Personal information protection management system for genome data

Abstract

To provide a personal information protection management system for genome data that can prevent leakage of confidential information.SOLUTION: In a genome data utilization system including a personal information protection management system for genome data in which one or more input side devices and multiple output destination devices are communicatively connected via a network, a genome data protection transmission device 30 includes a data storage unit 20 in which genome data is stored, a role storage unit 31 in which a role, which is filtering contents for removing a portion that cannot be output from the genome data, and an ID of a data output destination are stored in association with each other, a filter unit 35 that filters the genome data based on the role, and a data output unit 36 that outputs the filtered genome data to the data output destination. The filter unit 35 acquires a data request signal transmitted from the data output destination, and filters the genome data based on the role associated with an ID included in the data request signal.SELECTED DRAWING: Figure 4

Description

[Technical Field]

[0001] The present invention relates to a technology for utilizing genome data while protecting personal information. [Background technology]

[0002] Currently, high-speed implementation using dedicated hardware is widely used in genome analysis. In such hardware, genome data is stored in FASTQ format, which includes quality scores and sequence information. Furthermore, the genome data is converted into, for example, Variant Call Format (VCF), which includes information on mutations in the sequence information and the locations of the mutations, and provided to an analyzer or the like in VCF format via an internet connection or the like. [Prior art documents] [Non-patent literature]

[0003] [Non-Patent Document 1] https: / / jp.illumina.com / products / by-type / informatics-products / basespace-sequence-hub / apps / dragen-germline.html Search date June 22, 2021 Summary of the Invention [Problem to be solved by the invention]

[0004] Genomic data converted to VCF format also includes information such as mutations that are not subject to analysis. Genomic data that is not subject to analysis is personal information that must be kept confidential, and it is desirable to prevent the leakage of such information.

[0005] The present invention has been made in view of the above points, and an object of the present invention is to provide a personal information protection management system for genome data that can prevent leakage of confidential information. [Means for solving the problem]

[0006] In order to solve the above-mentioned problems, the personal information protection management system for genome data of the present invention is As FASTQ format containing quality scores and sequence information a role storage unit in which a role, which is the content of filtering for removing portions that cannot be output from the genome data, and an ID of a data output destination are stored in association with each other; a data conversion unit that converts the genome data stored in FASTQ format into a VCF format that includes sequence information of a site where a mutation has occurred and location information of the mutation; Based on the stored role, Converted to VCF format a filter unit that filters the genome data; and a data output unit that outputs the filtered genome data to the data output destination, wherein the filter unit acquires a data request signal transmitted from the data output destination, and based on the role associated with the ID included in the acquired data request signal, Converted to VCF format The genome data is filtered. [Effects of the Invention]

[0007] According to the present invention, by filtering genome data depending on the data transmission destination, it is possible to transmit genome data while protecting personal information, and to prevent leakage of confidential information. [Brief explanation of the drawings]

[0008] [Figure 1] 1 is a block diagram schematically illustrating a genome data utilization system according to an embodiment of the present invention. [Figure 2] FIG. 2 is a block diagram schematically illustrating the input side device of FIG. 1. [Figure 3] FIG. 2 is a block diagram schematically illustrating the data storage unit of FIG. 1. [Figure 4] FIG. 2 is a block diagram showing a schematic diagram of the genome data protection and transmission device of FIG. 1. [Figure 5] FIG. 2 is a block diagram schematically illustrating the output destination device of FIG. 1. [Figure 6] 1 is a flowchart illustrating an example of the operation of a genome data utilization system according to an embodiment of the present invention. [Figure 7]1 is a flowchart illustrating an example of the operation of a genome data utilization system according to an embodiment of the present invention. DETAILED DESCRIPTION OF THE INVENTION

[0009] DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0021] The present invention will be described in detail with reference to the accompanying drawings. In the following description, the same elements are designated by the same reference numerals, and redundant description will be omitted.

[0010] As shown in Figure 1, a genome data utilization system 1 according to an embodiment of the present invention comprises one or more input devices 10, a plurality of output devices 40, and a personal information protection management system 2 for genome data that is communicatively connected to these devices via a network NW.

[0011] <Input device> The input device 10 is installed in, for example, a hospital, and transmits genome data generated by analyzing a specimen containing genes to the genome data personal information protection management system 2. As shown in FIG. 2 , the input device 10 includes an operation unit 11, a display unit 12, and a control unit 13.

[0012] The operation unit 11 is composed of a keyboard, a mouse, a touch panel, etc., and outputs the results of operations performed by the user to the control unit 13. The display unit 12 is composed of a display, etc., and displays images, etc. under the control of the control unit 13.

[0013] The control unit 13 is composed of a CPU (Central Processing Unit), a ROM (Read-Only Memory), a RAM (Random Access Memory), an input / output circuit, etc. The control unit 13 controls the operation unit 11 and the display unit 12, and transmits data to the personal information protection management system for genome data 2 via the network NW.

[0014] In this embodiment, the control unit 13 generates genome data based on the operation result of the operation unit 11, or acquires genome data generated by another analysis device. The genome data includes an individual's ID and base sequence information. The control unit 13 converts the genome data into FASTQ format, quantum-encrypts the FASTQ-formatted genome data (e.g., Vernam encryption), and generates a quantum key for decrypting the quantum-encrypted genome data. The FASTQ-formatted genome data includes the individual's ID, base sequence information, and a quality score indicating the reliability of the bases in the sequence information. The control unit 13 also transmits the quantum-encrypted FASTQ-formatted genome data and the generated quantum key to the genome data personal information protection management system 2 via the network NW. Here, the control unit 13 authenticates with the genome data personal information protection management system 2 using Wegman-Carter authentication to ensure information-theoretic security.

[0015] <Personal information protection management system for genome data> 1, the genome data personal information protection management system 2 includes a data storage unit 20 for storing genome data, a role storage unit 31 for storing roles, which are filtering details for removing portions that cannot be output from the genome data, and the ID of a data output destination in association with each other, a filter unit 35 for filtering the stored genome data based on the stored roles, and a data output unit 36 ​​for outputting the filtered genome data to the data output destination. The filter unit 35 also acquires a data request signal transmitted from the data output destination, and filters the genome data based on the role associated with the ID included in the acquired data request signal.

[0016] That is, the genome data personal information protection management system 2 stores and manages quantum-encrypted genome data and the quantum key transmitted from the input side device 10. The genome data personal information protection management system 2 also decrypts the managed genome data using the quantum key and transmits the decrypted genome data to the output destination device 40 with the personal information protected. Below, the data storage unit 20 and genome data protection transmission device 30 provided in the genome data personal information protection management system 2 will be described. Note that in this embodiment, the role storage unit 31, filter unit 35, and data output unit 36 ​​will be described as being provided in the genome data protection transmission device 30.

[0017] The data storage unit 20 is composed of multiple servers 21 connected by a quantum cryptography network, and genome data is secretly shared and stored in the multiple servers 21 using a secret sharing scheme. The genome data personal information protection management system 2 includes a data decryption unit 33 that combines and decrypts the secretly shared genome data, and a filter unit 35 that filters the decrypted genome data based on the stored role. In this embodiment, the data decryption unit 33 will be described as being included in the genome data protection and transmission device 30.

[0018] <Data storage unit> As shown in FIG. 3 , the data storage unit 20 includes a plurality of servers 21 communicably connected to each other via a quantum cryptography network. The quantum cryptography network provides the plurality of servers 21 with connections via lines that enable information-theoretically secure communication. The data storage unit 20 receives quantum-encrypted genome data transmitted by the control unit 11 of the input-side device 10, secret-shares the received decrypted genome data using a secret sharing scheme, and stores the data in the plurality of servers 21. The secret-shared genome data includes an individual's ID, base sequence information, and part of the quality score in a quantum-encrypted state. That is, one person's genome data is distributed and stored across the plurality of servers 21 in a quantum-encrypted state. In other words, one server 21 stores part of one person's genome data in a quantum-encrypted state.

[0019] Quantum encrypted and secretly shared genome data cannot be restored unless all data is decrypted, making it resistant to cyber attacks.

[0020] In this embodiment, the data storage unit 20 performs exclusive-OR-based secret sharing. For example, in (2.3) secret sharing, if secret data Q = Q1·Q2, the data storage unit 20 prepares a random number R = R1·R2 with the same number of bits as the secret data Q, and sets shares A = A1·A2 = (Q1+R1)·(Q2+R2+R1), B = B1·B2 = (Q1+R1+R2), and C = C1·C2 = R1·R2. Here, "·" indicates concatenation, and the concatenated data sizes are the same. Also, "+" indicates exclusive-OR. That is, shares A, B, and C, which are secret-shared genome data, are stored in separate servers 21 with IDs assigned. Such secret sharing can be handled by any of the multiple servers 21 in the data storage unit 20 or by the genome data protection transmission device 30, which will be described later.

[0021] <Genome data protection transmission device> As shown in Fig. 1, the genome data protection transmission device 30 is a device (server) that transmits genome data stored in a data storage unit 20 to an output destination device 40 while protecting personal information. The genome data protection transmission device 30 is composed of a CPU (Central Processing Unit), a ROM (Read-Only Memory), a RAM (Random Access Memory), an input / output circuit, etc. As shown in Fig. 4, the genome data protection transmission device 30 includes, as functional units, a role storage unit 31, a quantum key storage unit 32, a data decryption unit 33, a data conversion unit 34, a filter unit 35, and a data output unit 36.

[0022] <Role Memory> The ID of the output destination (output destination device 40) and a role indicating the content of filtering are stored in advance in association with each other in the role storage unit 31. The role is information indicating which part of the genome data information should be retained and which part of the genome data information should be removed by filtering, and is, for example, location information indicating the location in the sequence information that should be transmitted to the output destination (or the location that should not be transmitted but should be removed).

[0023] <Quantum Key Storage Unit> The quantum key storage unit 32 stores the quantum key transmitted by the control unit 13 of the input side device 10 .

[0024] <Data Decoding Unit> The data decryption unit 33 reads out the genome data that has been secretly shared among the multiple servers 21 and combines the read out secretly shared genome data. The data decryption unit 33 decrypts the combined genome data using the quantum key stored in the quantum key storage unit 32 and outputs the decrypted genome data to the data conversion unit 34. In detail, the data decryption unit 33 restores the genome data by combining data with the same individual ID based on the individual ID included in the secretly shared genome data. Furthermore, the data decryption unit 33 reads out from the quantum key storage unit 32 a quantum key that includes the same ID as the ID included in the genome data (the individual ID or the ID assigned during secret sharing), and decrypts the genome data using the read out quantum key.

[0025] In this embodiment, the data decryption unit 33 assigns the ID assigned to the secret shared genome data to a quantum key having the same individual ID as the individual ID of the genome data. The data decryption unit 33 also acquires from the storage unit 20 the secret shared genome data having the same ID as the ID assigned to the quantum key, i.e., at least two of shares A, B, and C, and decrypts the genome data based on the acquired shares.

[0026] <Data Conversion Section> The data conversion unit 34 acquires the decoded genome data output from the data decoding unit 33, converts the acquired genome data from FASTQ format to VCF (Variant Call Format), and outputs the VCF-formatted genome data to the filter unit 34. The VCF-formatted genome data includes an individual's ID, sequence information of the mutation site, and location information of the mutation. Here, the mutation location information indicates the location of the mutation site in the entire sequence information. The data conversion unit 34 compares pre-stored reference FASTQ-formatted genome data (normal sequence information and / or sequence information with a mutation) with the decoded FASTQ-formatted genome data to determine mutations in the decoded FASTQ-formatted genome data, and generates VCF-formatted genome data based on the determination result. The VCF-formatted genome data includes sequence information of the mutation site and location information of the mutation within the individual's entire sequence information, but does not include sequence information of normal (non-mutated) sites. Therefore, VCF format genome data contains sequence information of the site where a mutation has occurred and information on the location of the mutation, and is genome data from which sequence information of normal sites has been removed, and the amount of data is smaller than that of FASTQ format genome data.

[0027] <Filter section> The filter unit 35 acquires the genome data in VCF format output from the data conversion unit 34, filters the acquired genome data based on the role stored in the role storage unit 31, and outputs the filtered genome data to the data output unit 36. In detail, the filter unit 35 reads out from the role storage unit 31 the role associated with the ID of the output destination that is the same as the ID of the output destination (output destination device 40) included in the genome data request signal, and filters the genome data in VCF format based on the read role.

[0028] The filtered genome data is mutation information of the VCF format genome data at the locations to be sent to the output destination, does not include information that can identify an individual, such as an individual's ID, and is composed of information necessary for the output destination device 40 (for example, independent SNP data for less than 40 locations).

[0029] <Data output section> The data output unit 36 ​​outputs (transmits) the filtered genome data output from the filter unit 35 to the output destination device 40 via the network NW. In this embodiment, the data output unit 36 ​​quantum-encrypts the filtered genome data, and transmits the quantum-encrypted and filtered genome data and a quantum key for decrypting the quantum-encrypted genome data to the corresponding output destination device 40 via the network NW.

[0030] Such a genome data protection and transmission device 30 is implemented as a device (server) separate from the server 21 of the data storage unit 20, thereby reducing computational resources and not storing genome data except when the genome data is being protected and transmitted, thereby improving resistance to cyber attacks.

[0031] <Output device> As shown in Fig. 1, the output destination device 40 is installed in, for example, a research institute, a pharmaceutical company, etc., and acquires genome data while protecting personal information. The acquired genome data is analyzed for the development of new drugs, treatment methods, etc. As shown in Fig. 5, the output destination device 40 includes an operation unit 41, a display unit 42, and a control unit 43.

[0032] The operation unit 41 is composed of a keyboard, a mouse, a touch panel, etc., and outputs the results of operations performed by the user to the control unit 43. The display unit 42 is composed of a display, etc., and displays images, etc. under the control of the control unit 43.

[0033] The control unit 43 is composed of a CPU (Central Processing Unit), a ROM (Read-Only Memory), a RAM (Random Access Memory), an input / output circuit, etc. The control unit 43 controls the operation unit 41 and the display unit 42, and receives data from the personal information protection management system for genome data 2 via the network NW.

[0034] In this embodiment, the control unit 43 receives the quantum encrypted and filtered genome data (VCF format) and the quantum key transmitted by the data output unit 36 ​​of the genome data protection and transmission device 30. The control unit 43 obtains the filtered genome data (VCF format) by decrypting the quantum encrypted genome data using the received quantum key.

[0035] <Example of operation> Next, an example of the operation of the genome data utilization system 1 according to the embodiment of the present invention will be described with reference to a flowchart.

[0036] <Genomic data management> 6, the control unit 13 of the input side device 10 converts the genome data into the FASTQ format (step S1). Next, the control unit 13 quantum-encrypts the genome data converted into the FASTQ format and generates a quantum key (step S2). Next, the control unit 13 uses Wegman-Carter authentication to authenticate with the genome data personal information protection management system 2 and establishes an information-theoretically secure communication connection (step S3). Next, the control unit 13 transmits the quantum-encrypted genome data and the quantum key to the genome data personal information protection management system 2 (step S4).

[0037] Next, the data storage unit 20 of the genome data personal information protection management system 2 receives the quantum encrypted genome data, secret shares the received genome data using a secret sharing scheme, and stores the data in multiple servers 21 (step S5). Furthermore, the data decryption unit 33 of the genome data protection and transmission device 30 of the genome data personal information protection management system 2 receives the quantum key and stores the received quantum key in the quantum key storage unit 32 (step S6). Steps S5 and S6 may be performed simultaneously, or step S6 may be performed first.

[0038] <Protected transmission of genomic data> 7, the control unit 43 of the output destination device 40 generates a genome data request signal based on the result of the user's operation of the operation unit 41 (step S11). Next, the control unit 43 performs authentication with the genome data personal information protection management system 2 using Wegman-Carter authentication, and establishes an information-theoretically secure communication connection (step S12). Next, the control unit 43 transmits the genome data request signal to the genome data personal information protection management system 2 (step S13).

[0039] Next, the data decryption unit 33 of the genome data protection and transmission device 30 receives the genome data request signal and reads out the secret-shared and quantum-encrypted genome data stored in the data storage unit 20. The data decryption unit 33 then combines the read genome data to restore the quantum-encrypted genome data, and decrypts the quantum-encrypted genome data using the quantum key stored in the quantum key storage unit 32 to restore the genome data in FASTQ format (step S14). The data conversion unit 34 then converts the FAST-format genome data into VCF format (step S15). The filter unit 35 then filters the VCF-format genome data using the role stored in the role storage unit 31 (step S16). The data output unit 36 ​​then quantum-encrypts the filtered VCF-format genome data and generates a quantum key (step S17). The data output unit 36 ​​then transmits the quantum-encrypted, filtered genome data and the quantum key to the corresponding output destination device 40 (step S18).

[0040] Next, the control unit 43 of the destination device 40 receives the quantum encrypted genome data and the quantum key, and restores the filtered VCF format genome data by decrypting the quantum encrypted genome data using the quantum key (step S19).

[0041] The personal information protection management system 2 for genome data according to an embodiment of the present invention has the above-described configuration, and the filter unit 36 ​​acquires a data request signal sent from the data output destination and filters the genome data based on the role associated with the ID. Therefore, the personal information protection management system 2 for genome data filters genome data according to the data transmission destination, enabling genome data to be transmitted while protecting personal information and preventing the leakage of confidential information.

[0042] In addition, the personal information protection management system 2 for genome data includes a data decryption unit 33 that combines and decrypts the secretly shared genome data, and a filter unit 35 that filters the decrypted genome data based on the stored role. Therefore, by storing genome data in a secret sharing manner, the genome data personal information protection management system 2 can improve its resistance to cyber attacks. Also, by implementing the data decryption unit 33, filter unit 35, data output unit 36, etc. as a device separate from the server 21 where the genome data is stored, the genome data personal information protection management system 2 can shorten the time that the decrypted genome data resides in the separate device, thereby improving its resistance to cyber attacks.

[0043] The personal information protection management system 2 for genome data also includes a data conversion unit 34 that converts the decrypted genome data from the FASTQ format to a VCF format that includes sequence information of the site where the mutation occurs and location information of the mutation, and outputs the genome data converted into the VCF format to a filter unit 35. Therefore, the genome data personal information protection management system 2 can provide genome data to the data output destination in a format that is small in data volume and suitable for analysis.

[0044] The data output destination and the data output unit 36 ​​are communicatively connected to each other using authentication, and the data output unit 36 ​​quantum encrypts the filtered genome data, generates a quantum key for decrypting the quantum-encrypted genome data, and transmits the quantum-encrypted genome data and the quantum key to the authenticated data output destination. Therefore, the genome data personal information protection management system 2 can provide genome data to the data output destination while ensuring information-theoretic security.

[0045] Although the embodiments of the present invention have been described above, the present invention is not limited to the above embodiments and can be modified as appropriate without departing from the spirit of the present invention. For example, the data storage unit 20 may store genomic data before conversion to FASTQ format, and the data conversion unit 34 may convert the genomic data into FASTQ format and further convert the genomic data converted to FASTQ format into VCF format. [Explanation of symbols]

[0046] 2 Personal information protection management system for genome data 20 Data storage unit 31 Roll memory unit 33 Data Decoding Unit 34 Data conversion section 35 Filter section 36 Data output section 40 Output device (data output destination)

Claims

1. a data storage unit in which genome data is stored in a FASTQ format including quality scores and sequence information; a role storage unit that stores a role, which is a filtering content for removing a portion that cannot be output from the genome data, and an ID of a data output destination in association with each other; a data conversion unit that converts the genome data stored in FASTQ format into a VCF format that includes sequence information of a site where a mutation has occurred and location information of the mutation; a filter unit that filters the genome data converted into the VCF format based on the stored role; a data output unit that outputs the filtered genome data to the data output destination; Equipped with The filter unit acquires a data request signal transmitted from the data output destination, and filters the genome data converted into the VCF format based on the role associated with the ID included in the acquired data request signal. A personal information protection management system for genome data.

2. the data storage unit is configured by a plurality of servers connected by a quantum cryptography network, The genome data in FASTQ format is secretly shared and stored in the plurality of servers using a secret sharing method; a data decryption unit that combines and decrypts the secret-shared genome data in FASTQ format, The data conversion unit converts the decoded genome data in FASTQ format into VCF format. The personal information protection management system for genome data according to claim 1 .

3. the data output destination and the data output unit are connected to each other so as to be able to communicate with each other using authentication, The data output unit quantum-encrypts the filtered genome data, generates a quantum key for decrypting the quantum-encrypted genome data, and transmits the quantum-encrypted genome data and the quantum key to the authenticated data output destination.

3. The personal information protection management system for genome data according to claim 1 or 2.

Images