Secure data exchange
The present disclosure generally relates to the secure exchange of data. In some implementations, an example method involves receiving data from a number of independent data sources. The method also includes storing the data in a central repository where at least a first portion of the data is homomorphically encrypted, receiving a data request from a data requester, and analyzing the stored data without decrypting the homomorphically encrypted data to determine an aggregated subset of data relevant to the data request. The aggregated subset of data may include at least some of the homomorphically encrypted data. The method also includes providing data request results that include or are derived from the aggregated subset of data to the data requester.
1. A method, comprising:
receiving data from a plurality of independent data sources;
storing the data in a central repository;
homomorphically encrypting, prior to receiving a data request from a data requester, at least a first portion of the stored data in the central repository, wherein the first portion of the stored data includes data from at least two of the plurality of independent data sources;
receiving the data request from the data requester;
analyzing the stored data without decrypting the homomorphically encrypted data to determine an aggregated subset of data relevant to the data request, the aggregated subset of data comprising at least some of the homomorphically encrypted data; and
providing data request results that include or are derived from the aggregated subset of data to the data requester.
2. The method of claim 1 , further comprising receiving a decryption request from the data requester for decryption of the at least some of the homomorphically encrypted data included in the aggregated subset of data.
3. The method of claim 2 , further comprising providing a decryption key from at least one of the plurality of independent data sources to the data requester.
4. The method of claim 3 , wherein the aggregated subset of data includes at least some data from the at least one independent data source that has been homomorphically encrypted.
5. The method of claim 3 , wherein the decryption key is a one-time decryption key.
6. The method of claim 2 , further comprising identifying the independent data sources having homomorphically encrypted data in the aggregated subset of data and notifying the identified independent data sources of the data request.
7. The method of claim 6 , further comprising receiving re-encrypted data from the identified independent data sources, the re-encrypted data being re-encrypted with a public encryption key provided by the data requester.
8. The method of claim 7 , wherein the data request results provided to the data requester comprise the re-encrypted data.
9. The method of claim 7 , wherein the data request results provided to the data requester are derived from the re-encrypted data.
10. The method of claim 1 , further comprising running one or more cache queries to identify one or more locations of certain homomorphically encrypted data stored in the central repository and storing the one or more locations.
11. The method of claim 10 , further comprising identifying the one or more locations when the data request from the data requester is the same or similar to the one or more cache queries.
12. The method of claim 1 , wherein at least a second portion of the data received from the plurality of independent data sources is encrypted.
13. The method of claim 12 , wherein the first portion of the data received from the plurality of independent data sources has a different sensitivity level than the second portion of the data received from the plurality of independent data sources.
14. The method of claim 1 , further comprising identifying from the data request received from the data requester one or more types of data to be identified from the stored data and analyzing the stored data to determine if the one or more types of data is included therein.
15. The method of claim 14 , wherein the one or more types of data to be identified from the stored data includes at least one type of genomic data, at least one type of phenotypic data, or a combination of at least one type of genomic data and at least one type of phenotypic data, and analyzing the stored data includes determining if the homomorphically encrypted data includes any instances of the at least one type of genomic data, the at least one type of phenotypic data, or a combination of at least one type of genomic data and at least one type of phenotypic data.
16. The method of claim 15 , wherein the at least one type of genomic data includes a genetic variant.
17. The method of claim 15 , wherein the at least one type of phenotypic data includes one or more of demographic information, electronic health record data and derivatives thereof, medical diagnostic codes, billing codes, terms from computational ontologies, patient-reported data, automatically generated data from health wearables or sensors, family history data, and medical imaging raw data or downstream derivative features thereof.
18. The method of claim 1 , wherein the stored data includes information relating to physical assets for sale.
19. The method of claim 1 , wherein the stored data includes at least one type of phenotypic data, the phenotypic data including one or more of demographic information, electronic health record data and derivatives thereof, medical diagnostic codes, billing codes, terms from computational ontologies, patient-reported data, automatically generated data from health wearables or sensors, family history data, and medical imaging raw data or downstream derivative features thereof.
20. The method of claim 1 , wherein the stored data includes financial information, the financial information including health insurance information, billing information, account balance information, credit information, credit score information, payment information, or any combination of the foregoing.
21. The method of claim 1 , wherein the stored data includes at least one type of genomic data.
22. A system comprising:
one or more processors; and
one or more non-transitory computer-readable media containing instructions which, in response to being executed by the one or more processors, cause the system to perform or control performance of operations comprising:
receiving data from a plurality of independent data sources;
storing the data in a central repository;
homomorphically encrypting, prior to receiving a data request from a data requester, at least a first portion of the stored data in the central repository, wherein the first portion of the stored data includes data from at least two of the plurality of independent data sources;
receiving the data request from the data requester;
analyzing the stored data without decrypting the homomorphically encrypted data to determine an aggregated subset of data relevant to the data request, the aggregated subset of data comprising at least some of the homomorphically encrypted data; and
providing data request results that include or are derived from the aggregated subset of data to the data requester.
23. The system of claim 22 , wherein the stored data includes genomic data, phenotypic data, financial data, information relating to physical assets for sale, or any combination thereof.
24. One or more non-transitory computer-readable media containing instructions which, in response to being executed by one or more processors, cause a system to perform or control performance of operations comprising:
receiving data from a plurality of independent data sources;
storing the data in a central repository;
homomorphically encrypting, prior to receiving a data request from a data requester, at least a first portion of the stored data in the central repository, wherein the first portion of the stored data includes data from at least two of the plurality of independent data sources;
receiving the data request from the data requester;
analyzing the stored data without decrypting the homomorphically encrypted data to determine an aggregated subset of data relevant to the data request, the aggregated subset of data comprising at least some of the homomorphically encrypted data; and
providing data request results that include or are derived from the aggregated subset of data to the data requester.