Towards Privacy-Preserving Record Linkage with Record-Wise Linkage Policy

摘要

We consider a situation that a large number of individuals contribute their personal data to multiple databases, and an analyst is allowed to issue a request of record linkage across any two of these databases. In such a situation, one concern is that very detailed information about individuals can be eventually obtained by analysts through sequential requests of record linkage across various database pairs. To resolve this privacy concern, we introduce a novel privacy notion for record linkage, record-wise linkage policy, with which each data contributor can individually designate database pairs that are allowed (resp. banned) to process record linkage by whitelist (resp. blacklist). We propose a secure multi-party computation to achieve record linkage with record-wise linkage policies. Also, we prove that our protocol can securely evaluate PPRL without violating given linkage policies and evaluate the efficiency of our protocol with experiments.