JP2007179500A - System and program for generation of anonymous identification information - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a system and a program for generation of anonymous identification information, capable of providing necessary information to an analyzer while attaining protection of his/her privacy. <P>SOLUTION: In this system for generation of anonymous identification information 100, a hospital information processing terminal 101 transmits subject identification information specific to each subject that is an object of genetic information analysis and subject relation information showing a relation each between subjects to an anonymizing terminal 102. The anonymizing terminal 102 encrypts, upon receipt of the information, the subject identification information to generate encrypted identification information, and generates encrypted information based on the subject relation information. The anonymizing terminal 102 provides the encrypted information to an analyzer information processing terminal 103 for analysis while protecting the privacy of information related to the subjects. <P>COPYRIGHT: (C)2007,JPO&INPIT

Description

  The present invention relates to a system for generating anonymized identification information suitable for genetic information analysis, in particular, genetic information analysis accompanied by analysis of family information.

  In recent years, clinical research such as gene analysis has been promoted to realize tailor-made treatment. Moreover, in order to make these genetic analyzes more effective, it is indispensable for an analyst to understand subject information (family information) and the like accumulated by medical institutions.

  However, subject information such as family information is personal privacy information, and privacy is infringed when the relationship between the subject information and the specimen identification information (hereinafter, specimen ID) is exposed to an analyst.

  As a technique for preventing privacy infringement, Patent Document 1 discloses an anonymization system that performs specimen acquisition, subject information collection, and the like. This anonymization system is installed in a hospital or the like, transfers identification information (hereinafter referred to as ID) from sample ID (non-anonymous) to anonymized identification information (hereinafter referred to as anonymized ID), and stores the transfer of the ID as a correspondence table. To do. Then, privacy protection is realized by creating a correspondence table in which personal identification information (name, address, etc.) is deleted from medical care information and associated with the anonymization ID and stored by the hospital.

Further, in Patent Document 2, an anonymization terminal is installed as a neutral institution physically and logically separated between a hospital and an analyst in order to deal with an illegal act caused by a collusion between a hospital and an analyst. Thus, a technique for realizing privacy protection is disclosed.
JP 2002-312361 A JP 2004-287847 A

  However, in the methods disclosed in Patent Literature 1 and Patent Literature 2, anonymization is performed when an analysis is requested from a hospital to an analyst, or when an analyst requests an analysis from another research institution (analyst). It is necessary to shake the ID. For this reason, ID increases and management becomes complicated.

  Furthermore, human error is likely to occur due to the lack of understanding of the relationship between “sample ID (non-anonymous) and anonymized ID” and “anonymized ID and medical information”. For this reason, there is a need for a mechanism capable of confirming the relevance between the anonymized ID and the medical information as needed (by a player who may confirm the relevance). Also, in order to hide the relationship between the ID and the medical information, the anonymizing system and the anonymized terminal always manage the medical information without passing it to the analyst. When obtaining useful information for each, it is necessary to access the anonymization system and the anonymization terminal each time to obtain information, while the anonymization system and the anonymization terminal obtain information based on the anonymization ID. There is a need to search and provide, and the load on the analyst and the anonymization system / anonymization terminal is large.

  Therefore, there is a need for a mechanism that can provide necessary information to the analyst while protecting the privacy of medical information.

  The present invention has been made in view of the above circumstances, and an object thereof is to provide a mechanism capable of providing necessary information to an analyst while realizing privacy protection.

  In order to achieve the above object, the anonymized identification information generation system for genetic information analysis according to the first aspect of the present invention includes subject identification information unique to each subject to be analyzed for genetic information, and between each subject. Subject relationship information indicating a relationship; information acquisition means for acquiring; identification information encryption means for generating encrypted identification information by encrypting the subject identification information acquired by the information acquisition means; and the identification information encryption Encrypted information generating means for generating encrypted information based on the encrypted identification information generated by the means and the subject relationship information acquired by the information acquiring means, and the encrypted information generating means generated by the encrypted information generating means And encryption information transmitting means for transmitting the encryption information to another apparatus for analysis.

  The anonymized identification information generation system further includes an information processing device for decrypting and analyzing the encrypted information, and the information processing device externally transmits the encrypted information generated by the encrypted information generating means. Based on the encrypted information reading means read from the storage medium, the encrypted information decrypting means for decrypting the encrypted information read by the encrypted information reading means, and the information decrypted by the encrypted information decrypting means, the subject And regenerating means for regenerating the relationship information.

  The anonymized identification information generation system further includes an information processing device for decrypting and analyzing the encrypted information, and the information processing device receives the encrypted information transmitted by the encrypted information transmitting unit. Based on the information obtained by the encrypted information obtaining means, the encrypted information decrypting means for decrypting the encrypted information obtained by the encrypted information obtaining means, and the information decrypted by the encrypted information decrypting means, the subject relationship information Regenerating means for regenerating.

  Furthermore, in the anonymized identification information generation system, the subject relation information may include genetic information necessary for genetic analysis of the subject.

  Moreover, the said anonymization identification information generation system WHEREIN: You may make it define the relationship between the said test subjects in the said test subject relationship information based on the said test subject identification information.

  Further, in the anonymized identification information generation system, the encrypted information generation unit encrypts the subject relationship information acquired by the information acquisition unit based on the encrypted identification information generated by the identification information encryption unit. And the encryption identification information is added to generate the encryption information.

In order to achieve the above object, a program according to the second aspect of the present invention provides:
In the computer of the anonymized identification information generation system for genetic information analysis,
Information acquisition procedure for acquiring subject identification information unique to each subject for which genetic information is analyzed and subject relationship information indicating a relationship between subjects,
An identification information encryption procedure for generating encrypted identification information by encrypting the subject identification information acquired in the information acquisition procedure;
An encryption information generation procedure for generating encryption information based on the encryption identification information generated by the identification information encryption procedure and the subject relationship information acquired by the information acquisition means;
An encryption information transmission procedure for transmitting the encryption information generated in the encryption information generation procedure to another device for analysis;
Is executed.

  According to the system of the present invention, necessary information can be provided to an analyst while realizing privacy protection.

  An anonymized identification information generation system according to an embodiment of the present invention will be described with reference to the drawings.

  As shown in FIG. 1, the anonymized identification information generation system 100 according to the present embodiment includes a hospital information processing terminal 101, an anonymization terminal 102, and an analyzer information processing terminal 103 that are connected to each other via a network 104. And an external storage medium 105.

  The hospital information processing terminal 101 is installed in a hospital or the like, and stores and manages personal information such as a subject's ID (identification information) and subject's family information.

  The analyst information processing terminal 103 is used by an analyst who analyzes family information, and is used for analyzing family information.

  The anonymization terminal 102 is functionally located between the hospital and the analyst, and anonymizes the sample information and family information provided from the hospital information processing terminal 101 and provides the information to the information processing terminal 103 for the analyst.

  As shown in FIG. 2A, the hospital information processing terminal 101 includes a control unit 201, a RAM 202, a ROM 203, a database 204, a communication unit 205, and a bus 206.

  The control unit 201 includes a CPU (Central Processing Unit) and the like, uses the RAM 202 as a work area, executes an operation program stored in the ROM 203, and manages genetic information of each subject stored in the database 204 . Further, the genetic information that needs to be analyzed is transmitted to the anonymization terminal 102.

The RAM 202 functions as a work area for the control unit 201.
The ROM 203 stores an operation program for the control unit 201. As shown in FIG. 2B, the operation program stored in the ROM 203 includes a database creation program 210 and a transmission program 211.

  The database creation program 210 is a program for updating and maintaining the database 204. The transmission program 211 is a program for transmitting the ID (specimen ID) of the subject to be analyzed and its personal information to the anonymization terminal.

  The database 204 stores the personal information for each subject. Each subject is given identification information (ID). The personal information includes information such as family information, information such as address / name / age / gender, medical information (medical history, medication history, treatment history).

The communication unit 205 communicates with the anonymization terminal 102 via the network 104.
The bus 206 transmits data transmission / reception between the units.

  As shown in FIG. 3A, the anonymization terminal 102 includes a control unit 301, a RAM 302, a ROM 303, a storage unit 304, a communication unit 305, a bus 306, and an external memory interface 307. .

  The control unit 301 includes a CPU (Central Processing Unit) and the like, uses the RAM 302 as a work area, executes an operation program stored in the ROM 303, and provides the sample ID and family line provided from the hospital information processing terminal 101 The process of anonymizing the information and providing it to the analyzer terminal 103 is performed.

  The RAM 302 functions as a work area for the control unit 301.

  The ROM 303 stores an operation program for the control unit 301. As illustrated in FIG. 3B, the operation program stored in the ROM 303 includes an anonymization ID generation program 310 and a transfer program 311. The anonymization ID generation program 310 is a program for anonymizing the specimen ID and family information provided from the hospital information processing terminal 101. This anonymization ID is information that can reproduce family tree information using this anonymization ID, but cannot derive a sample ID directly. However, a person who knows the anonymization ID generation rule (anonymization terminal 102) can specify the sample ID from the anonymization ID. The transfer program 311 is a program for providing the generated anonymization ID to 104.

The storage unit 304 accumulates the generated anonymization ID and the information that is the basis thereof.
The communication unit 305 communicates with the hospital information processing terminal 101 and the analyzer information processing terminal 103 via 104.
The bus 306 transmits data between these units.

  The external memory interface 307 is an interface for recording the sample ID and family information anonymized by the control unit 301 in an external storage medium 105 such as a card-type memory serving as a medium provided to the information processing terminal 103 for the analyzer. It is.

  As shown in FIG. 4A, the analyzer information processing terminal 103 includes a control unit 401, a RAM 402, a ROM 403, a storage unit 404, a communication unit 405, a display unit 406, an input unit 407, A bus 408 and an external memory interface 409 are included.

  The control unit 401 includes a CPU (Central Processing Unit) and the like, uses the RAM 402 as a work area, executes an operation program stored in the ROM 403, and uses the anonymization ID provided from the anonymization terminal 102. The family tree is reproduced and displayed on the display unit 406. In addition, the analysis information input from the input unit 407 is edited.

  The RAM 402 functions as a work area for the control unit 401.

  The ROM 403 stores an operation program for the control unit 401. As shown in FIG. 5B, the operation program stored in the ROM 403 includes a key generation program 410, a data decryption program 411, a display program 412, and an editing program 413. The key generation program 410 generates a key used when generating a family tree from the anonymization ID. The technical meaning and generation procedure of the key will be described later.

The data decryption program 411 generates family tree information from the anonymization ID using the generated key.
The display program 412 displays various information including the decoded family tree information on the display unit 406, for example.

The input unit 407 inputs information obtained by analyzing the family tree.
The bus 408 transmits data between the units.

  The external memory interface 409 is an interface for reading the anonymized sample ID and family information from the external storage medium 105 such as a card memory provided from the anonymization terminal 102.

  Next, a method (system operation) of analyzing family tree information using the system configured as described above will be described.

  First, an overview of the genetic information analysis procedure in the present embodiment will be described with reference to FIGS.

  First, in a hospital, an ID (specimen ID) is assigned to a certain test subject (subject). This sample ID is an ID unique to the subject.

  Further, the subject information of the subject is registered in the database 204 in association with the subject ID. The subject information is the subject's privacy information, such as family tree information, address information, name information, age information, gender information, medical information (such as medical history information, medical history information, medication history information), etc. It is various information that is effective for identifying the subject and treating the subject. Of these, the family tree information is data that can define a parent-child relationship and generate a family tree.

  When genetic information needs to be analyzed for a subject, a doctor or the like operates the hospital information processing terminal 101 to extract only information necessary for analysis from the subject information of the subject. For example, family information, age, sex, a part of medical information, etc. are extracted excluding information that can identify an individual. Hereinafter, the extracted subject information is referred to as extracted subject information.

  Subsequently, in order to request analysis of genetic information, the specimen ID and the extracted subject information are associated with each other and sent from the hospital information processing terminal 101 to the anonymization terminal 102 (step S1).

  For example, if it is necessary to analyze genetic information about A (parent) and C (child) in a parent-child relationship, the sample IDs of A (parent) and C (child), A and C The family tree information indicating the parent-child relationship, the information such as the sex / age / history of Mr. A, and the information such as the sex / age / history of Mr. C are transmitted in association with each other.

  The anonymization terminal 102 receives the sent information and stores it in the storage unit 304. Subsequently, the anonymization terminal 102 generates related information, which is information indicating the relevance with the sample ID, from the provided sample ID, and stores it in the storage unit 304 (step S2). Furthermore, the anonymization terminal 102 generates an arbitrary anonymization ID ′ including related information (step S3). The relevance between the sample ID and the anonymized ID 'is known only by a person who has a correspondence table between the sample ID and the related information embedded in the anonymized ID'.

  Subsequently, the family tree information is processed to generate family tree information (step S4). Here, the family tree information is information that enables the family tree information to be generated from only the anonymization ID described later by processing the family tree information.

  Subsequently, using the anonymized ID 'as an encryption key, the extracted subject information including family information is encrypted to generate encrypted additional information (step S5).

  Subsequently, the anonymized ID 'and the encrypted additional information are connected to generate an anonymized ID (step S6). The anonymization ID is information that can reproduce the family information from the anonymization ID but cannot estimate the specimen ID.

  Next, the anonymization terminal 102 records the generated anonymization ID in the external storage medium 105 via the external memory interface 307 (step S7). Then, the user of the anonymization terminal 102 provides the external storage medium 105 to the user of the information processing terminal 103 for analyzer.

  Next, the user of the information processing terminal for analyzer 103 sets the external storage medium 105 sent from the user of the anonymization terminal 102 to the external memory interface 409 of the information processing terminal for analyzer 103. Then, the information processing terminal 103 for analyst detects that the external storage medium 105 is set in the external memory interface 409, and starts the process of the next step S8.

The analyzer information processing terminal 103 reads the anonymization ID recorded in the external storage medium 105, stores it in the storage unit 404, and divides it into anonymization ID ′ and encrypted additional information (step S8).
Next, the information processing terminal 103 for analyst generates an additional information decryption / verification key from the anonymization ID ′ and the secret information stored in advance (step S9). This additional information decryption / verification key is a key capable of decrypting the family information from the encrypted additional information and verifying whether the decryption result is correct.

  Next, a family tree is generated from the decoded and verified additional information (step S11). The analysis terminal 103 cannot specify the sample ID from the family information or the family tree, and to whom the analyzed family tree belongs or to which sample ID corresponds Cannot be specified.

  The analyst analyzes genetic information from the regenerated family tree and the extracted subject information of the person appearing in the family tree (step S12).

  When the analysis is completed, the analyst records the analysis result together with the anonymized ID 'in the external storage medium 105 via the external memory interface 409 (FIG. 6; step S13). Then, the analyst provides the external storage medium 105 to the user of the anonymization terminal 102.

  When the user of the anonymization terminal 102 receives the external storage medium 105 together with the anonymization ID ′ from the analysis information processing apparatus 103, the user sets the external storage medium 105 in the external memory interface 307 of the anonymization terminal 102. Then, the anonymization terminal 102 detects that the external storage medium 105 is set in the external memory interface 307, and starts the process of the next step S14.

  The anonymization terminal 102 reproduces the sample ID from the anonymization ID ′ (step S14), and transmits the reproduced sample ID and the analysis result received from the analyzer information processing terminal 103 to the hospital information processing terminal 101 ( Step S15).

  The hospital information processing terminal 101 stores the sample ID and the analysis result in association with each other in the database 204 (step S16), and uses them for subsequent medical treatment and treatment.

  Next, the genetic information analysis procedure described with reference to FIGS. 5 and 6 will be described in detail.

  First, the hospital information processing terminal 101 stores subject information related to the ID (specimen ID) of each subject in the database 204. As described above, the subject information is the subject's privacy information, for example, family tree information, address information, name information, age information, gender information, medical information, etc. (medical history information, medical history information, medication history information) Etc.) and the like, and various information useful for the treatment of the subject and the like. Of these, the family tree information is a family tree represented by a combination of specimen IDs.

  FIG. 7A shows an example of the data structure of the sample ID. In this example, each specimen ID is composed of an engine classification code, a specimen classification code, a date code, and a serial number code. The organization classification code is a hospital identification code. The sample classification code is a code for identifying the type of sample (attributes such as gender and age). The date code is a code that specifies the reception date of the subject. The serial number code is a code indicating what number of acceptors on the acceptance date. However, the code system itself is arbitrary.

The family tree information is information for indicating the family tree as a combination of sample IDs, and is information indicating the relationship between the sample IDs.
For example, when there are mother A, father B, and children C, D, and E, when the specimen IDs are expressed as ID _A , ID _B , ID _C , ID _D , and ID _E , the family tree is It is configured as shown in FIG. This is a family tree for one family, and ID _A and ID _B and ID _C , ID _D, and ID _E are the same generation.

  When analysis of genetic information is necessary, a doctor or the like identifies a specimen ID of a subject who needs analysis, and further extracts information necessary for analysis from the subject information to generate extracted subject information.

  For example, in the family tree of FIG. 8A, when analysis of genetic information of Mr. A and Mr. C is necessary, for example, sample IDs and extracted subject information of A, C to E, excluding Mr. B, Is transmitted to the anonymization terminal 102. If necessary, all the information may be sent, or only the information of Mr. A and Mr. C may be sent.

  Next, the control unit 201 of the hospital information processing terminal 101 associates the sample ID with the extracted subject information according to an operation of a doctor or the like, and sends the sample ID and the extracted subject information to the anonymization terminal 102 via the communication unit 205 (step S1). .

  The control unit 301 of the anonymization terminal 102 receives these pieces of information from the hospital information processing terminal 101 via the communication unit 305 and stores them in the storage unit 304.

  Subsequently, the control unit 301 executes processing for generating an anonymization ID (steps S2 to S6).

  First, the control unit 301 applies the received sample ID to a predetermined one-way function, obtains a hash value thereof, and sets this as related information (step S2). The control unit 301 stores information indicating the correspondence relationship between the sample ID and the related information in the storage unit 304. This related information is information indicating the relevance with the specimen ID. The hash value may be encrypted according to a predetermined rule, may be compressed, or a random number may be generated and added to give randomness. In this way, for example, related information as shown in FIG. 7B is generated from the sample ID shown in FIG.

  Next, the control part 301 produces | generates arbitrary anonymization ID 'containing the relevant information produced | generated (step S3). The relationship between the sample ID and the anonymized ID 'is known only by a person having a correspondence table of the sample ID and related information (a person who knows the correspondence). FIG. 7C shows an example of an anonymization ID 'generated by connecting related information to the institution division and sample division of the sample ID. However, the data linked to the related information is arbitrary. In addition, if the connection rule is established, the related information does not need to be continuous, and may be divided and distributed within the anonymization ID '.

  Next, the control unit 301 generates family information. That is, the family information defined by the sample ID as shown in FIG. 8A is converted into the family information defined by the anonymization ID ′ as shown in FIG. 8B by the same method as described above. To do.

Subsequently, family information is generated from the family tree information. This family information is information indicating the relationship between the anonymization ID ′.
The form of the family information is arbitrary, but can be formed using boundary information W as shown in FIGS. 9 (a) and 9 (b).
For example, on the family tree in FIG. 8B, the family information of the anonymized ID _{A A} (ID _B ′ is the same) is shown on the left side of the boundary information. As shown in FIG. 9A, it is shown that there are anonymized ID _C ′, ID _D ′, and ID _E ′ as children on the right side of the boundary information W. Similarly, the family information of the anonymized ID _C ′ (ID _D ′ and ID _E ′ is the same) on the family tree of FIG. 8B is the boundary information W as shown in FIG. 9B. It is shown that there are anonymized ID _A 'and ID _B ' as parents on the left side of.

  Subsequently, the control unit 301 encrypts the family line information and other extracted subject information using the anonymized ID 'as an encryption key, and uses this as encrypted additional information (step S5). Further, at this time, a random number having an appropriate number of bits is added and encrypted by, for example, ElGamal encryption.

For example, it is assumed that the subject who is paying attention is Mr. A, and the anonymized ID _A ′ is the content shown in FIG. Next, according to the family tree information of FIG. 8 (B), the family tree information of Mr. A's anonymized ID _A 'is as shown in FIG. 10 (b), with boundary information W, anonymized ID _C ', and anonymous. reduction 'and anonymizing ID _E' ID _D becomes a concatenation of the. Further, other subject information such as the sex, age, and medical history of Mr. A is combined here.

  The control unit 301 generates a random number having a predetermined number of bits and combines the random number with the family information as shown in FIG. In addition, FIG.10 (c) is an illustration and the bit number of random numbers, a connection position, and a connection method are arbitrary.

Subsequently, the family information to which the random numbers shown in FIG. 10C are concatenated is encrypted with the anonymization ID _A ′ shown in FIG. 10A to generate encrypted additional information as illustrated in FIG. To do.

If the object of genetic information analysis is related to Mr. A and Mr. C, the same processing is also performed for Mr. _C , and encrypted additional information for anonymized ID _C ′ is generated.

  Subsequently, the anonymization ID ′ and the generated encrypted additional information are connected to generate an anonymization ID as shown in FIGS. That is, the anonymization ID is generated by combining the encryption key and the encryption result.

The control unit 301 records the anonymized ID generated in this way, for example, ID _A and ID _C , in the external storage medium 105 via the external memory interface 307 (step S7).

  The control unit 401 of the analyzer information processing terminal 103 reads the anonymization ID recorded in the external storage medium 105 via the external memory interface 409 and temporarily stores it in the storage unit 404.

Subsequently, the control unit 401 operates using the RAM 402 as a work area, and first divides the received anonymization ID into, for example, anonymization ID ′ and encrypted additional information (step S8). For example, each received anonymization ID shown in FIG. 11 is divided into anonymization ID _A ′ and its encrypted additional information, and anonymized ID _C ′ and its encrypted additional information. If the number of bits of the anonymization ID ′ is determined in advance, this can be easily performed by using the MSB as a predetermined number of bits as an anonymization ID and the rest as encrypted additional data.

Next, using the “secret information” given in advance to the authorized analysis terminal, the encryption ID ′ is processed to generate an additional information decryption / verification key (step S9).
This additional information decryption / verification key is a key for decrypting the family information and verifying whether the decryption result is correct.
The “secret information” includes, for example, a method created by an analyst and approved by the anonymization terminal 102, a method generated and distributed by the anonymization terminal 102, and a method of distributing from a center. In addition, an additional information decryption / verification key itself is created by an analyst and approved by the anonymization terminal 102, a method of generation and distribution by the anonymization terminal 102, a method of providing a key center and distribution from there, etc. You may take

Next, the encrypted additional information is decrypted using the additional information decryption / verification key. Further, the validity is checked by matching the decrypted encrypted additional information. For example, when anonymized ID _A ′ and anonymized ID _C ′ are considered, the family information included in the decryption information of the encrypted additional information of the anonymized ID _A ′ and the encrypted additional information of the anonymized ID _C ′ It is determined whether or not there is any contradiction in the family information included in the decryption information, and the decrypted data is verified.

For example, assuming the family tree of FIG. 8B, for the anonymization ID _A ′, it can be determined from the decrypted encrypted additional information that the anonymization ID _C ′ is “child”, With regard to the anonymized ID _C ′, if it can be determined from the decrypted encrypted additional information that ID _A ′ is “parent”, there is no contradiction between the two and the verification is OK. Therefore, a family tree as shown in FIG. 12 (or FIG. 8B) can be reproduced. The control unit 401 stores the regenerated family tree and information such as the gender / age and medical history of each person in the storage unit 404. Therefore, by generating the decryption / verification key from the anonymized ID ′ and decrypting it using the decryption / verification key in this way, the combination of the anonymized ID ′ and the additional information can be verified at the same time, and human error is prevented. be able to.

  Next, the analyst causes the reproduced family tree and other information to be displayed on the display unit 406, and analyzes genetic information (step S12). The analysis result is input / edited from the input unit 407.

The analyst records the analysis result in the external storage medium 105 via the external memory interface 409 together with the anonymized ID _A ′ and the anonymized ID _C ′ (step S13). Then, the analyst provides the external storage medium 105 to the user of the anonymization terminal 102.

Next, the user of the anonymization terminal 102 sets the external storage medium 105 in the external memory interface 307 of the anonymization terminal 102. Then, the control unit 201 of the anonymization terminal 102 reads the anonymization ID _A ′ and the anonymization ID _C ′ from the external storage medium 105 via the external memory interface 307, and the anonymization ID _A ′ and the anonymization ID. Based on the correspondence data, ID _A and ID _C are reproduced from _C ′ and transmitted to the hospital information processing terminal 101.

  According to the procedure described above, genetic information can be analyzed without giving the analyst information for identifying an individual. Further, even if the analyst temporarily collaborates with the hospital, even if the anonymized ID 'is provided to the hospital side, the specimen ID cannot be specified, and therefore the individual cannot be specified.

  Further, the analyst can restore the family information from the received information and know the attributes and medical history of the subject. That is, the analysis work can be performed in a state where necessary information is gathered, the work is easy, and there are few mistakes.

  In addition, this invention is not limited to the said embodiment, A various deformation | transformation and application are possible.

  For example, in the above embodiment, the family information is formed by concatenating the concatenation symbol and the anonymized ID ′. However, for example, a hash value of the anonymized ID ′ may be used. However, at the time of decryption, the hash value of the anonymized ID ′ is obtained, and the anonymized ID ′ is determined by determining which of the connected data matches the hash value of which anonymized ID ′. Need to be identified.

次に、数２に示すように、位数がｐの巡回群Ｇでの原始元を利用して秘密鍵Ｋｅｙpriv1を暗号化して、公開鍵Ｋｅｙpubを生成する。

Also, an encryption method and a decryption method are arbitrary.
For example, a method of generating an encryption key by the analyst terminal 103 as shown in the following equation is also effective.
As shown in Equation 1, the analyzer information processing terminal 103 selects at random from a set Zl composed of integer values from 0 to a prime number p, and sets this as a secret key Keypriv1.

Next, as shown in Equation 2, the secret key Keypriv1 is encrypted using the primitive element in the cyclic group G of order p, and the public key Keypub is generated.

The analysis reporter information processing terminal 103 transmits this public key to the anonymization terminal 102.
The anonymization terminal 102 receives the subject's specimen ID and the extracted subject information Mprivacy from the hospital information processing terminal 101, obtains the anonymization ID represented by Equation 3, and sends it to the analyzer information processing terminal 103.

Here, ID ′ is an anonymized ID ′ in which related information is embedded. Also, || indicates data combination. r is a random number belonging to the set Zl as shown in Equation 4. Here, rG is obtained using a primitive element in the cyclic group G of order q. mprivacy is extracted subject information including family tree information and the like. Also, an exclusive OR (represented by A) of the extracted subject information mprivacy and the data encrypted with the exclusion hash function H2 is obtained.
H1 (ID ′) is a value obtained by applying anonymized ID ′ to the first hash H1.
(E (Keypub, H1 (ID ′)) ^r ) is encryption using Keypub and H1 (ID ′).
Further, H2 (e (Keypub, H1 (ID ′)) ^r ) is a value applied to e (Keypub, H1 (ID ′)) ^r second hash function H2.

続いて、抽出被験者情報ｍprivacyを数６に従って抽出する。

On the other hand, the analyzer terminal 103 receives the anonymization ID and decrypts the extracted subject information as follows.
The encryption key c is obtained from Equation 5.

Subsequently, the extracted subject information mprivacy is extracted according to Equation 6.

  Even in such a form, it is possible to safely transmit the extracted subject information to the information processing terminal 103 for the analyzer and obtain necessary information at the information processing terminal 103 for the analyzer.

  In the above embodiment, the information processing terminal 103 for the analyst decrypts the encrypted additional information based on the anonymization ID 'and the secret information given in advance, but the method is arbitrary.

  In the above embodiment, the anonymized ID ′ linked to the linked information W is linked as the encrypted encoded information. Such a method is particularly effective when encrypted additional information is recorded and provided from the anonymization terminal 102 to the analyst information processing terminal 103 in the external storage medium 105 for each family.

However, the present invention is not limited to this. For example, in the case of carrying out by batch processing or the like, when the family information is transmitted collectively for a plurality (or all) IDs, the anonymization ID is individually set. Instead of transmitting ', family identification information may be attached to the linked information as shown in FIG.
For example, in FIG. 13, ID _A ′ to ID _E ′ belong to the family “1”, child information exists for ID _A ′ and ID _B ′, and ID _C ′ to ID _E ′. Indicates that parent information exists.
Therefore, after decoding these pieces of information by the information processing terminal 103 for the analyst, the family tree information can be reproduced by combining those having the same family number.

  Each information processing terminal of the present invention is not limited to a dedicated device. Each terminal can be realized by installing a computer program for operating the computer as each terminal in a general computer from a recording medium or the like.

  Furthermore, in the above embodiment, the information processing terminal 103 for the analyst is not connected to the network 104. For example, if the level of anonymity securing of the family tree and related information may be low, Data may be exchanged via the network 104 as shown in FIG. 14 without using the storage medium 105. In this case, the analyzer information processing terminal 103 and the anonymization terminal 102 exchange encrypted information via the communication unit 305 or the communication unit 405.

It is a figure for demonstrating the structure of the anonymization identification information generation system which concerns on this embodiment. It is a block diagram for demonstrating the structure of the information processing terminal for hospitals. It is a block diagram for demonstrating the structure of an anonymization terminal. It is a block diagram for demonstrating the structure of the information processing terminal for analysts. It is a figure for demonstrating the operation | movement of the whole anonymization identification information generation system which concerns on this embodiment. It is a figure for demonstrating the operation | movement of the whole anonymization identification information generation system which concerns on this embodiment. It is a figure for demonstrating the process which produces | generates anonymization ID 'from sample ID. (A) is a figure which shows the family line information defined by sample ID. (B) is a figure which shows the family line information defined by anonymization ID '. It is a figure which shows an example of the boundary information in ancestry information. (A) is a figure which shows an example of the bit string of a relevance verification key. (B) (c) is a figure which shows an example of the bit string of ancestry information. (D) is a figure which shows an example of the bit sequence of encryption additional information. (A) is a diagram showing an example of the anonymous ID _'A bit string. (B) is a figure which shows an example of anonymization ID'c bit sequence. It is a figure which shows an example of the family tree information in the case of generating a family tree. It is a figure which shows an example of the family tree information in the case of generating a family tree. It is a block diagram of the anonymization identification information generation system which concerns on embodiment at the time of connecting the information processing terminal for analyzers to a network.

Explanation of symbols

DESCRIPTION OF SYMBOLS 100 Anonymization identification information generation system 101 Information processing terminal 102 for hospitals Anonymization terminal 103 Information processing terminal 104 for analysts Network 105 External storage medium

Claims (7)

Information acquisition means for acquiring subject identification information unique to each subject subject to genetic information analysis and subject relationship information indicating a relationship between subjects;
Identification information encryption means for generating encrypted identification information by encrypting the subject identification information acquired by the information acquisition means;
Encrypted information generating means for generating encrypted information based on the encrypted identification information generated by the identification information encrypting means and the subject relationship information acquired by the information acquiring means;
Encrypted information transmitting means for transmitting the encrypted information generated by the encrypted information generating means to another device for analysis;
Comprising
An anonymized identification information generation system characterized by that. An information processing device for decrypting and analyzing the encrypted information;
The information processing apparatus includes:
Encrypted information reading means for reading the encrypted information generated by the encrypted information generating means from an external storage medium;
Encrypted information decrypting means for decrypting the encrypted information read by the encrypted information reading means;
Based on the information decrypted by the encrypted information decrypting means, regenerating means for regenerating the subject relationship information;
Comprising
The anonymized identification information generation system according to claim 1. An information processing device for decrypting and analyzing the encrypted information;
The information processing apparatus includes:
Encrypted information acquiring means for acquiring the encrypted information transmitted by the encrypted information transmitting means;
Encrypted information decrypting means for decrypting the encrypted information acquired by the encrypted information acquiring means;
Based on the information decrypted by the encrypted information decrypting means, regenerating means for regenerating the subject relationship information;
Comprising
The anonymized identification information generation system according to claim 1. The subject relationship information includes genetic information necessary for genetic analysis of the subject.
The anonymized identification information generation system according to any one of claims 1 to 3. The relationship between the subjects in the subject relationship information is defined based on the subject identification information.
The anonymized identification information generation system according to any one of claims 1 to 4, wherein The encrypted information generating means includes
Based on the encrypted identification information generated by the identification information encryption means, the subject relationship information acquired by the information acquisition means is encrypted, and the encrypted identification information is added to generate the encrypted information.
The anonymized identification information generation system according to any one of claims 1 to 5. In the computer of the anonymized identification information generation system for genetic information analysis,
Information acquisition procedure for acquiring subject identification information unique to each subject for which genetic information is analyzed and subject relationship information indicating a relationship between subjects,
An identification information encryption procedure for generating encrypted identification information by encrypting the subject identification information acquired in the information acquisition procedure;
An encryption information generation procedure for generating encryption information based on the encryption identification information generated by the identification information encryption procedure and the subject relationship information acquired by the information acquisition means;
An encryption information transmission procedure for transmitting the encryption information generated in the encryption information generation procedure to another device for analysis;
A program that executes

Images