- Research Article
26
- 10.1016/j.cose.2021.102529
Personal big data pricing method based on differential privacy
- Nov 01, 2021
- Computers & Security
- Yuncheng Shen + 7 more +7
Personal big data pricing method based on differential privacy
Blockchain has unique advantages in data privacy protection and data integrity. We can solve many security problems, such as the single point of failure and data sharing in the current centralized system through blockchain approach. Existing studies have demonstrated that the application of blockchain in the medical system could improve the patient's medical experience. However, we found that the blockchain-based medical systems didn't consider the problems of long insurance claim cycle and complicated procedures. There are also very few healthcare systems that provide targeted sharing protocols for medical data and personal health data. In this paper, we propose a multi-role healthcare data sharing system framework based on blockchain. In this system, we reduce the storage cost through the collaborative storage of blockchain and IPFS. Then we design a smart contract on insurance to help patients achieve automatic insurance claim. In addition, we design two different sharing protocols to realize the fine management of personal data. The system analysis shows that our proposed blockchain-based multi-role healthcare data sharing system can effectively address the actual needs of users and has perfect performance in data storage, privacy protection, insurance claims and personal data management.
Personal big data pricing method based on differential privacy
Personal big data pricing method based on differential privacy
Blockchain-based Personal Health Data Sharing System Using Cloud Storage
With the advent of rapid development of wearable technology and mobile computing, huge amount of personal health-related data is being generated and accumulated on continuous basis at every moment. These personal datasets contain valuable information and they belong to and asset of the individual users, hence should be owned and controlled by themselves. Currently most of such datasets are stored and controlled by different service providers and this centralised data storage brings challenges of data security and hinders the data sharing. These personal health data are valuable resources for healthcare research and commercial projects. In this research work, we propose a conceptual design for sharing personal continuous-dynamic health data using blockchain technology supplemented by cloud storage to share the health-related information in a secure and transparent manner. Besides, we also introduce a data quality inspection module based on machine learning techniques to have control over data quality. The primary goal of the proposed system is to enable users to own, control and share their personal health data securely, in a General Data Protection Regulation (GDPR) compliant way to get benefit from their personal datasets. It also provides an efficient way for researchers and commercial data consumers to collect high quality personal health data for research and commercial purposes.
Read moreLimits of data anonymity: lack of public awareness risks trust in health system activities
Public trust is paramount for the well functioning of data driven healthcare activities such as digital health interventions, contact tracing or the build-up of electronic health records. As the use of personal data is the common denominator for these healthcare activities, healthcare actors have an interest to ensure privacy and anonymity of the personal data they depend on. Maintaining privacy and anonymity of personal data contribute to the trustworthiness of these healthcare activities and are associated with the public willingness to trust these activities with their personal data. An analysis of online news readership comments about the failed care.data programme in England revealed that parts of the public have a false understanding of anonymity in the context of privacy protection of personal data as used for healthcare management and medical research. Some of those commenting demanded complete anonymity of their data to be willing to trust the process of data collection and analysis. As this demand is impossible to fulfil and trust is built on a false understanding of anonymity, the inability to meet this demand risks undermining public trust. Since public concerns about anonymity and privacy of personal data appear to be increasing, a large-scale information campaign about the limits and possibilities of anonymity with respect to the various uses of personal health data is urgently needed to help the public to make better informed choices about providing personal data.
Read moreProtection of Data Privacy in The Era of Artificial Intelligence in The Financial Sector in Indonesia
The concept of privacy has broad ramifications, and it is implemented in a number of disciplines, ranging from philosophy to computer science, political science and legal science. This paper covers the impact of artificial intelligence on privacy protection, especially in the finance sector. Privacy protection is associated with control over information about personal data, also known as private information. This research is a normative legal research of analytical nature, and it is conducted by studying and interpreting theoretical matters relating to the principles, conceptions, doctrines and legal norms pertaining to the problems. The results of this research show that the concept of privacy in the era of artificial intelligence in Indonesia is best achieved by combining comprehensive rules with self-regulation to serve as a balancing agent between laws and technology in order to control and fulfill the protection of personal data in the era of artificial intelligence.
Read moreData privacy protection based on homomorphic encryption
Data security and privacy protection are increasingly becoming a bottleneck in the development of cloud computing. To improve the existing homomorphic encryption technology, ECC homomorphic encryption algorithm is proposed, and ECC homomorphic encryption algorithm is designed and implemented. Based on this, the aggregation model of data privacy protection is constructed, and the effect of ECC homomorphic encryption data security operation is analyzed. Compared with the traditional RSA encryption algorithm, ECC homomorphic encryption algorithm shows a higher level of security. When the key length increases gradually, the security of ECC with more than 300 bits is much greater than that of RSA with more than 2000 bits. At the same time, ECC homomorphic encryption algorithm is better than RSA in terms of encryption time and cipher size. ECC homomorphic encryption algorithm has the advantages of low computational complexity and good security performance.
Read moreLegal Challenges and Countermeasures for Data Privacy Protection
In the digital age, data privacy protection is facing legal challenges and countermeasures. Traditional privacy protection laws have limitations and cannot fully adapt to the era of big data. The illegal collection and utilization of personal information, the failure to meet ethical standards for privacy protection under new technologies, and the lagging legislative practice of personal information protection are all issues that need to be addressed. This article adopts a series of measures and advocates public awareness to enhance citizens' awareness and participation in personal information protection. From an international perspective, the experience of the EU's "data protection" system is worth learning from, while personal information protection involves basic human rights and should be ensured by legislation. In the future, it is necessary to design a path that balances information freedom and privacy protection, explore technology and incentive paths, industry self-discipline and rights building paths, in order to ensure effective protection of data privacy.
Read moreA Review of Big Data Security and Privacy Protection Technology
To study and solve the issues of big data security and privacy protection is the key to promote the healthy development of big data. In this paper, a 3D big data security and privacy protection model based on life cycle, security goal and user role is presented, and the security challenges and security goals of big data are analyzed from different aspects. The feasible technology and its application in big data security and privacy protection are expounded and analyzed, and the in-depth research direction of big data security and privacy protection is discussed and summarized.
Read morePersonal Information Security Environment Monitoring and Law Protection Using Big Data Analysis.
This article explores the causes of the issues with personal data privacy and outlines the limitations of China's current legal framework. This article makes the argument that, in the information age, self-discipline and legal protection should be combined in order to safeguard personal information safety. It also makes specific recommendations for strengthening legal protection. This research also develops a data processing platform for data safety and privacy protection while studying the technology of data safety environment monitoring and privacy protection. This work develops optimization methodologies, such as dynamic privacy budget allocation, to increase the model's speed of convergence and the calibre of the generated data. It adjusts to various privacy and timeliness needs under the assumption that the objective of selective matching of private safety will be satisfied. According to the experimental findings, this algorithm's accuracy can reach 96.27%. This method enhances the model's speed of convergence and the calibre of the data created, and it addresses the flaw that the present data fusion publishing procedure cannot withstand the attack of background information. The study's findings can serve as a starting point for future work on data security and the protection of personal information.
Read moreDECONSTRUCTING NIGERIA’S DATA PROTECTION REGIME FROM CONSUMER PROTECTION PERSPECTIVE
Purpose – The purpose of this paper is to make a case for the recognition of privacy and personal data protection as species of consumer rights in Nigeria in line with the revised United Nations Guidelines for Consumer Protection (UNGCP) by amending existing laws or enacting a new law to provide for personal data protection regime for consumers. Methodology/Approach/Design – The study follows a structured review of relevant extant legislation on consumer protection and personal data protection, namely the Federal Competition and Consumer Protection Act 2018 (FCCPA) and the Nigeria Data Protection Regulation 2019 (NDPR). Findings – The paper identifies that the provisions of Nigeria’s foremost consumer protection legislation, FCCPA, does cover electronic commerce (e-commerce) or consumer privacy and personal data protection while the NDPR, subsidiary legislation on personal data protection, which is yet to be effectively implemented is too general as to provide the consumers the much-needed privacy protection in their dealings with businesses. Practical Implications–Given the importance Recognition of data privacy and personal data protection as a species of consumer rights helps in understanding consumer protection in online transactions and opens opportunities for future research on consumer privacy and data protection. Originality/Value – Given the importance attached to the protection of consumer privacy and the various ramifications of transactions involving exposure of consumers’ personal data, recognition of privacy consumers’ rights to privacy is vital in consolidating knowledge of consumer rights and identifying paths for future research.
Read moreSMARTMED: A Blockchain Solution for Privacy-Centric Healthcare and Insurance Integration
Blockchain technology offers powerful advantages when it comes to protecting data privacy and ensuring data integrity, making it an ideal solution to many of the security challenges faced by today's centralized systems-such as single points of failure and restricted data sharing. As digital health services continue to evolve, there's a growing need for seamless, secure, and continuous medical support, and overcoming the issue of isolated data has become more important than ever. Blockchain's key features-like its distributed ledger, strong encryption, immutable audit trail, and traceable data history-make it exceptionally wellsuited for solving data sharing challenges across healthcare organizations. In line with these capabilities and the unique demands of the healthcare sector, we propose a blockchainbased, multi-role healthcare data sharing system. This system is designed with security, tamper resistance, and traceability at its core. It also incorporates a smart contract mechanism to streamline and secure the insurance claim process, and includes two tailored data-sharing protocolsone for medical institutions and one for individualsensuring users have a simple, transparent, and efficient way to manage their personal health data while maintaining full control and trust in the system.
Read moreA Database Framework for Expressing and Enforcing Personal Privacy Preferences
Nowadays, privacy protection in web applications and services is done, most times, through privacy policies that are presented to users and give them only the options of agreeing or disagreeing. So, it is not possible for users to express, in a detailed manner, their privacy preferences. Having this flexibility would allow users to make more thoughtful choices about the use of their personal information online. This paper proposes a database framework that allows users express their privacy preferences in detail, so that web applications can protect data privacy and manage personal information more securely. We tested the framework and results showed that it can be a simple and effective alternative, avoiding using complex and expensive solutions.
Read moreReport: Privacy in Latin America During COVID-19 Times and Reasonable Digital Security
The global COVID-19 pandemic has tested the business and human capacity in Latin America to adapt to the digital world. While the world has experienced similar developments in privacy and data protection, the Latin American region is rarely analysed as a whole in terms of privacy and data protection. Besides GDPR, Latin America has older and even more robust data protection regimes than the US and is now quickly shifting to cybersecurity. In this article, we provide a quick overview of the data protection regimes in Latin America to summarize representative actions that countries in Latin America took for the protection of privacy and personal data during the pandemic period. We examine the factors and circumstances that have affected the region’s privacy through this period, including unsuitable data processing, the design of new tracking technologies, teleworking, the risks of relying on digital platforms, and alleged new cybersecurity regulation. With that in mind, we are making a value proposition towards identifying common factors for a reasonable security in order to help companies preparing to confront risks. This digital trend will undoubtedly resonate on the complexity of data transfers inbound and outbound the region, and the consequences of security breaches for those improperly processing data in the region. Mexico, Latin America, COVID-19, Digital Transformation, Cybersecurity, Personal Data, Data Processing, Incident Response, Teleworking, Reasonable Security, Privacy
Read moreTÜRK HUKUKUNDA KİŞİSEL SAĞLIK VERİLERİ VE İDARENİN KİŞİSEL SAĞLIK VERİLERİNİ KORUMA YÜKÜMLÜLÜĞÜ
Hassas kişisel veriler kategorisi içinde yer alan kişisel sağlık verileri, “kimliği belirli ya da belirlenebilir gerçek kişiye ilişkin her türlü sağlık bilgisi” olarak tanımlanabilir. Bu tanımın kapsamına kişinin “geçmişi, şimdiki anı ve geleceğine ilişkin fiziksel ve ruhsal sağlığı hakkında her türlü bilgi ile kişiye sunulan sağlık hizmetiyle ilgili bilgiler” dahildir. Bu çalışmada öncelikle, ulusal ve Türkiye’nin taraf olduğu uluslararası düzenlemeler ışığında, kişisel sağlık verileri kavramı ve bu verilerin işlenmesine ilişkin kurallar ve usuller ele alınacaktır. Türk hukukunda kişisel sağlık verilerinin işlenebileceği hallere ayrıca değinilecektir. Bu bağlamda, veri koruma hukukunda, hassas verilerin işlenmesinin diğer verilere kıyasla daha katı bir denetime tabi tutulması anlamına gelen hassaslık ilkesi ve veri toplama ve işlemenin bağlı olduğu amaç/amaçları gerçekleştirmek için zorunlu olan miktarla sınırlı olacak şekilde veri toplanması gerekliliğini ifade eden minimumluk ilkesine uygunluk değerlendirmesi yapılacaktır. Ardından, idarenin kişisel sağlık verilerinin korunmasına ilişkin yükümlülükleri açıklanacaktır. İdarenin kişisel sağlık verilerine ilişkin aydınlatma, veri güvenliğini sağlama, düzenleme ve denetleme yapma yükümlülüklerinin anlamı ve kapsamı ortaya konulacaktır. Avrupa İnsan Hakları Mahkemesi ve Danıştay kararları ışığında, idarenin söz konusu yükümlülüklerini yerine getirmemesi durumunun nasıl ortaya çıkabileceği ve ortaya çıkış şekillerine göre sorumluluğunun türünün ve kapsamının ne olacağı ihtimallere göre değerlendirilecektir.
Read morePrivacy Protection, Big Data Gathering and Public Health Issues: COVID-19 Tracking App Use in Italy
Privacy Protection, Big Data Gathering and Public Health Issues: COVID-19 Tracking App Use in Italy
New ethical dilemmas arising from the growth of personal health data
The aim of this paper is to encourage critical investigations of information governance related to personal health data. Presently, most societies have regulations that balance the protection of privacy of personal health data with the need to disclose personal data for public good. This balance seems to be challenged by recent technological and policy developments, and this paper seeks to illuminate some of these developments and the associated dilemmas that emerge. Firstly, the challenges of handling novel data types from new sources (such as smartphones, devices and sensors) is still poorly understood and regulated. Secondly, not only are medical and societal gains predicted from giving access to personal health data, but also expectations of economic value creation circulate. Thirdly, the emerging data-intensive scientific practices depend on data, both as raw material and for building the scientific toolbox (models, methodologies and repositories). Being observant on these developments can facilitate interventions into the ongoing “ethics-in-the-making” of these crucial processes.
Read more