arXiv:2603.22954cs.CRcs.LG2026-03

用几何操作保护病历隐私,让数据既安全又可读。

Privacy-Preserving EHR Data Transformation via Geometric Operators: A Human-AI Co-Design Technical Report

  • 设计三种不可逆几何变换算子,保留临床语义和统计特征。
  • 在重建、成员推断等攻击下验证有效,保障患者隐私不泄露。
  • 适合需直接查看数据的临床研究与跨中心协作场景。

电子健康记录(EHR)等真实世界临床数据对医学人工智能和生命科学研究至关重要,但因隐私、治理及互操作性限制,共享困难,导致数据孤岛长期存在,阻碍多中心研究与大规模模型训练。现有隐私保护方法如多方计算虽安全,但计算开销大,且常使数据对研究人员不可见,影响探索性分析。本文提出一种面向结构化临床记录的隐私保护数据转换框架,不将数据转为黑箱表示,而是构建保持医学语义与主要统计特性的数值视图,在明确威胁模型下,可证明该视图与患者个人属性间无直接关联。通过计算机科学家与AI代理SciencePal协同设计,提出三种非逆向可恢复的变换算子,并引入高风险场景下的混合策略。理论分析与实证评估均表明,该方法在重建攻击、记录链接、成员推断和属性推断攻击下表现稳健。

原文摘要 · Abstract (English)

Electronic health records (EHRs) and other real-world clinical data are essential for clinical research, medical artificial intelligence, and life science, but their sharing is severely limited by privacy, governance, and interoperability constraints. These barriers create persistent data silos that hinder multi-center studies, large-scale model development, and broader biomedical discovery. Existing privacy-preserving approaches, including multi-party computation and related cryptographic techniques, provide strong protection but often introduce substantial computational overhead, reducing the efficiency of large-scale machine learning and foundation-model training. In addition, many such methods make data usable for restricted computation while leaving them effectively invisible to clinicians and researchers, limiting their value in workflows that still require direct inspection, exploratory analysis, and human interpretation. We propose a real-world-data transformation framework for privacy-preserving sharing of structured clinical records. Instead of converting data into opaque representations, our approach constructs transformed numeric views that preserve medical semantics and major statistical properties while, under a clearly specified threat model, provably breaking direct linkage between those views and protected patient-level attributes. Through collaboration between computer scientists and the AI agent \textbf{SciencePal}, acting as a constrained tool inventor under human guidance, we design three transformation operators that are non-reversible within this threat model, together with an additional mixing strategy for high-risk scenarios, supported by theoretical analysis and empirical evaluation under reconstruction, record linkage, membership inference, and attribute inference attacks.

隐私保护医疗数据几何变换

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。