Dynamic data protection
Methods, systems and computer program products for health data protection. Embodiments commence upon receiving a data access request message from a participant in a health ecosystem. The data access request message comprises an indication of one or more health data sets that are held by or at least potentially of interest to the participant. System components are configured to receive the message and to identify the participant. Based on parameter values corresponding to a data protection policy of the participant, a data protection scheme is generated. The scheme includes parameter values derived from the data protection policy. The parameter values of the scheme are used to generate a variation of the health data set that is formed by applying one or more data anonymization, data obfuscation or other data protection techniques to the health data set. A balance among the parameters is calculated so as to achieve a desired outcome.
1. A method for dynamic health data protection, the method comprising:
receiving at least one data access request associated with a health data set, the at least one data access request being associated with at least one participant in an Internet-based health ecosystem;
accessing at least one data protection policy corresponding to the at least one participant;
determining a data protection scheme based at least in part on parameter values corresponding to the at least one data protection policy; and
generating a protected health data set from the health data set, the protected health data set being generated based at least in part on application of a selected hashing algorithm; and
provisioning access to the protected health data set.
2. The method of claim 1 , further comprising:
selecting the health data set wherein the health data set is selected based at least in part on at least one of: the at least one data access request, or the at least one data protection policy.
3. The method of claim 1 , wherein the data protection scheme is determined based at least in part on a privacy budget parameter, the privacy budget parameter being derived from the at least one data protection policy.
4. The method of claim 1 , wherein at least one differential privacy algorithm is applied to the health data in accordance with the data protection scheme.
5. The method of claim 1 , wherein access to at least a portion of the health data set is blocked in accordance with the data protection scheme.
6. The method of claim 1 , wherein at least a portion of the health data set is obfuscated in accordance with the data protection scheme.
7. The method of claim 6 , wherein the portion of the health data set is obfuscated by a locality-sensitive hashing technique.
8. The method of claim 1 , wherein the at least one data protection policy is characterized by one or more policy parameters, the one or more policy parameters being associated with at least one of, a policy identifier, a participant identifier, a user identifier, an inference performance indicator, or a data leakage tolerance indicator.
9. The method of claim 1 , further comprising:
issuing a set of instructions to cause an operational element of the at least one participant to apply a participant-specific policy to the health data set.
10. The method of claim 9 , further comprising:
storing participant-specific protected health data after applying at least a portion of the participant-specific policy to the health data.
11. The method of claim 10 , further comprising:
providing access to the stored participant-specific protected health data.
12. A non-transitory computer readable medium having stored thereon a sequence of instructions which, when stored in memory and executed by one or more processors causes the one or more processors to perform a set of acts for dynamic health data protection, the set of acts comprising:
receiving at least one data access request associated with a health data set, the at least one data access request being associated with at least one participant in an Internet-based health ecosystem;
accessing at least one data protection policy corresponding to the at least one participant;
determining a data protection scheme based at least in part on parameter values corresponding to the at least one data protection policy; and
generating a protected health data set from the health data set, the protected health data set being generated based at least in part on application of a selected hashing algorithm; and
provisioning access to the protected health data set.
13. The non-transitory computer readable medium of claim 12 , further comprising instructions which, when stored in memory and executed by the one or more processors causes the one or more processors to perform acts of:
selecting the health data set wherein the health data set is selected based at least in part on at least one of: the at least one data access request, or the at least one data protection policy.
14. The non-transitory computer readable medium of claim 12 , wherein the data protection scheme is determined based at least in part on a privacy budget parameter, the privacy budget parameter being derived from the at least one data protection policy.
15. The non-transitory computer readable medium of claim 12 , wherein at least one differential privacy algorithm is applied to the health data in accordance with the data protection scheme.
16. The non-transitory computer readable medium of claim 12 , wherein access to at least a portion of the health data set is blocked in accordance with the data protection scheme.
17. A system for dynamic health data protection, the system comprising:
a storage medium having stored thereon a sequence of instructions; and
one or more processors that execute the instructions to cause the one or more processors to perform a set of acts, the set of acts comprising:
receiving at least one data access request associated with a health data set, the at least one data access request being associated with at least one participant in an Internet-based health ecosystem;
accessing at least one data protection policy corresponding to the at least one participant;
determining a data protection scheme based at least in part on parameter values corresponding to the at least one data protection policy; and
generating a protected health data set from the health data set, the protected health data set being generated based at least in part on application of a selected hashing algorithm; and
provisioning access to the protected health data set.
18. A system for dynamic health data protection, the system comprising:
means for receiving at least one data access request associated with a health data set, the at least one data access request being associated with at least one participant in an Internet-based health ecosystem;
means for accessing at least one data protection policy corresponding to the at least one participant;
means for determining a data protection scheme based at least in part on parameter values corresponding to the at least one data protection policy; and
means for generating a protected health data set from the health data set, the protected health data set being generated based at least in part on application of a selected hashing algorithm; and
means for provisioning access to the protected health data set.
19. The system of claim 18 , further comprising:
means for selecting the health data set wherein the health data set is selected based at least in part on at least one of: the at least one data access request, or the at least one data protection policy.
20. The system of claim 18 , wherein the data protection scheme is determined based at least in part on a privacy budget parameter, the privacy budget parameter being derived from the at least one data protection policy.
21. The system of claim 18 , wherein at least one differential privacy algorithm is applied to the health data in accordance with the data protection scheme.
22. The system of claim 18 , wherein at least a portion of the health data set is obfuscated in accordance with the data protection scheme.
23. The system of claim 18 , wherein the at least one data protection policy is characterized by one or more policy parameters, the one or more policy parameters being associated with at least one of, a policy identifier, a participant identifier, a user identifier, an inference performance indicator, or a data leakage tolerance indicator.
24. The system of claim 18 , further comprising:
means for issuing a set of instructions to cause an operational element of the at least one participant to apply a participant-specific policy to the health data set.
25. The system of claim 24 , further comprising:
means for storing participant-specific protected health data after applying at least a portion of the participant-specific policy to the health data.
26. The system of claim 25 , further comprising:
means for providing access to the stored participant-specific protected health data.
27. The method of claim 1 , wherein the selected hashing algorithm comprises a locality-sensitive hashing technique.
28. The non-transitory computer readable medium of claim 12 , wherein the selected hashing algorithm comprises a locality-sensitive hashing technique.
29. The system of claim 17 , wherein the selected hashing algorithm comprises a locality-sensitive hashing technique.
30. The system of claim 18 , wherein the selected hashing algorithm comprises a locality-sensitive hashing technique.