Secure management of biomedical data with cryptographic hardware

IEEE Transactions on Information Technology in Biomedicine

Volumn 16, Issue 1, 2012, Pages 166-175

  Canim, Mustafa ^a,b   Kantarcioglu, Murat ^a   Malin, Bradley ^c  

^a The University of Texas at Dallas   (United States)

^b IBM T J WATSON RESEARCH CENTER   (United States)

^c VANDERBILT UNIVERSITY MEDICAL CENTER   (United States)

Author keywords

Cryptographic hardware; Cryptography; Databases; Genomics; Privacy; Security

Indexed keywords

AUTOMATED METHODS; BANDWIDTH CONSTRAINT; BIOMEDICAL COMMUNITY; BIOMEDICAL DATA; BIOMEDICAL INVESTIGATIONS; CLINICAL DATA; CRYPTOGRAPHIC HARDWARE; CRYPTOGRAPHIC PROTOCOLS; DE-IDENTIFICATION; GENOMIC DATA; GENOMICS; MEDICAL CENTER; SECURE PROTOCOLS; SECURITY; THIRD PARTIES;

CRYPTOGRAPHY; DATABASE SYSTEMS; GENES;

DATA PRIVACY;

ARTICLE; COMPUTER SECURITY; DATA BASE; ELECTRONIC MEDICAL RECORD; FACTUAL DATABASE; MEDICAL RESEARCH;

BIOMEDICAL RESEARCH; COMPUTER SECURITY; DATABASE MANAGEMENT SYSTEMS; DATABASES, FACTUAL; ELECTRONIC HEALTH RECORDS;

EID: 84856847778     PISSN: 10897771     EISSN: None     Source Type: Journal    
DOI: 10.1109/TITB.2011.2171701     Document Type: Article

References (41)

1. M. Khoury, E. C. Rich, G. Randhawa, S. Teutsch, and J. Niederhuber, "Comparative effectiveness research and genomic medicine: An evolving partnership for 21st century medicine," Genet. Med., vol. 11, no. 10, pp. 707-711, 2009
2. E. Green, M. Guyer, and National Human Genome Research Institute, "Charting a course for genomic medicine from base pairs to bedside," Nature Genet., vol. 470, pp. 204-213, 2011
3. D. Gurwitz, J. Lunshof, and R. Altman, "A call for the creation of per-sonalized medicine databases," Nature Rev. Drug Discov., vol. 5, no. 1, pp. 23-26,2006
4. P. Burton, A. Hansell, I. Fortier, T. Manalio, M. Khoury, J. Little, and P. Elliott, "Size matters: Just how big is big?: Quantifying realistic sample size requirements for human genome epidemiology," Int. J. Epidemiol., vol. 38, no. 1, pp. 263-273, 2009
5. National Institutes of Health, "Policy for sharing of data obtained in NIH supported or conducted genome-wide association studies (GWAS)," NOT-OD-07-088, Aug. 2007
6. M. Mailman, M. Feolo, Y. Jin, M. Kimura, K. Tryka, R. Bagoutdinov, L. Hao, A. Kiang, J. Paschall, L. Phan, N. Popova, S. Pretel, L. Ziyabari, M. Lee, Y. Shao, Z. Wang, K. Sirotkin, M. Ward, M. Kholodov, K. Zbicz, J. Beck, M. Kimelman, S. Shevelev, D. Preuss, E. Yaschenko, A. Graeff, J. Ostell, and S. Sherry, "The NCBI db Ga P database of genotypes and phenotypes," Nature Genet., vol. 39, no. 10, pp. 1181-1186, 2007
7. T. Peakman and P. Elliott, "The UK biobank sample handling and storage validation studies," Int. J. Epidemiol., vol. 37, Suppl 1, pp. i2-i6, 2008
8. B. Malin, "An evaluation of the current state of genomic data privacy protection technology and a roadmap for the future," J. Amer. Med. Informat. Assoc., vol. 12, no. 1, pp. 28-34, 2005 (Pubitemid 40038620)
9. K. Benitez and B. Malin, "Evaluating re-identification risks with respect to the HIPAA Privacy Rule," J. Amer. Med. Informat. Assoc., vol. 17, no. 2, pp. 169-177, 2010
10. M. Kantarcioglu, W. Jiang, Y. Liu, and B. Malin, "A cryptographic ap-proach to securely share and query genomic sequences," IEEE Trans. Inf. Technol. Biomed., vol. 12, no. 5, pp. 606-617, Sep. 2008
11. D. Asonov and J. Freytag, "Almost optimal private information retrieval," in Proc. 2nd Int. Workshop Privacy Enhancing Technol., 2002, pp. 209-223
12. R. Agrawal, D. Asonov, M. Kantarcioglu, and Y Li, "Sovereignjoins, " in Proc. 22nd IEEE Int. Conf. Data Eng., 2006, pp. 26-37
13. A. Iliev and S. W. Smith, "Private information storage with logarithm-space secure hardware," in Proc. Int. Inf. Security Workshops, 2004, pp.199-214
14. X. Zhang et al., "Secure coprocessor-based intrusion detection," in Proc. ACM SIGOPS Eur. Workshop, Sep. 2002, pp. 239-242
15. M. C. Mont, S. Pearson, and P. Bramhall, "Towards accountable man-agement of identity and privacy: Sticky policies and enforceable tracing services," in Proc. 14th Int. Workshop Database Expert Syst. Appl., 2003, pp. 377-382
16. A. Iliev and S. W. Smith. (2010). Small, stupid, and scalable: Secure com-puting with faerieplay. in Proc. fifth ACM Workshop on Scalable Trusted Computing, pp. 41-52. [Online]. Available: http://doi.acm.org/10.1145/1867635. 1867643
17. R. Agrawal, J. Kiernan, R. Srikant, and Y. Xu, "Order-preserving encryp-tion for numeric data," presented at the ACM SIGMOD Int. Conf. Manage. Data, Paris, France, Jun. 13-18, 2004
18. B. Iyer, S. Mehrotra, E. Mykletun, G. Tsudik, and Y. Wu, "A framework for efficient storage security in RDBMS," in Proc. 9th Int. Conf. Extend. Database Technol., 2004, pp. 627-628
19. Y. Elovici, E. Shmueli, R. Waisenberg, and E. Gudes. (2004, Aug. 30). A structure preserving database encryption scheme. in Proc. Work-shop Secure Data Manage. Connected World. [Online]. Available: http://www.extra.research.philips. com/sdm-workshop/Ronen SDM.pdf
20. M. Canim and M. Kantarcioglu, "Design and analysis of querying en-crypted data in relational databases," in Proc. 21st IFIP WG 11.3 Working Conf. Data Appl. Security, ser. Lecture Notes in Computer Science, 2007, vol. 4602, pp. 177-194
21. M. Canim, M. Kantarcioglu, B. Hore, and S. Mehrotra, "Building disclo-sure risk aware query optimizers for relational databases," Proc. VLDB Endowment, vol. 3, no. 1-2, pp. 13-24, 2010
22. M. Canim, M. Kantarcioglu, and A. Inan, "Query optimization in en-crypted relational databases by vertical schema partitioning," in Proc. Secure Data Manage., 2009, pp. 1-16
23. B. Adida and I. Kohane. (2006). Gene PING: Secure, scalable management ofpersonal genomic data. BMC Genom, 7(1), p. 93. [Online]. Available: http://www.biomedcentral.com/1471-2164/7/93
24. H. Hacigumus, B. R. Iyer, C. Li, and S. Mehrotra. (2002, Jun. 4-6). Exe-cuting SQL over encrypted data in the database-service-provider model. in Proc. 2002 ACM SIGMOD Int. Conf. Manage. Data. [Online]. Madison, WI, pp. 216-227. Available: http://doi.acm.org/10.1145/564691.564717 (Pubitemid 34985549)
25. B. Hore, S. Mehrotra, and G. Tsudik, "A privacy-preserving index for range queries," in Proc. 30th Int. Conf. Very Large Data Bases, 2004, pp. 720-731
26. E. Damiani, S. D. C. Vimercati, S. Jajodia, S. Paraboschi, and P. Samarati. (2003). Balancing confidentiality and efficiency in untrusted relational DBMSs. in Proc. 10th ACM Conf. Comput. Commun. Security, pp. 93-102. [Online]. Available: http://doi.acm.org/10.1145/948109.948124 (Pubitemid 40673792)
27. B. Carbunar and R. Sion, "Joining privately on outsourced data," in Proc. 7th Secure Data Manage. Workshop, 2010, pp. 70-86
28. G. Aggarwal, M. Bawa, P. Ganesan, H. Garcia-Molina, K. Kenthapadi, R. Motwani, U. Srivastava, D. Thomas, and Y. Xu 0002, "Two can keep a secret: A distributed architecture for secure database services," in Proc. 2nd Biennial Conf. Innovative Data Syst. Res., 2005, pp. 186-199
29. Understanding transparent data encryption (TDE). (2010). [Online]. Avail-able: http://msdn.microsoft.com/en-us/library/bb934049.aspx
30. Understanding extensible key management (EKM). (2010). [Online]. Available: http://technet.microsoft.com/en-us/library/bb895340.aspx
31. IBM. (2004). IBM 4764 cryptographic coprocessor. [Online]. Available: http://www.ibm.com/security/cryptocards
32. B. Schneier, Applied Cryptography: Protocols, Algorithms and Source Code in C. New York: Wiley, 1996
33. K. Goldman and E. Valdez, "Matchbox: Secure data sharing," IEEE Internet Comput., vol. 8, no. 6, pp. 18-24, Nov./Dec 2004 (Pubitemid 40043363)
34. S. Purcell, B. Neale, K. Todd-Brown, L. Thomas, M. Ferreira, D. Bender, J. Maller, P. Sklar, P. de Bakker, M. Daly, and P. Sham, "PLINK: A tool set for whole-genome association and population-based linkage analyses," Amer. J. Human Genet., vol. 81, no. 3, pp. 559-575, 2007 (Pubitemid 47330214)
35. National Institute of Standards and Technology. (2001). "Advanced en-cryption standard (AES)," National Institute of Standards and Technol-ogy, Tech. Rep. NIST Special Publication FIPS-197. [Online]. Available: http://csrc.nist.gov/publications/fips/fips197/fips-197.pdf
36. J. Denny, M. Ritchie, M. Basford, J. Pulley, L. Bastarache, K. Brown-Gentry, D. Wang, D. Masys, D. Roden, and D. Crawford, "Phe WAS: Demonstrating the feasibility of a phenome-wide scan to discover gene-disease associations," Bioinformatics, vol. 26, no. 9, pp. 1205-1210, 2010
37. T. Manolio, "Collaborative genome-wide association studies of diverse diseases: Programs of the NHGRI's office of population genomics," Phar-macogenomics, vol. 10, no. 2, pp. 235-241, 2009
38. H. Lipmaa, P. Rogaway, and D. Wagner. (2000). Ctr-mode encryption. in Proc. NIST, Comput. Security Resource Center, First Modes Operat. Workshop. [Online]. Available: http://csrc.nist.gov/Crypto Toolkit/modes/workshop1/papers/ lipmaa-ctr.pdf
39. B. Pinkas and T. Reinman. (2010). Oblivious ram revisited. in Proc. 30th Annu. Conf. Adv. Cryptol, pp. 502-519. [Online]. Available: http://portal. acm.org/citation.cfm?id=1881412.1881447
40. Dept. of Health and Human Services, "Security standards for the protec-tion of electronic protected health information," Federal Register, vol. 45, no. 164, Feb. 20, 2003
41. N. R. Adam and J. C. Worthmann, "Security-control methods for statistical databases: A comparative study," ACM Comput. Surveys, vol. 21, no. 4, pp. 515-556, 1989.