Periodic Reporting for period 1 - LEAP (Linksight ExplainAble Privacy enhancing technologies)
Periodo di rendicontazione: 2022-06-01 al 2023-02-28
The EU healthcare system is at risk of losing its globally admired affordability and accessibility, due to an aging population and increasing medical possibilities and their related cost. To ensure it, “value-based health care” is needed. This requires constant measurement and improvement of the real-world effectiveness of healthcares. However data is locked up within data silos at all parties and is difficult to bring together because of privacy, security and business confidentiality. As a result, it is problematic to design, implement and evaluate effective healthcare innovations that transcend the value chain. The current practice for evaluating the effectiveness of e.g. an eHealth app is to have a trusted third party (TTP) aggregate and pseudonymize the sensitive patient information from the various organizations, before sending it to a university to perform a set of statistical measures on it and draw conclusions. This process costs well over EUR 100k per study and takes over a year to complete. It is mainly manual labor.
Secure multiparty computation (MPC) technology offers a new data-sharing paradigm to answer these two questions. MPC is cryptographic technology (part of the Privacy Enhancing Technologies, in short PET) that allows decentralized analyses to be performed on encrypted (and therefore unreadable) datasets from different parties. Parties can do joint computations without revealing individual data points to each other, only the outcome can be decrypted. The sensitive data remains at the source, which greatly reduces the chance and impact of a data breach. This is possible through the use of specific, advanced forms of cryptography, such as (Full) Homomorphic Encryption ((F)HE), Secret Sharing (SS) and Private Set Intersection (PSI) protocols. The Linksight deep-tech innovation is a software platform that allows organizations to easily perform and automated secure and compliant privacy-preserving data analysis without revealing the underlying sensitive data to anyone, and without relenting control over it.
The goal of our project is to explain what PETs in general are and what value and positive impact they have for us as a society and businesses, and to developed the neccesary steps for customers to start working with these innovative products based on deep tech.
Secure multiparty computation (MPC) technology offers a new data-sharing paradigm to answer these two questions. MPC is cryptographic technology (part of the Privacy Enhancing Technologies, in short PET) that allows decentralized analyses to be performed on encrypted (and therefore unreadable) datasets from different parties. Parties can do joint computations without revealing individual data points to each other, only the outcome can be decrypted. The sensitive data remains at the source, which greatly reduces the chance and impact of a data breach. This is possible through the use of specific, advanced forms of cryptography, such as (Full) Homomorphic Encryption ((F)HE), Secret Sharing (SS) and Private Set Intersection (PSI) protocols. The Linksight deep-tech innovation is a software platform that allows organizations to easily perform and automated secure and compliant privacy-preserving data analysis without revealing the underlying sensitive data to anyone, and without relenting control over it.
The goal of our project is to explain what PETs in general are and what value and positive impact they have for us as a society and businesses, and to developed the neccesary steps for customers to start working with these innovative products based on deep tech.
To explain what Privacy Enhancing Technology can do, many different stakeholders have been interviewed. The stakeholders were:
- Business, for example healthcare specialists and policy makers
- IT, for example architect, implementation specialist, data steward, datascientist
- Compliance, for example legal counselors, Data Protection Officer and Security officer
For each group we learned what their need on information is and how to best fulfill them. For each group supporting materials have been developed.
Second major part was to develop a strategy for customers to start working with the LInksight platform. Together with business partners we have developed this path for oboarding on our platform.
- Business, for example healthcare specialists and policy makers
- IT, for example architect, implementation specialist, data steward, datascientist
- Compliance, for example legal counselors, Data Protection Officer and Security officer
For each group we learned what their need on information is and how to best fulfill them. For each group supporting materials have been developed.
Second major part was to develop a strategy for customers to start working with the LInksight platform. Together with business partners we have developed this path for oboarding on our platform.
Next steps in research are more development of encryption protocols for advanced statistical protocols, as well as integration with GAIA-X, (Health) Data Spaces and identity management.
For now, we were already mentioned in the United Nation PET guide as one of the example implementations. https://www.linkedin.com/posts/linksight-mpc_2023-un-pet-guide-activity-7029565541983911936-r6zp?utm_source=share&utm_medium=member_android
For now, we were already mentioned in the United Nation PET guide as one of the example implementations. https://www.linkedin.com/posts/linksight-mpc_2023-un-pet-guide-activity-7029565541983911936-r6zp?utm_source=share&utm_medium=member_android