1
|
Han SK, Kwon HC, Yang JS, Kim S, Lee SJV. OASIS portable: User-friendly offline suite for secure survival analysis. Mol Cells 2024; 47:100011. [PMID: 38242235 PMCID: PMC10960101 DOI: 10.1016/j.mocell.2024.100011] [Citation(s) in RCA: 0] [Impact Index Per Article: 0] [Reference Citation Analysis] [Abstract] [Key Words] [MESH Headings] [Track Full Text] [Journal Information] [Subscribe] [Scholar Register] [Received: 01/04/2024] [Accepted: 01/12/2024] [Indexed: 01/21/2024] Open
Abstract
Online application for survival analysis (OASIS) and its update, OASIS 2, have been widely used for survival analysis in biological and medical sciences. Here, we provide a portable version of OASIS, an all-in-one offline suite, to facilitate secure survival analysis without uploading the data to online servers. OASIS portable provides a virtualized and isolated instance of the OASIS 2 webserver, operating on the users' personal computers, and enables user-friendly survival analysis without internet connection and security issues.
Collapse
Affiliation(s)
- Seong Kyu Han
- Department of Pediatrics, Division of Nephrology, Boston Children's Hospital, Boston & Harvard Medical School, Boston, MA, USA.
| | - Hyunwoo C Kwon
- Department of Life Sciences, KAIST, Daejeon, Republic of Korea
| | - Jae-Seong Yang
- Centre for Research in Agricultural Genomics (CRAG), CSIC-IRTA-UAB-UB, Campus UAB, Bellaterra, Barcelona, Spain
| | - Sanguk Kim
- Department of Life Sciences, POSTECH, Pohang, Republic of Korea.
| | - Seung-Jae V Lee
- Department of Life Sciences, KAIST, Daejeon, Republic of Korea.
| |
Collapse
|
2
|
Bonomi L, Lionts M, Fan L. Private Continuous Survival Analysis with Distributed Multi-Site Data. PROCEEDINGS : ... IEEE INTERNATIONAL CONFERENCE ON BIG DATA. IEEE INTERNATIONAL CONFERENCE ON BIG DATA 2023; 2023:5444-5453. [PMID: 38585488 PMCID: PMC10997374 DOI: 10.1109/bigdata59044.2023.10386571] [Citation(s) in RCA: 0] [Impact Index Per Article: 0] [Reference Citation Analysis] [Abstract] [Key Words] [Grants] [Track Full Text] [Subscribe] [Scholar Register] [Indexed: 04/09/2024]
Abstract
Effective disease surveillance systems require large-scale epidemiological data to improve health outcomes and quality of care for the general population. As data may be limited within a single site, multi-site data (e.g., from a number of local/regional health systems) need to be considered. Leveraging distributed data across multiple sites for epidemiological analysis poses significant challenges. Due to the sensitive nature of epidemiological data, it is imperative to design distributed solutions that provide strong privacy protections. Current privacy solutions often assume a central site, which is responsible for aggregating the distributed data and applying privacy protection before sharing the results (e.g., aggregation via secure primitives and differential privacy for sharing aggregate results). However, identifying such a central site may be difficult in practice and relying on a central site may introduce potential vulnerabilities (e.g., single point of failure). Furthermore, to support clinical interventions and inform policy decisions in a timely manner, epidemiological analysis need to reflect dynamic changes in the data. Yet, existing distributed privacy-protecting approaches were largely designed for static data (e.g., one-time data sharing) and cannot fulfill dynamic data requirements. In this work, we propose a privacy-protecting approach that supports the sharing of dynamic epidemiological analysis and provides strong privacy protection in a decentralized manner. We apply our solution in continuous survival analysis using the Kaplan-Meier estimation model while providing differential privacy protection. Our evaluations on a real dataset containing COVID-19 cases show that our method provides highly usable results.
Collapse
Affiliation(s)
- Luca Bonomi
- Dept. Biomedical Informatics, Vanderbilt University Medical Center, Nashville, TN
| | - Marilyn Lionts
- Dept. Computer Science, Vanderbilt University, Nashville, TN
| | - Liyue Fan
- College of Computing and Informatics, University of North Carolina, Charlotte, NC
| |
Collapse
|
3
|
Banerjee S, Bishop TRP. dsSurvival 2.0: privacy enhancing survival curves for survival models in the federated DataSHIELD analysis system. BMC Res Notes 2023; 16:98. [PMID: 37280717 PMCID: PMC10243006 DOI: 10.1186/s13104-023-06372-5] [Citation(s) in RCA: 0] [Impact Index Per Article: 0] [Reference Citation Analysis] [Abstract] [Key Words] [MESH Headings] [Grants] [Track Full Text] [Journal Information] [Subscribe] [Scholar Register] [Received: 07/18/2022] [Accepted: 05/25/2023] [Indexed: 06/08/2023] Open
Abstract
OBJECTIVE Survival models are used extensively in biomedical sciences, where they allow the investigation of the effect of exposures on health outcomes. It is desirable to use diverse data sets in survival analyses, because this offers increased statistical power and generalisability of results. However, there are often challenges with bringing data together in one location or following an analysis plan and sharing results. DataSHIELD is an analysis platform that helps users to overcome these ethical, governance and process difficulties. It allows users to analyse data remotely, using functions that are built to restrict access to the detailed data items (federated analysis). Previous works have provided survival modelling functionality in DataSHIELD (dsSurvival package), but there is a requirement to provide functions that offer privacy enhancing survival curves that retain useful information. RESULTS We introduce an enhanced version of the dsSurvival package which offers privacy enhancing survival curves for DataSHIELD. Different methods for enhancing privacy were evaluated for their effectiveness in enhancing privacy while maintaining utility. We demonstrated how our selected method could enhance privacy in different scenarios using real survival data. The details of how DataSHIELD can be used to generate survival curves can be found in the associated tutorial.
Collapse
Affiliation(s)
- Soumya Banerjee
- Department of Computer Science and Technology, University of Cambridge, Cambridge, UK.
| | - Tom R P Bishop
- Medical Research Council Epidemiology Unit, University of Cambridge School of Clinical Medicine, Cambridge, UK
| |
Collapse
|
4
|
Fan L, Bonomi L. Mitigating Membership Inference in Deep Survival Analyses with Differential Privacy. IEEE INTERNATIONAL CONFERENCE ON HEALTHCARE INFORMATICS. IEEE INTERNATIONAL CONFERENCE ON HEALTHCARE INFORMATICS 2023; 2023:81-90. [PMID: 38152589 PMCID: PMC10751041 DOI: 10.1109/ichi57859.2023.00022] [Citation(s) in RCA: 0] [Impact Index Per Article: 0] [Reference Citation Analysis] [Abstract] [Key Words] [Grants] [Track Full Text] [Subscribe] [Scholar Register] [Indexed: 12/29/2023]
Abstract
Deep neural networks have been increasingly integrated in healthcare applications to enable accurate predicative analyses. Sharing trained deep models not only facilitates knowledge integration in collaborative research efforts but also enables equitable access to computational intelligence. However, recent studies have shown that an adversary may leverage a shared model to learn the participation of a target individual in the training set. In this work, we investigate privacy-protecting model sharing for survival studies. Specifically, we pose three research questions. (1) Do deep survival models leak membership information? (2) How effective is differential privacy in defending against membership inference in deep survival analyses? (3) Are there other effects of differential privacy on deep survival analyses? Our study assesses the membership leakage in emerging deep survival models and develops differentially private training procedures to provide rigorous privacy protection. The experimental results show that deep survival models leak membership information and our approach effectively reduces membership inference risks. The results also show that differential privacy introduces a limited performance loss, and may improve the model robustness in the presence of noisy data, compared to non-private models.
Collapse
Affiliation(s)
- Liyue Fan
- Dept. of Computer Science, University of North Carolina at Charlotte, Charlotte, NC
| | - Luca Bonomi
- Dept. of Biomedical Informatics, Vanderbilt University Medical Center, Nashville, TN
| |
Collapse
|
5
|
Bonomi L, Fan L. Sharing Time-to-Event Data with Privacy Protection. PROCEEDINGS. IEEE INTERNATIONAL CONFERENCE ON HEALTHCARE INFORMATICS 2022; 2022:10.1109/ichi54592.2022.00014. [PMID: 36120417 PMCID: PMC9473343 DOI: 10.1109/ichi54592.2022.00014] [Citation(s) in RCA: 1] [Impact Index Per Article: 0.5] [Reference Citation Analysis] [Abstract] [Key Words] [Grants] [Track Full Text] [Subscribe] [Scholar Register] [Indexed: 06/15/2023]
Abstract
Sharing time-to-event data is beneficial for enabling collaborative research efforts (e.g., survival studies), facilitating the design of effective interventions, and advancing patient care (e.g., early diagnosis). Despite numerous privacy solutions for sharing time-to-event data, recent research studies have shown that external information may become available (e.g., self-disclosure of study participation on social media) to an adversary, posing new privacy concerns. In this work, we formulate a cohort inference attack for time-to-event data sharing, in which an informed adversary aims at inferring the membership of a target individual in a specific cohort. Our study investigates the privacy risks associated with time-to-event data and evaluates the empirical privacy protection offered by popular privacy-protecting solutions (e.g., binning, differential privacy). Furthermore, we propose a novel approach to privately release individual level time-to-event data with high utility, while providing indistinguishability guarantees for the input value. Our method TE-Sanitizer is shown to provide effective mitigation against the inference attacks and high usefulness in survival analysis. The results and discussion provide domain experts with insights on the privacy and the usefulness of the studied methods.
Collapse
Affiliation(s)
- Luca Bonomi
- Dept. of Biomedical Informatics, Vanderbilt University, Nashville, TN
| | - Liyue Fan
- Dept. of Computer Science, University of North Carolina at Charlotte, Charlotte, NC
| |
Collapse
|
6
|
Bonomi L, Wu Z, Fan L. Sharing personal ECG time-series data privately. J Am Med Inform Assoc 2022; 29:1152-1160. [PMID: 35380666 PMCID: PMC9196703 DOI: 10.1093/jamia/ocac047] [Citation(s) in RCA: 1] [Impact Index Per Article: 0.5] [Reference Citation Analysis] [Abstract] [Track Full Text] [Journal Information] [Subscribe] [Scholar Register] [Received: 09/09/2021] [Revised: 03/16/2022] [Accepted: 03/31/2022] [Indexed: 11/13/2022] Open
Abstract
Abstract
Objective
Emerging technologies (eg, wearable devices) have made it possible to collect data directly from individuals (eg, time-series), providing new insights on the health and well-being of individual patients. Broadening the access to these data would facilitate the integration with existing data sources (eg, clinical and genomic data) and advance medical research. Compared to traditional health data, these data are collected directly from individuals, are highly unique and provide fine-grained information, posing new privacy challenges. In this work, we study the applicability of a novel privacy model to enable individual-level time-series data sharing while maintaining the usability for data analytics.
Methods and materials
We propose a privacy-protecting method for sharing individual-level electrocardiography (ECG) time-series data, which leverages dimensional reduction technique and random sampling to achieve provable privacy protection. We show that our solution provides strong privacy protection against an informed adversarial model while enabling useful aggregate-level analysis.
Results
We conduct our evaluations on 2 real-world ECG datasets. Our empirical results show that the privacy risk is significantly reduced after sanitization while the data usability is retained for a variety of clinical tasks (eg, predictive modeling and clustering).
Discussion
Our study investigates the privacy risk in sharing individual-level ECG time-series data. We demonstrate that individual-level data can be highly unique, requiring new privacy solutions to protect data contributors.
Conclusion
The results suggest our proposed privacy-protection method provides strong privacy protections while preserving the usefulness of the data.
Collapse
Affiliation(s)
- Luca Bonomi
- Department of Biomedical Informatics, Vanderbilt University Medical Center, Nashville, Tennessee, USA
| | - Zeyun Wu
- Department of Electrical and Computer Engineering, University of California San Diego, La Jolla, California, USA
| | - Liyue Fan
- Department of Computer Science, University of North Carolina at Charlotte, Charlotte, North Carolina, USA
| |
Collapse
|
7
|
Eichler GS, Imbert G, Branson J, Balibey R, Laramie J. Democratizing data at Novartis through clinical trial data access. Drug Discov Today 2022; 27:1533-1537. [DOI: 10.1016/j.drudis.2022.02.019] [Citation(s) in RCA: 0] [Impact Index Per Article: 0] [Reference Citation Analysis] [Track Full Text] [Journal Information] [Subscribe] [Scholar Register] [Received: 09/16/2021] [Revised: 02/07/2022] [Accepted: 02/22/2022] [Indexed: 11/27/2022]
|
8
|
Truly privacy-preserving federated analytics for precision medicine with multiparty homomorphic encryption. Nat Commun 2021; 12:5910. [PMID: 34635645 PMCID: PMC8505638 DOI: 10.1038/s41467-021-25972-y] [Citation(s) in RCA: 44] [Impact Index Per Article: 14.7] [Reference Citation Analysis] [Abstract] [Track Full Text] [Download PDF] [Figures] [Journal Information] [Subscribe] [Scholar Register] [Received: 03/12/2021] [Accepted: 09/01/2021] [Indexed: 01/10/2023] Open
Abstract
Using real-world evidence in biomedical research, an indispensable complement to clinical trials, requires access to large quantities of patient data that are typically held separately by multiple healthcare institutions. We propose FAMHE, a novel federated analytics system that, based on multiparty homomorphic encryption (MHE), enables privacy-preserving analyses of distributed datasets by yielding highly accurate results without revealing any intermediate data. We demonstrate the applicability of FAMHE to essential biomedical analysis tasks, including Kaplan-Meier survival analysis in oncology and genome-wide association studies in medical genetics. Using our system, we accurately and efficiently reproduce two published centralized studies in a federated setting, enabling biomedical insights that are not possible from individual institutions alone. Our work represents a necessary key step towards overcoming the privacy hurdle in enabling multi-centric scientific collaborations. Existing approaches to sharing of distributed medical data either provide only limited protection of patients’ privacy or sacrifice the accuracy of results. Here, the authors propose a federated analytics system, based on multiparty homomorphic encryption (MHE), to overcome these issues.
Collapse
|
9
|
Ficek J, Wang W, Chen H, Dagne G, Daley E. Differential privacy in health research: A scoping review. J Am Med Inform Assoc 2021; 28:2269-2276. [PMID: 34333623 DOI: 10.1093/jamia/ocab135] [Citation(s) in RCA: 9] [Impact Index Per Article: 3.0] [Reference Citation Analysis] [Abstract] [Key Words] [Track Full Text] [Journal Information] [Subscribe] [Scholar Register] [Received: 01/29/2021] [Revised: 06/11/2021] [Accepted: 06/16/2021] [Indexed: 11/14/2022] Open
Abstract
OBJECTIVE Differential privacy is a relatively new method for data privacy that has seen growing use due its strong protections that rely on added noise. This study assesses the extent of its awareness, development, and usage in health research. MATERIALS AND METHODS A scoping review was conducted by searching for ["differential privacy" AND "health"] in major health science databases, with additional articles obtained via expert consultation. Relevant articles were classified according to subject area and focus. RESULTS A total of 54 articles met the inclusion criteria. Nine articles provided descriptive overviews, 31 focused on algorithm development, 9 presented novel data sharing systems, and 8 discussed appraisals of the privacy-utility tradeoff. The most common areas of health research where differential privacy has been discussed are genomics, neuroimaging studies, and health surveillance with personal devices. Algorithms were most commonly developed for the purposes of data release and predictive modeling. Studies on privacy-utility appraisals have considered economic cost-benefit analysis, low-utility situations, personal attitudes toward sharing health data, and mathematical interpretations of privacy risk. DISCUSSION Differential privacy remains at an early stage of development for applications in health research, and accounts of real-world implementations are scant. There are few algorithms for explanatory modeling and statistical inference, particularly with correlated data. Furthermore, diminished accuracy in small datasets is problematic. Some encouraging work has been done on decision making with regard to epsilon. The dissemination of future case studies can inform successful appraisals of privacy and utility. CONCLUSIONS More development, case studies, and evaluations are needed before differential privacy can see widespread use in health research.
Collapse
Affiliation(s)
- Joseph Ficek
- College of Public Health, University of South Florida, Tampa, Florida, USA
| | - Wei Wang
- Centre for Addiction and Mental Health, Toronto, Ontario, Canada
| | - Henian Chen
- College of Public Health, University of South Florida, Tampa, Florida, USA
| | - Getachew Dagne
- College of Public Health, University of South Florida, Tampa, Florida, USA
| | - Ellen Daley
- College of Public Health, University of South Florida, Tampa, Florida, USA
| |
Collapse
|