Authors:
Akito Yamamoto
1
;
Eizen Kimura
2
and
Tetsuo Shibuya
1
Affiliations:
1
Human Genome Center, The Institute of Medical Science, The University of Tokyo, Tokyo, Japan
;
2
Medical School of Ehime University, Ehime, Japan
Keyword(s):
Differential Privacy, Randomized Response, k-Anonymity, Data Sharing.
Abstract:
As the amount of biomedical and healthcare data increases, data mining for medicine becomes more and
more important for health improvement. At the same time, privacy concerns in data utilization have also been
growing. The key concepts for privacy protection are k-anonymity and differential privacy, but k-anonymity
alone cannot protect personal presence information, and differential privacy alone would leak the identity. To
promote data sharing throughout the world, universal methods to release the entire data while satisfying both
concepts are required, but such a method does not yet exist. Therefore, we propose a novel privacy-preserving
method, (ε, k)-Randomized Anonymization. In this paper, we first present two methods that compose the
Randomized Anonymization method. They perform k-anonymization and randomized response in sequence
and have adequate randomness and high privacy guarantees, respectively. Then, we show the algorithm for
(ε, k)-Randomized Anonymization, whic
h can provide highly accurate outputs with both k-anonymity and differential privacy. In addition, we describe the analysis procedures for each method using an inverse matrix
and expectation-maximization (EM) algorithm. In the experiments, we used real data to evaluate our methods’
anonymity, privacy level, and accuracy. Furthermore, we show several examples of analysis results to demonstrate high utility of the proposed methods.
(More)