Browse > Article
http://dx.doi.org/10.33778/kcsa.2022.22.4.085

A study on the policy of de-identifying unstructured data for the medical data industry  

Sun-Jin Lee (성신여자대학교 미래융합기술공학과)
Tae-Rim Park (성신여자대학교 미래융합기술공학과)
So-Hui Kim (신세계아이앤씨 정보보안팀)
Young-Eun Oh (라인비즈플러스 viz security)
Il-Gu Lee (성신여자대학교 융합보안공학과 / 미래융합기술공학과)
Publication Information
Abstract
With the development of big data technology, data is rapidly entering a hyperconnected intelligent society that accelerates innovative growth in all industries. The convergence industry, which holds and utilizes various high-quality data, is becoming a new growth engine, and big data is fused to various traditional industries. In particular, in the medical field, structured data such as electronic medical record data and unstructured medical data such as CT and MRI are used together to increase the accuracy of disease prediction and diagnosis. Currently, the importance and size of unstructured data are increasing day by day in the medical industry, but conventional data security technologies and policies are structured data-oriented, and considerations for the security and utilization of unstructured data are insufficient. In order for medical treatment using big data to be activated in the future, data diversity and security must be internalized and organically linked at the stage of data construction, distribution, and utilization. In this paper, the current status of domestic and foreign data security systems and technologies is analyzed. After that, it is proposed to add unstructured data-centered de-identification technology to the guidelines for unstructured data and technology application cases in the industry so that unstructured data can be actively used in the medical field, and to establish standards for judging personal information for unstructured data. Furthermore, an object feature-based identification ID that can be used for unstructured data without infringing on personal information is proposed.
Keywords
Medical industry; Unstructured data; De-identification; De-identification action; De-identification policy;
Citations & Related Records
Times Cited By KSCI : 5  (Citation Analysis)
연도 인용수 순위
1 한국인터넷진흥원, "개인정보 비식별 조치 가이드라인," pp. 1-80, Jun. 2016. https://www.privacy.go.kr/cmm/fms/FileDown.do?atchFileId=FILE_000000000827059&fileSn=0 [Accessed: 27-Feb-2022]. 
2 V. Bhagwan, T. Grandison, and C. Maltzahn, "Recommendation-Based De-identification: A Practical Systems Approach towards De-identification," 2012 IEEE Eighth World Congress on Services, pp. 155-162, Aug. 2012. 
3 전승재, 권헌영 "개인정보, 가명정보, 익명정보에 관한 4개국 법제 비교분석," 정보법학, 22(3), pp. 183-218, Dec. 2018. 
4 손형섭, "한국 개인정보보호법과 일본 개인정보보호법의 비교 분석 - ICT산업 생태계에 미치는 영향을 중심으로 -," 2019 NAVER Privacy White Paper. https://privacy.naver.com/download/2019_chapter2_JapanPersonalInformationProtectionAct.pdf [Accessed: 27-Feb-2022]. 
5 개인정보 보호위원회, "개인정보의 범위에 관한 연구," pp. 1-335, Oct. 2014. http://pipc.go.kr/cmm/fms/FileDown.do;jsessionid=AFF7450287C3709AB913DD347E4355F5?atchFileId=FILE_000000000499259&fileSn=0 [Accessed: 27-Feb-2022]. 
6 ISO/IEC, "Privacy enhancing data de-identification terminology and classification of techniques," ISO/IEC 20889, pp. 1-46, Nov. 2018. https://www.iso.org/standard/69373.html [Accessed: 27-Feb-2022]. 
7 개인정보 보호위원회, "가명정보 처리 가이드라인," pp. 1-56, Sep. 2020. https://www.pipc.go.kr/np/cop/bbs/selectBoardArticle.do?bbsId=BS217&mCode=D010030000&nttId=8000 [Accessed: 02-May-2022]. 
8 한국인터넷진흥원, "신규 ICT 환경의 해외 개인정보 활용사례 및 법제동향 분석연구," pp. 1-214, Oct. 2016. https://www.kisa.or.kr/204/form?postSeq=022686&lang_type=KO&page= [Accessed: 29-Dec-2020]. 
9 S. Garfinkel, "De-Identification of Personal Information," NISTIR 8053, pp. 1-46, Oct. 2015. 
10 이인경, 엄수현, 아로샤, 자파르, 이우기, "경로정보 개인 비식별화를 위한 K-익명성의 K값에 따른 데이터 활용과 익명성의 상충관계," 한국정보과학회 학술발표논문집, pp. 1241-1242, Jun. 2018. 
11 이대희, "개인정보 보호 및 활용 방안으로서의 가명.비식별정보 개념의 연구," 정보법학, 21(3), pp. 217-251, Dec. 2017. 
12 Department of Health & Human Services, "Guidance Regarding Methods for De-identification of Protected Health Information in Accordance with the Health Insurance Portability and Accountability Act (HIPAA) Privacy Rule," Feb. 2012. https://www.hhs.gov/hipaa/for-professionals/privacy/special-topics/de-identification/index.html [Accessed:2-Feb-2022]. 
13 한국정보화진흥원, "영상 데이터 익명화 기술 및 평가방안", pp. 1-17, Feb. 2019. https://kbig.kr/board/fileMngr?cmd=down&boardId=files_bigdata_report&bltnNo=11551661790597&fileSeq=1&subId=sub06 [Accessed: 27-Feb-2022]. 
14 이경률, 임강빈, 이선영, "영상보안시스템에서의 형태보존암호를 활용한 효율적인 프라이버시 마스킹 기술 연구," 한국통신학회 학술대회논문집, pp. 813-814, Feb. 2018. 
15 B. Meden, Z. Emersic, V. Struc, and P. Peer, "κ-Same-Net: Neural-Network-Based Face Deidentification," 2017 International Conference and Workshop on Bioinspired Intelligence (IWOBI), pp. 1-7, Jul. 2017. 
16 Shahid, Arsalan, et al. "A Two-Stage De-Identification Process for Privacy-Preserving Medical Image Analysis." Healthcare. Vol. 10. No. 5. Multidisciplinary Digital Publishing Institute, 2022. 
17 Popescu, Andreea Bianca, et al. "Obfuscation Algorithm for Privacy-Preserving Deep Learning-Based Medical Image Analysis." Applied Sciences 12.8 (2022): 3997. 
18 Tu, N.A., Huynh-The, T., Wong, KS, et al., "Toward efficient and intelligent video analytics with visual privacy protection for large-scale surveillance," J Supercomput 77, pp. 14374-14404, May. 2021.    DOI
19 김순석, 황호성, 윤상진, 권오승, 인한진, 김범식.(2018).개인정보보호를 위한 비식별 조치 현안 및 향후 과제에 관한 연구-보건의료분야를 중심으로. 예술인문사회 융합 멀티미디어 논문지,8(5),599-607. 
20 박민영, 최민경.(2016). 의료정보의 관리와 비식별화에 관한 법적 과제.유럽헌법연구,(21),495-534. 
21 Personal Information Protection Commission Act No. 16930, "Personal Information Protection Act," Personal Information Protection Policy Division, Feb. 2020. 
22 김종율, 김혁중, "리테일 마케팅 고도화를 위한CCTV 영상 데이터 기반의 AI 융합 응용 서비스 활용 모델 연구," 디지털융복합연구, 19(5), pp. 197-205, 2021.    DOI
23 박예승, 김도영, 최태림, 허수웅, 송혜원, 이상훈, "위험 상황 자동 인지 지능형 CCTV 시스템 연구," 한국통신학회 학술대회논문집, pp. 1174-1175, Feb. 2020. 
24 보건복지부, "의료법," Dec. 2020. https://www.law.go.kr/%EB%B2%95%EB%A0%B9/%EC%9D%98%EB%A3%8C%EB%B2%95 [Accessed: 27-Feb-2022]. 
25 김지은, 황정민, 홍영주, 김수경, "디지털 헬스 산업분석및전망연구", KHIDI, 2020. https://www.khidi.or.kr/fileDownload?titleId=449375&fileId=1&fileDownType=C¶mMenuId=MENU02686 [Accessed: 2021-April-07]. 
26 보건복지부, "보건 의료 데이터.인공지능 혁신전략," pp. 1-47, Jun. 2021. https://eiec.kdi.re.kr/policy/materialView.do?num=214544&topic=P&pp=20&datecount=&recommend=&pg= [Accessed: 2021-Jun-03]. 
27 신태섭, "보건의료 데이터 활용 가이드라인의 의미와 과제," 의료법학, 22(3), pp. 31-55, 2021. https://www.kci.go.kr/kciportal/ci/sereArticleSearch/ciSereArtiView.kci?sereArticleSearchBean.artiId=ART002761333 [Accessed: 2022-Mar-03]. 
28 K. Patel and G. B. Jethava, "Privacy Preserving Techniques for Big Data: A Survey," 2018 Second International Conference on Inventive Communication and Computational Technologies (ICICCT), pp. 194-199, Sep. 2018. 
29 하만석, 안현철, "정형 데이터와 비정형 데이터를 동시에 고려하는 기계학습 기반의 직업훈련 중도 탈락 예측 모형," 한국콘텐츠학회논문지, 19(1), pp. 1-15, Jan. 2019.    DOI
30 Grand View Research, "Preclinical Imaging Market Analysis By Product Type(Devices: CT, MRI, PET/SPECT, Multi-model, Optical, Ultrasound, Photoacoustic(PAT), Reagents and Services) And Segment Forecasts To 2024," pp. 1-87, Jun. 2016. https://www.grandviewresearch.com/industry-analysis/preclinical-imaging-market [Accessed: 27-Feb-2022]. 
31 박민영, 최민경 , "의료정보의 관리와 비식별화에 관한 법적 과제," 유럽헌법학회, (21), pp. 495-534, Aug. 2016. 
32 김상광, 김선경 , "빅데이터 활용에 영향을 미치는 개인정보 규제요인과 데이터 결합요인의 탐색," 정보보호학회논문지, 30(2), pp. 287-304, Apr. 2020.    DOI