Personal information protection management system for genome data

Abstract

To provide a personal information protection management system for genome data that can prevent leakage of confidential information.SOLUTION: In a genome data utilization system including a personal information protection management system for genome data in which one or more input side devices and multiple output destination devices are communicatively connected via a network, a genome data protection transmission device 30 includes a data storage unit 20 in which genome data is stored, a role storage unit 31 in which a role, which is filtering contents for removing a portion that cannot be output from the genome data, and an ID of a data output destination are stored in association with each other, a filter unit 35 that filters the genome data based on the role, and a data output unit 36 that outputs the filtered genome data to the data output destination. The filter unit 35 acquires a data request signal transmitted from the data output destination, and filters the genome data based on the role associated with an ID included in the data request signal.SELECTED DRAWING: Figure 4

Description

[Technical field]

[0001] The present invention relates to a technology for utilizing genome data while protecting personal information. [Background technology]

[0002] Currently, high-speed implementation using dedicated hardware is widely used in genome analysis. In such hardware, genome data is stored in a FASTQ format including quality scores and sequence information. In addition, the genome data is converted into a VCF (Variant Call Format) format including mutations in sequence information and location information of the mutations, for example, and provided to an analysis device or the like in the VCF format via an Internet line or the like. [Prior art documents] [Non-patent literature]

[0003] [Non-Patent Document 1] https: / / jp.illumina.com / products / by-type / informatics-products / basespace-sequence-hub / apps / dragen-germline.html Search date June 22, 2021 Summary of the Invention [Problem to be solved by the invention]

[0004] Genomic data converted to VCF format also includes information such as displacements that are not subject to analysis. Genomic data that is not subject to analysis is personal information that should be kept confidential, and it is desirable to prevent the leakage of such information.

[0005] The present invention has been made in consideration of the above-mentioned points, and an object of the present invention is to provide a personal information protection management system for genome data that is capable of preventing leakage of confidential information. [Means for solving the problem]

[0006] In order to solve the above-mentioned problems, the personal information protection management system for genome data of the present invention comprises a data storage unit in which genome data is stored, a role storage unit in which a role, which is the content of filtering for removing parts that cannot be output from the genome data, and an ID of a data output destination are stored in association with each other, a filter unit that filters the stored genome data based on the stored role, and a data output unit that outputs the filtered genome data to the data output destination, and the filter unit is configured to acquire a data request signal transmitted from the data output destination and filter the genome data based on the role associated with the ID included in the acquired data request signal. Effect of the Invention

[0007] According to the present invention, by filtering genome data depending on the data transmission destination, it is possible to transmit genome data while protecting personal information, and prevent leakage of confidential information. [Brief description of the drawings]

[0008] [Figure 1] FIG. 1 is a block diagram illustrating a genome data utilization system according to an embodiment of the present invention. [Diagram 2] FIG. 2 is a block diagram illustrating an input device of FIG. 1. [Diagram 3] FIG. 2 is a block diagram illustrating a data storage unit of FIG. 1. [Figure 4] FIG. 2 is a block diagram showing a schematic diagram of the genome data protection and transmission device of FIG. 1. [Diagram 5] FIG. 2 is a block diagram illustrating the output destination device of FIG. 1. [Figure 6] 1 is a flowchart for explaining an example of the operation of a genome data utilization system according to an embodiment of the present invention. [Figure 7] 1 is a flowchart for explaining an example of the operation of a genome data utilization system according to an embodiment of the present invention. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0009] DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS An embodiment of the present invention will be described in detail with reference to the drawings. In the following description, the same elements are designated by the same reference numerals, and duplicated description will be omitted.

[0010] As shown in Figure 1, a genome data utilization system 1 according to an embodiment of the present invention comprises one or more input devices 10, a plurality of output destination devices 40, and a personal information protection management system 2 for genome data that is communicatively connected to these devices via a network NW.

[0011] <Input side device> The input device 10 is provided in, for example, a hospital or the like, and transmits genome data generated by analyzing a sample containing genes to the genome data personal information protection management system 2. As shown in FIG. 2, the input device 10 includes an operation unit 11, a display unit 12, and a control unit 13.

[0012] The operation unit 11 is composed of a keyboard, a mouse, a touch panel, etc., and outputs the results of operations performed by a user to the control unit 13. The display unit 12 is composed of a display, etc., and displays images, etc. under the control of the control unit 13.

[0013] The control unit 13 is composed of a CPU (Central Processing Unit), a ROM (Read-Only Memory), a RAM (Random Access Memory), an input / output circuit, etc. The control unit 13 controls the operation unit 11 and the display unit 12, and transmits data to the genome data personal information protection management system 2 via the network NW.

[0014] In this embodiment, the control unit 13 generates genome data based on the operation result of the operation unit 11, and acquires genome data generated by other analysis devices. The genome data includes an individual's ID and base sequence information. The control unit 13 converts the genome data into a FASTQ format, quantum-encrypts (for example, Vernam encryption) the genome data converted into the FASTQ format, and generates a quantum key for decrypting the quantum-encrypted genome data. The genome data converted into the FASTQ format includes an individual's ID, base sequence information, and a quality score indicating the reliability of the base in the sequence information. The control unit 13 also transmits the quantum-encrypted genome data in the FASTQ format and the generated quantum key to the genome data personal information protection management system 2 via the network NW. Here, the control unit 13 performs authentication with the genome data personal information protection management system 2 by using Wegman-Carter authentication, thereby ensuring information-theoretic security.

[0015] <Personal information protection management system for genome data> 1, the genome data personal information protection management system 2 includes a data storage unit 20 in which genome data is stored, a role storage unit 31 in which a role, which is the content of filtering for removing parts that cannot be output from the genome data, and an ID of a data output destination are stored in association with each other, a filter unit 35 that filters the stored genome data based on the stored role, and a data output unit 36 ​​that outputs the filtered genome data to the data output destination. In addition, the filter unit 35 acquires a data request signal transmitted from the data output destination, and filters the genome data based on the role associated with the ID included in the acquired data request signal.

[0016] That is, the genome data personal information protection management system 2 stores and manages the quantum encrypted genome data and the quantum key transmitted from the input side device 10. The genome data personal information protection management system 2 also decrypts the managed genome data using the quantum key, and transmits the decrypted genome data to the output destination device 40 with the personal information protected. The data storage unit 20 and genome data protection transmission device 30 provided in the genome data personal information protection management system 2 will be described below. Note that in this embodiment, the role storage unit 31, the filter unit 35, and the data output unit 36 ​​will be described as being provided in the genome data protection transmission device 30.

[0017] The data storage unit 20 is composed of a plurality of servers 21 connected by a quantum cryptography network, and genome data is stored in the plurality of servers 21 after being secretly shared by a secret sharing method. The genome data personal information protection management system 2 includes a data decryption unit 33 that combines and decrypts the secretly shared genome data, and a filter unit 35 filters the decrypted genome data based on the stored role. In this embodiment, the data decryption unit 33 will be described as being included in the genome data protection transmission device 30.

[0018] <Data storage unit> As shown in FIG. 3, the data storage unit 20 includes a plurality of servers 21 that are connected to each other so that they can communicate with each other via a quantum cryptography network. The quantum cryptography network provides the plurality of servers 21 with a connection via a line that allows information-theoretically secure communication. The data storage unit 20 receives quantum-encrypted genome data transmitted by the control unit 11 of the input side device 10, secretly shares the received decrypted genome data by a secret sharing method, and stores the data in the plurality of servers 21. The secretly shared genome data includes an individual's ID, base sequence information, and a part of the quality score in a quantum-encrypted state. That is, one person's genome data is distributed and stored in the plurality of servers 21 in a quantum-encrypted state. In other words, one server 21 stores a part of one person's genome data in a quantum-encrypted state.

[0019] Quantum encrypted and secretly shared genome data cannot be restored unless all data is collected and decrypted, making it resistant to cyber attacks.

[0020] In this embodiment, the data storage unit 20 performs exclusive OR-based secret sharing. For example, in (2.3) secret sharing, when the secret data Q=Q1·Q2, the data storage unit 20 prepares a random number R=R1·R2 having the same number of bits as the secret data Q, and sets shares A=A1·A2=(Q1+R1)·(Q2+R2+R1), B=B1·B2=(Q1+R1+R2), and C=C1·C2=R1·R2. Here, "·" indicates concatenation, and the concatenated data size is the same. Also, "+" indicates exclusive OR. That is, shares A, B, and C, which are secretly shared genome data, are stored in different servers 21 with IDs assigned. Such secret sharing can be handled by any of the multiple servers 21 in the data storage unit 20, or by the genome data protection transmission device 30 described later.

[0021] <Genome data protection transmission device> As shown in Fig. 1, the genome data protection transmission device 30 is a device (server) that transmits genome data stored in a data storage unit 20 to an output destination device 40 with personal information protected. The genome data protection transmission device 30 is composed of a CPU (Central Processing Unit), a ROM (Read-Only Memory), a RAM (Random Access Memory), an input / output circuit, etc. As shown in Fig. 4, the genome data protection transmission device 30 includes a role storage unit 31, a quantum key storage unit 32, a data decryption unit 33, a data conversion unit 34, a filter unit 35, and a data output unit 36 ​​as functional units.

[0022] <Role Memory Unit> The role storage unit 31 previously stores the ID of the output destination (output destination device 40) and a role indicating the content of filtering in association with each other. The role is information indicating which part of the genome data is to be left and which part is to be removed by filtering, for example, location information indicating the part of the sequence information that should be transmitted to the output destination (or the part that should not be transmitted and should be removed).

[0023] ≪Quantum key storage unit≫ The quantum key storage unit 32 stores the quantum key transmitted by the control unit 13 of the input side device 10 .

[0024] <Data Decoding Section> The data decryption unit 33 reads out the genome data secretly shared among the multiple servers 21 and combines the read out genome data that has been secretly shared. The data decryption unit 33 decrypts the combined genome data using the quantum key stored in the quantum key storage unit 32, and outputs the decrypted genome data to the data conversion unit 34. In detail, the data decryption unit 33 restores the genome data by combining data having the same individual ID based on the individual ID included in the secretly shared genome data. In addition, the data decryption unit 33 reads out a quantum key including an ID identical to the ID included in the genome data (an individual ID or an ID assigned at the time of secret sharing) from the quantum key storage unit 32, and decrypts the genome data using the read out quantum key.

[0025] In this embodiment, the data decryption unit 33 assigns the ID assigned to the secret shared genome data to a quantum key having the same individual ID as the individual ID of the genome data. The data decryption unit 33 also acquires at least two pieces of secret shared genome data having the same ID as the ID assigned to the quantum key, i.e., shares A, B, and C, from the storage unit 20, and decrypts the genome data based on the acquired shares.

[0026] <Data Conversion Section> The data conversion unit 34 acquires the decoded genome data output from the data decoding unit 33, converts the acquired genome data from FASTQ format to VCF (Variant Call Format) format, and outputs the genome data converted to the VCF format to the filter unit 34. The genome data converted to the VCF format includes an individual's ID, sequence information of a site where a mutation has occurred, and location information of the mutation. Here, the location information of the mutation is information indicating where the site where the mutation has occurred is in the entire sequence information. The data conversion unit 34 judges the mutation in the decoded genome data in the FASTQ format by comparing pre-stored reference genome data in the FASTQ format (normal sequence information and / or sequence information where a mutation has occurred) with the decoded genome data in the FASTQ format, and generates genome data in the VCF format based on the judgment result. The genome data in the VCF format includes sequence information of a site where a mutation has occurred and location information of the mutation among the entire sequence information of an individual, and does not include sequence information of a normal (non-mutated) site. Therefore, VCF format genomic data contains sequence information of the site where a mutation has occurred and information about the location of the mutation, and has sequence information of normal sites removed, and contains less data than FASTQ format genomic data.

[0027] <Filter section> The filter unit 35 acquires the genome data in the VCF format output from the data conversion unit 34, filters the acquired genome data based on the role stored in the role storage unit 31, and outputs the filtered genome data to the data output unit 36. In detail, the filter unit 35 reads out from the role storage unit 31 a role associated with the ID of the output destination that is the same as the ID of the output destination (output destination device 40) included in the genome data request signal, and filters the genome data in the VCF format based on the role that has been read out.

[0028] The filtered genome data is mutation information of the VCF format genome data at the locations to be sent to the output destination, does not contain any information that can identify an individual, such as an individual's ID, and is composed of information necessary for the output destination device 40 (e.g., independent SNP data for less than 40 locations).

[0029] <Data output section> The data output unit 36 ​​outputs (transmits) the filtered genome data output from the filter unit 35 to the output destination device 40 via the network NW. In this embodiment, the data output unit 36 ​​quantum encrypts the filtered genome data, and transmits the quantum encrypted and filtered genome data and a quantum key for decrypting the quantum encrypted genome data to the corresponding output destination device 40 via the network NW.

[0030] Such a genome data protection and transmission device 30 is implemented as a device (server) separate from the server 21 of the data storage unit 20, thereby reducing computational resources and not storing genome data except when the genome data is being protected and transmitted, thereby improving resistance to cyber attacks.

[0031] <Output device> As shown in Fig. 1, the output destination device 40 is provided in, for example, a research institute, a pharmaceutical company, etc., and acquires genome data in a state in which personal information is protected. The acquired genome data is analyzed for the development of new drugs, treatment methods, etc. As shown in Fig. 5, the output destination device 40 includes an operation unit 41, a display unit 42, and a control unit 43.

[0032] The operation unit 41 is composed of a keyboard, a mouse, a touch panel, etc., and outputs the results of operations performed by the user to the control unit 43. The display unit 42 is composed of a display, etc., and displays images, etc. under the control of the control unit 43.

[0033] The control unit 43 is composed of a CPU (Central Processing Unit), a ROM (Read-Only Memory), a RAM (Random Access Memory), an input / output circuit, etc. The control unit 43 controls the operation unit 41 and the display unit 42, and receives data from the genome data personal information protection management system 2 via the network NW.

[0034] In this embodiment, the control unit 43 receives the quantum encrypted and filtered genome data (VCF format) and the quantum key transmitted by the data output unit 36 ​​of the genome data protection and transmission device 30. The control unit 43 obtains the filtered genome data (VCF format) by decrypting the quantum encrypted genome data using the received quantum key.

[0035] <Example of operation> Next, an example of the operation of the genome data utilization system 1 according to the embodiment of the present invention will be described with reference to a flowchart.

[0036] <Genomic data management> As shown in Fig. 6, the control unit 13 of the input side device 10 converts genome data into the FASTQ format (step S1). Then, the control unit 13 quantum-encrypts the genome data converted into the FASTQ format and generates a quantum key (step S2). Then, the control unit 13 uses Wegman-Carter authentication to authenticate with the genome data personal information protection management system 2 and establishes an information-theoretically secure communication connection (step S3). Then, the control unit 13 transmits the quantum-encrypted genome data and the quantum key to the genome data personal information protection management system 2 (step S4).

[0037] Next, the data storage unit 20 of the genome data personal information protection management system 2 receives the quantum encrypted genome data, secret shares the received genome data using a secret sharing method, and stores the data in the multiple servers 21 (step S5). Also, the data decryption unit 33 of the genome data protection transmission device 30 of the genome data personal information protection management system 2 receives the quantum key, and stores the received quantum key in the quantum key storage unit 32 (step S6). Steps S5 and S6 may be performed simultaneously, or step S6 may be performed first.

[0038] <Protective transmission of genomic data> 7, the control unit 43 of the output destination device 40 generates a genome data request signal based on the result of the operation of the operation unit 41 by the user (step S11). Next, the control unit 43 performs authentication with the genome data personal information protection management system 2 using Wegman-Carter authentication, and establishes an information theoretically secure communication connection (step S12). Next, the control unit 43 transmits the genome data request signal to the genome data personal information protection management system 2 (step S13).

[0039] Next, the data decryption unit 33 of the genome data protection transmission device 30 receives the genome data request signal and reads out the secret shared and quantum encrypted genome data stored in the data storage unit 20. Next, the data decryption unit 33 combines the read genome data to restore the quantum encrypted genome data, and decrypts the quantum encrypted genome data using the quantum key stored in the quantum key storage unit 32 to restore the genome data in the FASTQ format (step S14). Next, the data conversion unit 34 converts the genome data in the FAST format into the VCF format (step S15). Next, the filter unit 35 filters the genome data in the VCF format using the role stored in the role storage unit 31 (step S16). Next, the data output unit 36 ​​quantum encrypts the filtered genome data in the VCF format and generates a quantum key (step S17). Next, the data output unit 36 ​​transmits the quantum encrypted filtered genome data and the quantum key to the corresponding output destination device 40 (step S18).

[0040] Next, the control unit 43 of the destination device 40 receives the quantum encrypted genome data and the quantum key, and restores the filtered VCF format genome data by decrypting the quantum encrypted genome data using the quantum key (step S19).

[0041] The personal information protection management system 2 for genome data according to an embodiment of the present invention has the above-described configuration, and the filter unit 36 ​​acquires a data request signal transmitted from the data output destination and filters the genome data based on the role associated with the ID. Therefore, the personal information protection management system 2 for genome data enables genome data to be transmitted while protecting personal information by filtering genome data according to the data transmission destination, thereby preventing the leakage of confidential information.

[0042] In addition, the personal information protection management system 2 for genome data is provided with a data decryption unit 33 that combines and decrypts the secretly shared genome data, and a filter unit 35 filters the decrypted genome data based on the stored role. Therefore, the genome data personal information protection management system 2 can improve resistance to cyber attacks by storing genome data in a secret sharing manner. Also, the genome data personal information protection management system 2 can improve resistance to cyber attacks by implementing the data decryption unit 33, filter unit 35, data output unit 36, etc. as a device separate from the server 21 in which the genome data is stored, thereby shortening the time that the decrypted genome data exists in the separate device.

[0043] In addition, the personal information protection management system 2 for genome data is provided with a data conversion unit 34 that converts the decrypted genome data from the FASTQ format to a VCF format that includes sequence information of the site where a mutation has occurred and location information of the mutation, and outputs the genome data converted into the VCF format to a filter unit 35. Therefore, the genome data personal information protection management system 2 can provide genome data to a data output destination in a format that is small in data volume and suitable for analysis.

[0044] The data output destination and the data output unit 36 ​​are communicatively connected to each other using authentication, and the data output unit 36 ​​quantum encrypts the filtered genome data and generates a quantum key for decrypting the quantum encrypted genome data, and transmits the quantum encrypted genome data and the quantum key to the authenticated data output destination. Therefore, the genome data personal information protection management system 2 can provide genome data to a data output destination while ensuring information-theoretic security.

[0045] Although the embodiment of the present invention has been described above, the present invention is not limited to the above embodiment, and can be modified as appropriate without departing from the gist of the present invention. For example, the data storage unit 20 may store genome data before being converted into the FASTQ format, and the data conversion unit 34 may convert the genome data into the FASTQ format and further convert the genome data converted into the FASTQ format into the VCF format. [Explanation of symbols]

[0046] 2 Personal information protection management system for genomic data 20 Data storage unit 31 Role Memory Unit 33 Data Decoding Section 34 Data conversion section 35 Filter section 36 Data output section 40 Output device (data output destination)

Claims

1. a data storage unit in which genome data is stored; a role storage unit in which a role, which is a filtering content for removing a portion that cannot be output from the genome data, and a data output destination ID are stored in association with each other; A filter unit that filters the stored genome data based on the stored role; a data output unit that outputs the filtered genome data to the data output destination; Equipped with The filter unit acquires a data request signal transmitted from the data output destination, and filters the genome data based on the role associated with the ID included in the acquired data request signal. A personal information protection management system for genome data.

2. The data storage unit is composed of a plurality of servers connected by a quantum cryptography network, The genome data is stored in the plurality of servers in a secret sharing manner by a secret sharing method, a data decryption unit that combines and decrypts the secret shared genome data, The filter unit filters the decrypted genome data based on the stored role. The personal information protection management system for genome data according to claim 1 .

3. The genome data is stored in the plurality of servers in a FASTQ format including quality scores and sequence information; and a data conversion unit that converts the decoded genome data into a VCF format including sequence information of a site where a mutation has occurred and location information of the mutation, and outputs the genome data converted into the VCF format to the filter unit. The personal information protection management system for genome data according to claim 2 .

4. the data output destination and the data output unit are communicatively connected to each other using authentication, The data output unit quantum-encrypts the filtered genome data, generates a quantum key for decrypting the quantum-encrypted genome data, and transmits the quantum-encrypted genome data and the quantum key to the authenticated data output destination. The personal information protection management system for genome data according to any one of claims 1 to 3.

Images