DE102005045119A1 - Identification code generating method for bio-bank, involves providing biometric information, and associating or combining deoxyribonucleic acid information and biometric information of person into identification code according to algorithm - Google Patents

Abstract

The method involves providing digitalized deoxyribonucleic acid (DNA) information (Ddna) of a person from a DNA probe of the person, and providing digitalized biometric information (Dbm) of the person from biometric characteristics of the person. The DNA information and the biometric information of the person are associated or combined into an identification code (ID) according to a predetermined algorithm. Independent claims are also included for the following: (1) a coding device for generating an identification code (2) an access device for accessing a database such as bio-bank (3) a digital storage medium working together with a programmable computer system (4) a computer program product with program code for implementing an identification code generating method.

Description

The The present invention relates to a method and an apparatus for generating an individual-related code and a method for access to a codified database.

Even though in principle applicable to any database, the present Invention and the underlying problem in particular in terms of so-called biobanks, in which DNA information and medical findings are stored anonymously by individual individuals, explained.

In Such biobanks are the results of DNA analysis of individual Persons (individuals) stored in association with medical findings. Become the data of a sufficient number of individuals in a biobank collected, then it is possible using statistical methods, a Correlation between the DNA data and the medical findings perform. Such a correlation allows For example, known DNA data related to a person's specific risk factors to certain diseases (e.g., osteoporosis). In return or in return, that a patient has his personal DNA data to disposal can, can such personal Risk factors are retrieved when needed by the patient.

There Biobanks very personal and to contain sensitive data, the data must be accessible unauthorized persons and parties (for example, employers or insurance companies) to be protected. Simple protection can be achieved, for example, by that access to the database only on personal identification of the claimant (e.g., the individual or, if appropriate, his doctor) granted by means of an identity document. This is, however the decision over access to the database in the hands of a human person, what allows attacks using so-called "social engineering" and thus no very efficient protection against misuse by third parties offers.

In order to avoid or reduce such abuse by third parties, the data in such biobanks is usually stored anonymously. Such anonymization of DNA data and medical findings protects the privacy of the patient and is therefore required by privacy advocates. Anonymization of the data can, as in 3 is shown schematically, that the DNA data and medical data in a database 1 are decoupled from the names of the persons concerned. Instead, an (anonymous) identification code ID 'is assigned to each individual or patient. Only with knowledge of this secret identification code ID 'can patient data 2 from the database 1 be retrieved. However, in this approach to accessing the database, knowledge of the ID code ID 'is sufficient so that it does not provide much protection against abuse. Furthermore, the patient must remember this identification code ID 'or store it on a suitable data medium, which is relatively complicated.

One Example of a possible Progression would therefore, provide the secret identification code by scrambling to determine the patient's own DNA data. This is the Patient first a cell sample (hair, saliva drops or the like) taken from which at least a part of the DNA of the patient is determined. The detected DNA data can then scrambled (scrambled) by appropriate mathematical methods to generate such a unique identification code ID '.

this However, the problem inherent in the approach is that of accessing the protected Database already alone with knowledge of the DNA of the protected Individual possible is.

If So it succeeds an unauthorized third party, a DNA sample (ie e.g. a hair or a dandruff), then this can Unauthorized third parties without authorization on the database and thus on the to be protected Access data.

A The object of the present invention is therefore the generation allow individualized codes to be used against attacks are safer from third parties.

According to the invention this Task by a method having the features of claim 1 and / or solved by a device having the features of claim 7.

• (a) Bereitstellen von digitalisierten DNA-Informationen eines Individuums aus einer DNA-Probe des Individuums;
• (b) Bereitstellen von digitalisierten biometrischen Informationen des Individuums aus mindestens einem biometrischen Merkmal des Individuums;
• (c) Verknüpfen der ermittelten digitalisierten DNA-Informationen und biometrischen Informationen des Individuums gemäß eines vorbestimmten Algorithmus in einen individuumsbezogenen Kodes.

Accordingly, a coding method for generating an individual-related code is provided, comprising the following steps:

• (a) providing digitized DNA information of an individual from a DNA sample of the individual;
• (b) providing digitized biometric information of the individual from at least one biometric characteristic of the individual;
• (C) linking the determined digitized DNA information and biometric information of the individual according to a vorbestimm algorithm into an individual-related code.

• – eine erste Ermittlungseinrichtung, die digitalisierte DNA-Informationen eines Individuums aus einer DNA-Probe des Individuums ermittelt;
• – eine zweite Ermittlungseinrichtung, die digitalisierte biometrische Informationen des Individuums aus mindestens einem biometrischen Merkmal des Individuums ermittelt; und
• – eine Verknüpfungseinrichtung oder Kombinationseinrichtung, die die ermittelten digitalisierten DNA-Informationen mit den biometrischen Informationen des Individuums gemäß ei nem vorbestimmten Algorithmus in den individuumsbezogenen Kode verknüpft.

A corresponding coding device for generating an individual-related code contains:

• A first determination device which determines digitized DNA information of an individual from a DNA sample of the individual;
• A second determination device that determines digitized biometric information of the individual from at least one biometric characteristic of the individual; and
• - A linkage or combination device that combines the determined digitized DNA information with the biometric information of the individual according to egg nem predetermined algorithm in the individual-related code.

The The idea underlying the present invention is the DNA information an individual with one or more other biometric Characteristics of the individual to combine or combine and by means of this link or Combination to generate an individual-related code.

One Advantage of the subject matter of the present invention is that the individual is not personal must be identified by a third party. Another The advantage is that the individual has a personal, Do not remember secret identification code and do not remember it must save. Furthermore, could Data not unauthorized using an unnoticed collected DNA sample can be retrieved. Furthermore The identification code can be displayed anytime, anywhere at presence of the individual.

advantageous Embodiments and developments of the invention are the subject the dependent claims and the description with reference to the drawing.

In a preferred embodiment includes linking or combine the DNA information with the biometric Information applying a hash function to the DNA information and includes the biometric information. The use of a Hash function allows the unique mapping of an extensive one Amount of data to a much smaller target amount, where from the Target data (ie the identification code) not to the original, to be protected Data (DNA information) can be closed.

In a further preferred embodiment includes linking Encrypting the DNA information with the biometric information DNA information using biometric information as an encryption key. Also the use of such encryption allows the unique Mapping a large amount of data to a much smaller one Target quantity, where the target data is not the original one Data can be closed.

When biometric information is suitable for example the information a fingerprint, a face geometry, a hand geometry, an iris pattern, an ocular fundus pattern, a vein structure, and / or a voice pattern of the individual's voice.

The DNA information can be stored in a database ( 20 ), especially in a biobank. It is particularly advantageous if, for example, DNA information and medical findings of a plurality of individuals are stored in the database in association with individual-related codes of the respective individuals. Association here means that a clear assignment of the individual-related codes with the data associated with them is possible. With such a method it is possible, using a unique DNA result in combination with one or more other biometric features of the patient, to retrieve or input data associated with the DNA result (eg medical findings).

• – mit einer ersten Ermittlungseinrichtung, die digitalisierte DNA-Informationen eines Individuums aus einer DNA-Probe des Individuums ermittelt;
• – mit einer zweiten Ermittlungseinrichtung, die digitalisierte biometrische Informationen des Individuums aus mindestens einem biometrischen Merkmal des Individuums ermittelt; und
• – mit einer Verknüpfungseinrichtung oder Kombinationseinrichtung, die die ermittelten digitalisierten DNA-Informationen mit den biometrischen Informationen des Individuums gemäß einem vorbestimmten Algorithmus in den individuumsbezogenen Kode verknüpft beziehungsweise kombiniert.

In addition, a coding device for generating an individual-related code is provided:

• - With a first detection device that detects digitized DNA information of an individual from a DNA sample of the individual;
• - with a second determining means, the digitized biometric information of the individual from at least one biometric feature of the individual determined; and
• - With a linking device or combination device that combines the combined digitized DNA information with the biometric information of the individual according to a predetermined algorithm in the individual-related code or combined.

In In an advantageous embodiment, the algorithm includes applying a hash function on the DNA information and the biometric Contains information.

In In a further advantageous embodiment, the algorithm contains the encryption containing DNA information with the biometric information as an encryption key.

• – eine Übertragungseinrichtung, die den erzeugten individuumsbezogenen Kode an die Datenbank sendet und von der Datenbank die in Assoziation mit dem individuumsbezogenen Kode gespeicherte Datenbankdaten empfängt; und
• – eine Ausgabeeinrichtung, die die empfangenen Datenbankdaten ausgibt.

Also provided is an access device for accessing a code-protected database, in particular a biobank, with the above-described device for generating an individual-related code, which further comprises:

• - a transmission device that sends the generated individual-related code to the database and receives from the database the database data stored in association with the individual-related code; and
• An output device that outputs the received database data.

Further a digital storage medium is provided, with electronically readable Control signals that way with a programmable computer system can work together that the above-described method is carried out. Examples of a suitable digital storage media are floppy disks, CDs (especially CD-ROMs), DVDs ("digital versatile disks ") and MOs ( "Magneto-optical disks ").

Besides that is a computer program product provided with stored on a machine-readable carrier Program code for execution of the above-described method when the program product is up a computer expires.

The Invention will be described below with reference to the schematic figures The drawings specified embodiments explained in more detail. It shows attended:

1 an identification code generating apparatus according to an embodiment of the present invention;

2 a schematic representation of a method for generating an identification code according to the embodiment of the present invention; and

3 a schematic representation of an exemplary method for access to a biobank to explain the general problem.

In all figures of the drawing are the same or functionally identical elements - if nothing else is stated - with the same reference numerals have been provided.

1 shows a device 10 for generating an identification code (individual-related code) ID. The device 10 for generating a unique identification code ID here comprises a biometric sensor 11 , a DNA sampler 12 , a store 13 , a linking device 14 , a display 15 and a program-controlled device (not shown) (eg, a CPU) and input means (not shown) such as a keyboard and a computer mouse (not shown).

The biometric sensor 11 is designed as a sensor for the determination of biometric features of an individual or patient, for example as a fingerprint reader, iris scanner, retina scanner, voice analyzer, apparatus for analyzing the hand geometry or the like. The biometric sensor captures an individual's biometric features (fingerprint, iris pattern, or the like), performs analog-to-digital conversion of the biometric features thus obtained, and stores the digitized biometric features in memory 13 from.

The DNA sampler 12 is a device for detecting or inputting DNA information DNA of the individual or patient. This can be done in the usual way by introducing a DNA sample (eg hair or saliva sample) and subsequent PCR analysis (PCR = polymerase chain reaction). The sampled DNA data are then digitized and also stored in memory 13 stored. It is also sufficient if only part of the DNA of the individual is analyzed. However, this part should be sufficiently large to generate a unique identification code ID. Here, "uniquely" means that it can be ruled out with sufficient probability that two or more individuals will be assigned the same identification code.

The linking device 14 reads the digitized biometric features and DNA data from memory 13 and link them together.

The generated identification code ID can be used to access a database 20 be used. In the present embodiment, the database is 20 a biobank in which DNA information and medical findings are stored anonymously by individual individuals. Database 20 is via an interface network NET with the device 10 connected. The NET network may be the Internet (World Wide Web). However, it can also be designed as a local area network (LAN) or other network.

For access (where access is understood not only to read but also to store information) to the database 20 the unique identification code ID is necessary, which ensures that third parties can not access the data stored in the database without authorization.

2 is a schematic representation of an exemplary method according to the present invention Embodiment for generating an identification code using the device 10 , This can be done, for example, by a patient who has transferred his DNA and other medical data to a biobank. For this purpose, the patient can, for example, visit a hospital or a doctor's office. But it is also possible to perform the procedure at home. It should be noted that suitable biometric sensors (eg fingerprint reader) are already commercially available. It is foreseeable that DNA samplers suitable for private use will already be available in the foreseeable future. As an alternative, it is also possible to determine the DNA data in a central facility (hospital, university hospital, etc.) and store it on a suitable data carrier.

For the method according to the invention in detail: In step S1, the digitized DNA data Ddna from the DNA sampler 12 determined. In contrast, the digitized biometric feature data Dbm in step S2 from the biometric sensor 11 determined.

The determination of a unique identification code takes place in step S3 by linking or combining the DNA data Ddna and the biometric feature data Dbm with the linking device 14 ,

In the present embodiment this is done using a hash function. Hash function here means an irreversible one Function (an algorithm) that has a large amount of data (here: biometric data and DNA data) clearly on a much smaller target quantity (here: identification code ID). examples for Hash functions are the Message Digest MD4 or the family of "Secure Hash Algrithum's "SHA. Details about these hash functions can be found in Bruce, for example Schneier "Applied Cryptography ", John Wiley & Sons, 1996th

Of the Identification code ID should be big enough so-called Collisions, so calculating the same identification code ID for two different individuals to avoid. In general, should an identification code ID of, for example, 128 bits in length, which is approx. 3.4x1038 combinations, sufficient.

The identification code ID calculated according to this embodiment can finally be used on the biobank 20 access, and read out the stored therein, associated with the identification code ID data (eg medical findings) and / or store new data in association with the identification code ID. For this purpose, in step S4 the identification code ID of an in 1 not shown interface to the biobank 20 where the identification code ID can be used to read out the associated data DD (for example, patient risk factor data for certain diseases). These data DD are in turn received via the interface in step S5. In a step S6, the data DD is displayed 15 displayed and / or printed on a printer.

With the method of this embodiment is it thus possible using a unique DNA result in combination with one or more other biometric features of the patient, Data associated with the DNA result (e.g., medical grade) Findings), retrieve or enter.

In another embodiment (not shown) is used instead of mathematical hash function a cryptographic encryption function used, consisting of the digitized DNA data Ddna and biometric Feature data Dbm generates an identification code. These can be the DNA data Ddna as (to be encrypted) Plain text input and the biometric feature data Dbm as a key input (ie as an encryption key) be used.

As even when using a hash function, the use of a cryptographic encryption function the generation of a unique identification code ID associated with the is associated with data stored in a database. Furthermore, the encryption function a secure access to such a database. A suitable encryption function (Encryption algorithm) is for example AES (Advanced Encryption Standard). Before the encryption step may be provided a further step, the biometric Feature data Dbm transformed to an appropriate length.

The security of the system is ensured by the fact that the determination of the biometric feature data Dbm and thus the access to the database 20 stored data is possible only in the presence of the associated with the unique identification code ID individual.

One Another advantage of the embodiments described above is that that the patient does not see the code, so no complicated Must remember character or number sequence.

Even though the present invention above based on a preferred embodiment It is not limited to this, but in many ways and modifiable.

So It is not absolutely necessary to find a DNA sampler to provide DNA data on site. Instead, it is also possible to use the device to configure to generate a unique identification code that DNA data that previously determined or sampled and stored on a suitable medium were directly from this data carrier be read into the memory. That way, today yet comparatively lengthy process of DNA analysis can be shortened.

Further was in the above embodiments the use of the identification code for secure access described on a biobank. However, the invention is equally applicable to secure access to other databases, e.g. databases in banks or other financial institutions where very personal, sensitive and thus to be protected Data (account number, account balance, etc.) are stored by customers.

Claims (13)

Coding method for generating an individual-related Codes (ID) with the steps: (a) Provide digitized DNA information (Ddna) of an individual from a DNA sample of individual; (b) providing digitized biometric Information (Dbm) of the individual from at least one biometric Characteristic of the individual; (c) linking or combining the determined ones digitized DNA information (Ddna) and biometric information (Dbm) of the individual according to one predetermined algorithm into an individual-related code (ID). Coding method according to claim 1, characterized that linking the DNA information (Ddna) with the biometric information (Dbm) applying a hash function to the DNA information (Ddna) and the biometric information (Dbm). Coding method according to at least one of the preceding Claims, characterized in that linking the DNA information (Ddna) with the biometric information (dbm) encrypting the DNA information (Ddna) using the biometric information (Dbm) as encryption includes. Coding method according to at least one of the preceding Claims, characterized in that the biometric information (Dbm) Information of a fingerprint, a face geometry, a Hand geometry, an iris pattern, an ocular fundus, a vein structure and / or a voice pattern of the individual's voice include. Coding method according to at least one of the preceding claims, characterized in that the DNA information is stored in a database ( 20 ), especially in a biobank. Coding method according to claim 5, characterized in that in the database ( 20 ) DNA information (Ddna) and medical findings of a plurality of individuals are stored in association with individual-related codes of the respective individuals. Coding device for generating an individual-related code: - with a first determination device ( 12 ) which detects digitized DNA information (Ddna) of an individual from a DNA sample of the individual; With a second determination device ( 11 ) which determines digitized biometric information (Dbm) of the individual from at least one biometric characteristic of the individual; and - with a linking device or combination device ( 14 ) combining the obtained digitized DNA information (Ddna) with the biometric information (Dbm) of the individual according to a predetermined algorithm into the individual-related code (ID). Coding device according to claim 7, characterized in that the algorithm applying a hash function to the DNA information (ddna) and the biometric information (Dbm). Coding device according to claim 7, characterized in that that the algorithm is encryption the DNA information (Ddna) containing the biometric information (Dbm) as an encryption key. Coding device according to at least one of claims 7 to 9, characterized in that the biometric information (Dbm) information of a fingerprint, a face geometry, a hand geometry, an iris pattern, an eye background pattern, a vein structure and / or a voice pattern of the individual's voice include. An access device for accessing a coded database, in particular a biobank, with a coding device according to at least one of claims 7 to 10, which further comprises: a transmission device which sends the generated individual-related code (ID) to the database ( 20 ) and receives from the database the database data (DD) stored in association with the individualized code (ID); and an output device that outputs the received database data (DD). Digital storage medium with electronically readable Control signals that way with a programmable computer system can work together a method according to at least one of claims 1 to 6 executed becomes. Computer program product with on a machine-readable carrier stored program codes for carrying out the proceedings after at least one of the claims 1 to 6, when the program product on a program-controlled device expires.