| HOME | HELP | FEEDBACK | SUBSCRIPTIONS | ARCHIVE | SEARCH | TABLE OF CONTENTS |
Article |
Affiliations of the authors: Polytechnic University of Upper Austria at Hagenberg, Department of Software Engineering for Medicine, A-4232 Hagenberg, Austria (SD); Decision Systems Group, Brigham and Womens Hospital, Harvard Medical School, Boston, Massachusetts 02115 (SV, LO-M). email: <Stephan.Dreiseitl{at}fhs-hagenberg.ac.at>.
Abstract
Privacy protection is an important consideration when releasing medical databases to the research community. We show that while recent advances in anonymization algorithms provide increased levels of protection, it is still possible to calculate approximations to the original data set. In some cases, one can even uniquely reconstruct entries in a table before anonymization.
In this paper, we demonstrate how knowledge of an anonymization algorithm based on ambiguating data cell entries can be used to undo the anonymization process. We investigate the effect of this algorithm and its reversal on data sets of varying sizes and distributions. It is shown that by using a computationally complex disambiguation process, information on individuals can be extracted from an anonymized data set.
| HOME | HELP | FEEDBACK | SUBSCRIPTIONS | ARCHIVE | SEARCH | TABLE OF CONTENTS |