Privacy preserving interactive record linkage (PPIRL)

Journal of the American Medical Informatics Association

Volumn 21, Issue 2, 2014, Pages 212-220

  Kum, Hye Chung ^a,b,c,d   Krishnamurthy, Ashok ^a   Machanavajjhala, Ashwin ^e   Reiter, Michael K ^a   Ahalt, Stanley ^a  

^a UNIVERSITY OF NORTH CAROLINA   (United States)

^b Texas A and M College of Medicine   (United States)

^c TEXAS A AND M UNIVERSITY   (United States)

^d SCOTT AND WHITE MEMORIAL HOSPITAL   (United States)

^e Duke University   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

DECOUPLED DATA; ELECTRONIC HEALTH RECORDS (EHR); ENTITY RESOLUTION; MEDICAL RECORD LINKAGE; PRIVACY; PRIVACY PRESERVING INTERACTIVE RECORD LINKAGE (PPIRL);

BIOMEDICAL RESEARCH; COMPUTER SECURITY; CONFIDENTIALITY; HUMANS; MEDICAL RECORD LINKAGE; MEDICAL RECORDS SYSTEMS, COMPUTERIZED; USER-COMPUTER INTERFACE;

EID: 84894062665     PISSN: 10675027     EISSN: 1527974X     Source Type: Journal    
DOI: 10.1136/amiajnl-2013-002165     Document Type: Article

References (80)

1. Sauleau EA, Paumier J, Buemi A. Medical record linkage in health information systems by approximate string matching and clustering. BMC Med Inform Decis Mak 2005;5:32-44.
2. Weber SC, Lowe H, Das A, et al. A simple heuristic for blindfolded record linkage. J Am Med Inform Assoc 2012;19:157-61.
3. Boscoe FP, Schrag D, Chen K, et al. Building capacity to assess cancer care in the Medicaid population in New York State. Health Serv Res 2011;46:805-20.
4. Bronstein J, Lomatsch C, Fletcher D, et al. Issues and biases in matching medicaid pregnancy episodes to vital records data: the Arkansas experience. Mater Child Health J 2009;13:250-9.
5. Duvall SL, Fraser AM, Rowe K, et al. Evaluation of record linkage between a large healthcare provider and the Utah population database. J Am Med Inform Assoc 2012;19:e54-9.
6. McCoy AB, Wright A, Kahn M, et al. Matching identifiers in electronic health records: implications for duplicate records and patient safety. BMJ Qual Saf 2013;22:219-24.
7. Bradley C, Penberthy L, Devers K, et al. Health services research and Data Linkages: issues, methods, and directions for the future. Health Serv Res 2010;45 (5p2):1468-88.
8. Kash W. Federal Lab, IBM Open Door To High Speed Computing For Big Data Users. Website June 28, 2012. http://breakinggov.com/2012/06/28/ federal-lab-ibm-open-door-to-high-speed-computing-for-big-data/
9. Elmagarmid K, Panagiotis GI, Verykios SV. Duplicate record detection: a survey. IEEE Trans Knowl Data Eng 2007;19:1-16.
10. Winkler WE. Overview of record linkage and current research direction. Research Report Series (Statistics No. 2006-2), Statistical Research Division, U.S. Census Bureau. Washington, DC, 2006.
11. Herzog T, Scheuren F, Winkler W. Data quality and record linkage techniques. Springer, 2007.
12. Christen P. Data matching. Springer, 2012.
13. Getoor L, Machanavajjhala A. Entity resolution: theory, practice & open challenges. International Conference on Very Large Data Bases (VLDB). 2012.
14. Newcombe H, Kennedy J, Axford S, et al. Automatic linkage of vital records. Science 1959;130:954-59.
15. Fellegi P, Sunter AB. A theory for record linkage. JASA 1969;64:1183-210.
16. Benjelloun O, Garcia-Molina H, Menestrina D, et al. Swoosh: a generic approach to Entity Resolution. VLDBJ 2009;18:255-76.
17. Christen P. Automatic record linkage using seeded nearest neighbor and support vector machine classification. In: Proceedings of the 14th ACM SIGKDD International Conference on Knowledge Discovery and Data Mining (KDD '08). New York, NY, USA: ACM, 2008:151-9. doi:10.1145/1401890.1401913
18. Bhattacharya I, Getoor L. A latent Dirichlet model for unsupervised entity resolution. SDM 2007.
19. Bilenko M, Mooney R. Adaptive duplicate detection using learnable string similarity measures. KDD 2003.
20. Chen Z, Kalashnikov DV, Mehrotra S, et al. Exploiting context analysis for combining multiple entity resolution systems. In: Proceedings of the 2009 ACM SIGMOD International Conference on Management of Data (SIGMOD '09). Carsten Binnig and Benoit Dageville, eds. New York, NY, USA: ACM:207-18. doi:10.1145/ 1559845.1559869
21. Sadinle M, Hall R, Fienberg SE. Approaches to multiple record linkage. Proceedings of ISI. Dublin, Ireland: 2011.
22. Kum HC, Ahalt S, Pathak D. Privacy preserving data integration using decoupled data. In: Elovici Y, Altshuler Y, Cremers A, Aharony N, Pentland A. eds. Security and privacy in social network. Springer, 2012:225-53.
23. Boyd A, Hosner C, Hunscher D, et al. An "Honest Broker" mechanism to maintain privacy for patient care and academic medical research. Int J Med Inform 2007;76:407-11.
24. Boyd A, Saxman P, Hunscher D, et al. The University of Michigan honest broker: a web-based service for clinical and translational research and practice. J Am Med Inform Assoc 2009;16:784-91.
25. Baldi I, Ponti A, Zanetti R, et al. The impact of record-linkage bias in the Cox model. J Eval Clin Pract 2010;16:92-6.
26. Lahiri P, Larsen M. Regression analysis with linked data. J Am Stat Assoc 2005;100:222-30.
27. Tancredi A, Liseo B. A hierarchical Bayesian approach to record linkage and population size problems. Annu Appl Stat 2011;5:1553-85.
28. Scheuren F, Winkler WE. Regression analysis of data files that are computer matched-Part II. Surv Methodol 1997;23:157-65.
29. Scheuren F, Winkler WE. Regression analysis of data files that are computer matched. Surv Methodol 1993;19:39-58.
30. Fienberg S. Toward a reconceptualization of confidentiality protection in the context of linkages with administrative records. J Privacy Confidentiality 2011;3:65-71.
31. Kum HC, Ahalt S. Privacy by design: understanding data access models for secondary data. American Medical Informatics Association (AMIA) Joint Summits on Translation Science and Clinical Research Informatics. 2013. Nominated for best paper award.
32. Wang J, Kraska T, Franklin MJ, et al. CrowdER: Crowdsourcing Entity Resolution. Proceedings of Very Large Data Bases (PVLDB) 2012;5.
33. Kang H, Getoor L, Shneiderman B, et al. Interactive entity resolution in relational data: a visual analytic tool and its evaluation. IEEE Trans Vis Comput Graph 2008;14:999-1014.
34. Marcus A, Wu E, Karger D, et al. Human-powered sorts and joins. Proceedings of Very Large Data Bases (PVLDB) 2011;5.
35. Arasu A, Gotz M, Kaushik R. On active learning of record matching packages. ACM International Conference on Management of Data (SIGMOD). 2010.
36. Beygelzimer A, Langford J, Hsu D, et al. Agnostic active learning without constraints. NIPS, 2010. http://arxiv.org/abs/1006.2588
37. Sarawagi S, Bhamidipaty A. Interactive deduplication using active learning. ACM International Conference on Knowledge Discovery and Data Mining (KDD). 2000.
38. Bellar K, Iyengar S, Parameswaran A. Active sampling for entity matching. ACM International Conference on Knowledge Discovery and Data Mining (KDD). 2012.
39. Kopcke H, Thor A, Rahm E. Evaluation of entity resolution approaches on real-world match problems. PVLDB 2010;3:484-93.
40. GAO. Record linkage and privacy: issues in creating new federal research and statistical information, GAO-01-126SP, April 2001 (172 pp).
41. Vaidya J, Zhu Y, Clifton C. Privacy preserving data mining. Advances in information security. New York: Springer-Verlag, 2005.
42. Jiang X, Sarwate A, Ohno-Machado L. Privacy technology to support data sharing for comparative effectiveness research: a systematic review. Med Care 2013; 51(8 Suppl 3):S58-65.
43. Fienberg SE. Confidentiality, privacy and disclosure limitation, Encyclopedia of Social Measurement. Academic Press, 2005;1:463-9.
44. Machanavajjhala A, Kifer D, Gehrke J, et al. L-diversity: privacy beyond k-anonymity. ACM Trans. Knowl Discov Data 1, 1, Article 3 (March 2007).
45. Li N, Li T, Venkatasubramanian S. t-Closeness: privacy beyond k-anonymity and l-diversity. International Conference on Data Engineering (ICDE), April 2007.
46. Kum HC, Pathak D, Sanka G, et al. Privacy beyond anonymity: decoupling data through encryption for record linkage. Technical Report 2012-003 UNC-CH. Poster Presentation at American Medical Informatics Association (AMIA) Joint Summits on Translation Science and Clinical Research Informatics. 2013.
47. Kum HC, Pathak D, Krishnamurthy A, et al. Secure Decoupled Linkage (SDLink) for Building a Social Genome. In: Proceedings of 2013 IEEE International Conference on Big Data (IEEE BigData 2013), Oct 2013. San Jose, CA. 7-11.
48. Goldreich O. Secure multi-party computation. Unpublished manuscript. Final Version. October 2002. http://www.wisdom.weizmann.ac.il/~oded/pp.html
49. CyberSecuirtyWatch Survey, CSO Magazine, U.S. Secret Service, Software Engineering Institute CERT Program at Carnegie Mellon University and Deloitte, January 2011.
50. Tacconelli E. Systematic reviews: CRD's guidance for undertaking reviews in health care. Lancet Infect Dis 2010;10:1-232.
51. Agrawal R, Evfimievski A, Srikant R. Information sharing across private databases. SIGMOD '03: Proceedings of the 2003 ACM SIGMOD International Conference on Management of Data. New York, USA: ACM, 2003:86-97.
52. Freedman MJ, Nissim K, Pinkas B. Efficient private matching and set intersection. Proceedings of EUROCRYPT. 2004.
53. Schnell R, Bachteler T, Reiher J. Privacy-preserving record linkage using Bloom filters. BMC Med Inform Decis Mak 2009;9:41.
54. Churches T, Christen P. Some methods for blindfolded record linkage. BMC Med Inform Decis Mak 2004;4:9.
55. Yakout M, Atallah MJ, Elmagarmid AK. Efficient private record linkage. In ICDE. 2009:1283-6.
56. Durham E, Xue Y, Kantarcioglu M, et al. Private medical record linkage with approximate matching. Proceedings of the 2010 American Medical Informatics Association Annual Symposium. 2010:182-6.
57. Schroeder AD. Pad and Chaff: secure approximate string matching in private record linkage. Proceedings of the 14th International Conference on Information Integration and Web-based Applications & Services (IIWAS '12). New York, USA: ACM, 2012:121-5.
58. Karakasidis, Alexandros, Verykios, et al. Fake injection strategies for private phonetic matching. In: Garcia-Alfaro J, Navarro-Arribas G, Cuppens-Boulahia N, Capitani di Vimercati, eds. Lecture notes in computer science: data privacy management and autonomous spontaneous security. Berlin: Springer, 2012:9-24. http://link.springer. com/chapter/10.1007%2F978-3-642-28879-1_2
59. Karakasidis A, Verykios VS. Privacy preserving record linkage using phonetic codes. Informatics, 2009. BCI '09. Fourth Balkan Conference; 17-19 September 2009;101, 106.
60. Bonomi L, Xiong L, Lu JJ. LinkIT: privacy preserving record linkage and integration via transformations. Proceedings of the 2013 ACM SIGMOD International Conference on Management of Data (SIGMOD '13). New York, USA: ACM, 2013:1029-32.
61. Hall R, Fienberg SE. Privacy-preserving record linkage. Privacy in Statistical Databases 2010: Lecture Notes in Computer Science., Volume 6344/2011, 2011:269-83.
62. Vatsalan D, Christen P, Verykios VS. A taxonomy of privacy-preserving record linkage techniques. Info Syst 2013;38:946-69. ISSN: 0306-4379.
63. Christen P. Privacy-preserving data linkage and geocoding: current approaches and research directions. Data Mining Workshops, 2006. ICDM Workshops 2006. Sixth IEEE International Conference; December 2006:497, 501.
64. Clifton C, Kantarcioglu M, Doan A, et al. Privacy-preserving data integration and sharing. Proceedings of the 9th ACM SIGMOD workshop on research issues in data mining and knowledge discovery (DMKD '04). New York, USA: ACM, 2004:19-26.
65. Durham E, Xue Y, Kantarcioglu M, et al. Quantifying the correctness, computational complexity, and security of privacy-preserving string comparators for record linkage. Information Fusion 2012;13:245-59. ISSN: 1566-2535.
66. Kuzu M, Kantarcioglu M, Durham EA, et al. A practical approach to achieve private medical record linkage in light of public resources. J Am Med Inform Assoc 2013;20:285-92.
67. Kuzu M, Kantarcioglu M, Inan A, et al. Efficient privacy-aware record integration. EDBT/ICDT, 2013.
68. Jutte DP, Roos LL, Brownell MD. Administrative record linkage as a tool for public health research. Annu Rev Public Health 2011;32:91-108.
69. D'Arcy C, Holman J, Bass AJ, et al. Population-based linkage of health records in Western Australia: development of a health services research linked database. Aust N Z J Public Health 1999;23:453-9.
70. Holman C, D'Arcy J, Bass John A, et al. A decade of data linkage in Western Australia: strategic design, applications and benefits of the WA data linkage system. Aust Health Rev 2008;32:766-77.
71. Boyd JH, Ferrante AM, O'Keefe CM, et al. Data linkage infrastructure for crossjurisdictional health-related research in Australia. BMC Health Serv Res 2012;12:480.
72. Blakely T, Woodward A, Salmond C. Anonymous linkage of New Zealand mortality and census data. Aust N Z J Public Health 2000;24:92-5.
73. Ford D, Jones K, Verplancke J-P, et al. The SAIL Databank: building a national architecture for e-health research and evaluation. BMC Health Serv Res 2009;9:157.
74. International Health Data Linkage Network (IHDLN). http://www.ihdln.org/ data-linkage-centres
75. Hertzman CP, Meagher N, McGrail KM. Privacy by Design at Population Data BC: a case study describing the technical, administrative, and physical controls for privacy-sensitive secondary use of personal information for research in the public interest. J Am Med Inform Assoc 2013;20:25-8.
76. Kelman CW, Bass AJ, Holman CDJ, et al. Research use of linked health data-a best practice protocol. Aust N Z J Public Health 2002;26.3:251-5.
77. Pommerening K, Miller M, Schmidtmann I, et al. Pseudonyms for cancer registries. Methods Inf Med 1996;35:112-21.
78. Alhaqbani B, Fidge C. Privacy-preserving electronic health record linkage using pseudonym identifiers. e-Health Networking, Applications and Services, 2008. HealthCom 2008. 10th International Conference. 7-9 July 2008: 108, 117.
79. Bellare K, Curino C, Machanavajihala A, et al. WOO: a Scalable and multi-tenant platform for continuous knowledge base synthesis. VLDB Endowment 2013;6. http://db.disi.unitn.eu/pages/VLDBProgram/pdf/industry/p828-rahurkar.pdf
80. Lane J, Heus P, Mulcahy T. Data access in a cyber-world: making use of cyberinfrastructure. Trans Data Privacy 2008;1:2-16.