Combining hashing and enciphering algorithms for epidemiological analysis of gathered data

Catherine Quantin (1) , Maniane Fassa (2) , Gouenou Coatrieux (3, 4) , Gilles Trouessin (5) , François André Allaërt (6)

1 DIM - Service Biostatistiques et Informatique Médicale (CHU de Dijon)
2 UMR 650 - Service de biostatistique et informatique médicale
3 Optimisation Continue des Actions Thérapeutiques par l'Intégration d'Informations Multimodales
4 ITI - Département Image et Traitement Information
5 OPPIDA Sud
6 McGill University = Université McGill [Montréal, Canada]

OBJECTIVES: Compiling individual records coming from different sources is necessary for multi-center studies. Legal aspects can be satisfied by implementing anonymization procedures. When using these procedures with a different key for each study it becomes almost impossible to link records from separate data collections. METHODS: The originality of the method relies on the way the combination of hashing and enciphering techniques is performed: like in asymmetric encryption, two keys are used but the private key depends on the patient's identity. RESULTS: The combination of hashing and enciphering techniques provides a great improvement in the overall security of the proposed scheme. CONCLUSION: This methodology makes stored data available for use in the field of public health, while respecting legal security requirements.

Catherine Quantin, Maniane Fassa, Gouenou Coatrieux, Gilles Trouessin, François André Allaërt. Combining hashing and enciphering algorithms for epidemiological analysis of gathered data. Methods of Information in Medicine, 2008, 47 (5), pp.454-458. ⟨10.3414/ME0546⟩. ⟨hal-00940411⟩