Diagnostic and classification algorithms play an important role in data analysis, with applications in areas such as health care, fault diagnostics, or benchmarking. Branching programs (BP) is a popular representation model for describing the underlying classification/diagnostics algorithms. Typical application scenarios involve a client who provides data and a service provider (server) whose diagnostic program is run on client's data. Both parties need to keep their inputs private. We present new, more efficient privacy-protecting protocols for remote evaluation of such classification/diagnostic programs. In addition to efficiency improvements, we generalize previous solutions - we securely evaluate private linear branching programs (LBP), a useful generalization of BP that we introduce. We show practicality of our solutions: we apply our protocols to the privacy-preserving classification of medical ElectroCardioGram (ECG) signals and present implementation results. Finally, we discover and fix a subtle security weakness of the most recent remote diagnostic proposal, which allowed malicious clients to learn partial information about the program.

Secure Evaluation of Private Linear Branching Programs with Medical Applications / Barni, M; Failla, P; Kolesnikov, V; Lazzeretti, Riccardo; Sadeghi, A; Schneider, T.. - 5789:(2009), pp. 424-439. (Intervento presentato al convegno 14th European Symposium on Research in Computer Security, ESORICS 2009 tenutosi a Saint-Malo; France) [10.1007/978-3-642-04444-1_26].

Secure Evaluation of Private Linear Branching Programs with Medical Applications

LAZZERETTI, RICCARDO;
2009

Abstract

Diagnostic and classification algorithms play an important role in data analysis, with applications in areas such as health care, fault diagnostics, or benchmarking. Branching programs (BP) is a popular representation model for describing the underlying classification/diagnostics algorithms. Typical application scenarios involve a client who provides data and a service provider (server) whose diagnostic program is run on client's data. Both parties need to keep their inputs private. We present new, more efficient privacy-protecting protocols for remote evaluation of such classification/diagnostic programs. In addition to efficiency improvements, we generalize previous solutions - we securely evaluate private linear branching programs (LBP), a useful generalization of BP that we introduce. We show practicality of our solutions: we apply our protocols to the privacy-preserving classification of medical ElectroCardioGram (ECG) signals and present implementation results. Finally, we discover and fix a subtle security weakness of the most recent remote diagnostic proposal, which allowed malicious clients to learn partial information about the program.
2009
14th European Symposium on Research in Computer Security, ESORICS 2009
Signal Processing in the encrypted domain; homomorphic encryption, garbled circuits
04 Pubblicazione in atti di convegno::04b Atto di convegno in volume
Secure Evaluation of Private Linear Branching Programs with Medical Applications / Barni, M; Failla, P; Kolesnikov, V; Lazzeretti, Riccardo; Sadeghi, A; Schneider, T.. - 5789:(2009), pp. 424-439. (Intervento presentato al convegno 14th European Symposium on Research in Computer Security, ESORICS 2009 tenutosi a Saint-Malo; France) [10.1007/978-3-642-04444-1_26].
File allegati a questo prodotto
File Dimensione Formato  
Barni_Secure-Evaluation-of-Private_2009.pdf

solo gestori archivio

Tipologia: Versione editoriale (versione pubblicata con il layout dell'editore)
Licenza: Tutti i diritti riservati (All rights reserved)
Dimensione 342.07 kB
Formato Adobe PDF
342.07 kB Adobe PDF   Contatta l'autore
VE_2009_11573-967142.pdf

solo gestori archivio

Tipologia: Versione editoriale (versione pubblicata con il layout dell'editore)
Licenza: Tutti i diritti riservati (All rights reserved)
Dimensione 342.07 kB
Formato Adobe PDF
342.07 kB Adobe PDF   Contatta l'autore

I documenti in IRIS sono protetti da copyright e tutti i diritti sono riservati, salvo diversa indicazione.

Utilizza questo identificativo per citare o creare un link a questo documento: https://hdl.handle.net/11573/967142
Citazioni
  • ???jsp.display-item.citation.pmc??? ND
  • Scopus 90
  • ???jsp.display-item.citation.isi??? 62
social impact