrieved June 20, 2008, from http://www.cs.mun.ca/-harold/ Courses/Old/CS6772.F04/Diary/5604Grannis.pdf
11. Greitzer, F.L., Moore, A.P., Cappelli, D.M., Andrews, D.H., Carroll, L.A. and Hull, T.D. (2008). Combating the insider cyber threat, Security & Privacy, IEEE, 1, pp. 61-64.
12. Hwang, M-S and Yang, W-P. (1995). A two-phase encryption scheme for enhancing database security, Journal of Systems Software, 31, pp. 257-265.
13. IT Security Audit staff. (2007, November 14). Foundstone, interview with author.
14. Jones, M.N. and Mewhort, D.J.K. (2004). Case-sensitive letter and bigram frequency counts from large-scale English corpora, Behavior Research Methods, Instruments, & Computers, 3, pp. 388-396. Retrieved February 26, 2008, from http://psyc.queensu.ca/-hiplab/LAB_PUBS/BAR120.pdf
15. Katz, D. (2006). Elements of a comprehensive security solution, Health Management Technology, 21, pp. 12-6.
16. Liu, S. and Wen, S-W. (2000). Development of record linkage of hospital discharge data for the study of neonatal readmission. Chronic Diseases in Canada, V. 20. Retrieved August 20, 2008, from http:// www.phac-aspc.gc.ca/publicat/cdic-mcc/ 20-2/c_e.html
17. Medical Expenditures Panel Survey. (2007, December). National health care expenses in the U.S. civilian noninstitutionalized population, 2005. Retrieved May 18, 2008, from http://www.meps.ahrq.gov/mepsweb/ data_files/publications/st193/stat193.pdf#xml=http://meps. ahrq.gov/cgi- bin/texis/webinator/search/pdfhi.txt?query=cost+of+health+care+ 2005&pr=MEPSPUBS&prox=page&rorder=500&rprox=500&rdfreq= 500&rwfreq=500&rlead=500&sufs=0&order=r&cq=&id=48b63f222c
18. National Research Council. (1997). For the record: Protecting electronic health information. Washington, DC: National Academy Press.
19. Palace, B. Data mining: What is data mining? Retrieved August 20, 2008, from http://www.anderson.ucla.edu/faculty/jason.frand/ teacher/technologies/palace/datamining.htm
20. Parlin, K. and Hawthorne, J. (2003). Coaxing additional sales from clients, Internet World, 9, pp. 0-12.
21. Privacy Rights Clearinghouse. (2006, February). How many identity theft victims are there? What is the impact on victims? Retrieved October 16, 2006, from http://www.privacyrights.org/ar/idtheftsurveys.htm
22. Privacy Rights Clearinghouse. (2008, August 22). A chronology of data breaches reported since the choicepoint incident. Retrieved August 22, 2008, from http://www.privacyrights.org/ar/ChronDataBreaches.htm
23. Radcliff, D. (1998, November 2). Invisible loot, Industry Week. Retrieved July 17, 2008, from http://www.industryweek.com/CurrentArticles/ ASP/articles.asp?ArticleId=298
24. Sam's String Metrics. (2006). Dice's coefficient. Retrieved April 8, 2008, from http://www.dcs.shef.ac.uk/-sam/stringmetrics.html#dice
25. Social Security Administration. (2003). Is there any significance to the numbers assigned in the social security number? Retrieved February 23, 2008, from http://ssa-custhelp.ssa.gov/cgi-bin/ssa.cfg/php/enduser/ std_adp.php?p_sid=mtTFC74h&p_lva=&p_faqid=87&p_created= 955483216&p_sp=cF9zcmNoPSZwX2dyaWRzb3J0PSZwX3Jvd19jbnQ9 NjImcF9jYXRfbHZsMT0xN iZwX3 BhZ2U9MQ**&p_li
26. Social Security Administration. (2008). Social security number allocations. Retrieved June 24, 2008, from http://www.socialsecurity.gov/ employer/ stateweb.htm
27. Song, D-X, Wagner, D. and Perrig, A. (2000). Practical techniques for searches on encrypted data. IEEE Symposium on Security and Privacy. Berkeley, CA, May 14-17, 2000.
28. Technical Sales Staff. (2007, October 29). Vontu, interview with author.
29. Torra, V., Domingo-Ferrer, J. and Torres, A. (2003). Data mining methods for linking data coming from several sources,. Monographs in official statistics. 3rd Joint UN/ECE-Eurostat Work session on statistical data confidentiality. Retrieved August 20, 2008, from http://www.iiia.csic.es/-vtorra/publications/unrestricted/con- fUNECE. 2003.143.150.pdf
30. Trepetin, S. (2006). Privacy in context: The costs and benefits of a new deidentification method. Cambridge, MA: Massachusetts Institute of Technology. Retrieved February 14, 2008, from http://dspace.mit.edu/bitstream/1721.1/37975/1/148046911.pdf
31. U.S. Department of Health and Human Services. (2000, December 28). Standards for privacy of individually identifiable health information (part 2), pp. 82511-82560. Retrieved May 1 5, 2008, from http://www.hhs.gov/ocr/ part2.pdf
32. U.S. Census Bureau. (2005, March 17). Names file. Retrieved February 7, 2008, from http://www.census.gov/genealogy/names/names_ files.html
33. U.S. Census Bureau. (2008, February 15). Frequently accurring surnames from census 2000. Retrieved June 21, 2008, from http://www.census.gov/genealogy/www/freqnames2k.html
34. Van Eycken, E., Haustermans, K., Buntinx, F., Ceuppens, A., Weyler, J., Wauters, E., Van Oyen, H., DeSchaever, M., Van Den Berge, D. and Haelterman, M. (2000). Evaluation of the encryption procedure and record linkage in the Belgian National Cancer Registry, Archives of Public Health, 58, pp. 281-294.
35. Wikipedia. Kronecker delta. Retrieved September 2, 2008, from http:// en.wikipedia.org/wiki/Kronecker_delta
36. Winkler, W. (1999). The state of record linkage and current research problems. Retrieved August 20, 2008, from http://www.census.gov/ srd/papers/pdf/rr99-04.pdf