Data processing system, data processing device, data processing method, and data processing program

Abstract

In a data processing system 1 comprising a data providing device 10, a data processing device 20, and a data utilization device 30. The data providing device 1 comprises a transmission / reception unit 13 that transmits a plurality of pieces of metadata related to a plurality of pieces of genome information extracted from a plurality of pieces of genome data to the data processing device. The data processing device 20 comprises a metadata management unit 22 that manages the plurality of pieces of metadata, and a genome information processing unit 24 that acquires encrypted genome information corresponding to metadata retrieved from the plurality of pieces of metadata by the data utilization device, and processes the acquired genome information in an isolated execution environment by means of an encrypted processing logic of the data utilization device. The data utilization device 30 comprises a search unit 31 that searches for metadata from the plurality of pieces of metadata, and a transmission / reception unit 32 that transmits the encrypted processing logic for the retrieved metadata to the data processing device and receives a processing result from the data processing device.

Description

Data processing system, data processing device, data processing method, and data processing program

[0001] The present disclosure relates to a data processing system, a data processing device, a data processing method, and a data processing program.

[0002] Pharmaceutical companies want to develop new drugs that maximize the effects according to individuals. Therefore, a method of using the genomic data of individuals held by medical institutions has been proposed (see Non-Patent Documents 1 and 2).

[0003] "Prioritization of Drug Discovery Projects in Pharmaceutical Companies", National Institute of Biomedical Innovation, Health and Nutrition, [online], [searched on September 11, 2024], <URL: https: / / www.cannds.amed.go.jp / _ / media / page / use-case / pdf / use-case_part1.pdf> "Regarding the Start of General Acceptance of the AMED Data Utilization Platform", National Institute of Biomedical Innovation, Health and Nutrition, [online], [searched on September 11, 2024], <URL: https: / / www.kantei.go.jp / jp / singi / kenkouiryou / genome / genome_dai13 / siryou4.pdf>

[0004] However, it has been difficult to screen and safely collect only the necessary information from the genomic data of individuals held by medical institutions.

[0005] The present disclosure has been made in view of the above circumstances, and an object of the present disclosure is to provide a technology that can safely collect only the necessary information from genomic data and contribute to new drug development.

[0006] A data processing system in one aspect of the present disclosure comprises a data providing device, a data processing device, and a data utilization device, wherein the data providing device includes a transmission unit that transmits a plurality of metadata relating to a plurality of genome information extracted from a plurality of genome data to the data processing device, the data processing device includes a metadata management unit that manages the plurality of metadata, and a processing unit that acquires encrypted genome information corresponding to metadata searched by the data utilization device from the plurality of metadata, and processes the acquired genome information in an isolated execution environment using the encrypted processing logic of the data utilization device, and the data utilization device includes a search unit that searches for metadata from the plurality of metadata, and a transmission / reception unit that transmits encrypted processing logic for the searched metadata to the data processing device and receives processing results from the data processing device.

[0007] A data processing device in one aspect of the present disclosure includes a metadata management unit that manages a plurality of metadata relating to a plurality of genome information extracted from a plurality of genome data, and a processing unit that acquires encrypted genome information corresponding to metadata searched by a data utilization device from the plurality of metadata, and processes the acquired genome information in an isolated execution environment using the encrypted processing logic of the data utilization device.

[0008] A data processing method in one aspect of the present disclosure is a data processing method performed by a data processing device, which manages multiple metadata relating to multiple genome information extracted from multiple genome data, obtains encrypted genome information corresponding to metadata searched by a data utilization device from the multiple metadata, and processes the obtained genome information in an isolated execution environment using the encrypted processing logic of the data utilization device.

[0009] A data processing program in one aspect of this disclosure causes a computer to perform the following processes: managing multiple metadata related to multiple genome information extracted from multiple genome data; obtaining encrypted genome information corresponding to metadata searched by a data utilization device from the multiple metadata; and processing the obtained genome information in an isolated execution environment using the encrypted processing logic of the data utilization device.

[0010] According to this disclosure, it is possible to safely collect only the necessary information from genomic data, and this technology can contribute to the development of new drugs.

[0011] This figure shows an example configuration of the data processing system according to this embodiment. This figure shows an example operation of the data processing system according to this embodiment. This figure shows an example hardware configuration of the data processing device.

[0012] Embodiments of this disclosure will be described below with reference to the drawings. In the drawings, the same parts are denoted by the same reference numerals and their descriptions are omitted.

[0013] [Summary of this disclosure] This disclosure involves processing each individual's genome data held by a medical institution into genomic information such as susceptibility to disease, obtaining third-party consent for the provision of genome data exchanged between the individual and the medical institution, and virtually aggregating only the metadata of the genome information in one place.

[0014] Then, when metadata is searched on the aggregated virtual metadata catalog, encrypted genome information related to that metadata is obtained through the metadata catalog, and this encrypted genome information is processed by the pharmaceutical company's encrypted processing logic in a secure, isolated execution environment on a computer.

[0015] This allows healthcare institutions to safely screen and collect only the necessary information from an individual's genomic data. Furthermore, it enables the development of personalized new drugs, something that pharmaceutical companies were unable to achieve due to insufficient data.

[0016] [Configuration of the Data Processing System] Figure 1 is a diagram showing an example configuration of the data processing system 1 according to this embodiment. The data processing system 1 comprises a data providing device 10, a data processing device 20, and a data utilization device 30.

[0017] The data provision device 10 is a computer used by the data provider. The data provider is, for example, a medical institution that provides medical services to individual end users such as patients.

[0018] The data provision device 10 comprises a processing unit 11, a management unit 12, and a transmitting / receiving unit 13.

[0019] The processing unit 11 has the function of processing the end user's genome data into the required genome information. For example, the processing unit 11 extracts genome information from the end user's genome data that represents the end user's susceptibility to diseases.

[0020] The management unit 12 includes functions for managing end-user genome data, for encrypting and managing genome information processed from genome data, and for managing third-party consent information for the provision of genome data exchanged between end-users and medical institutions.

[0021] The transmitting / receiving unit (transmitting unit) 13 includes functions for obtaining genome data and third-party consent information for the provision of said genome data from the end user, transmitting third-party consent information for the provision of genome data to the data processing device 20, transmitting metadata of the genome information to the data processing device 20, and transmitting encrypted genome information to the data processing device 20.

[0022] The data processing device 20 is a data utilization platform for genome data used by a platform provider. A platform provider is a party that provides the data processing device 20 to data providers and data users. The data processing device 20 is located on the internet cloud or on the platform provider's communication network.

[0023] The data processing device 20 comprises a consent information management unit 21, a metadata management unit 22, a consent policy management unit 23, a genome information processing unit 24, and a data store 25.

[0024] The consent information management unit 21 has the function of receiving third-party consent information for the provision of genome data from the data provision device 10 and managing that third-party consent information.

[0025] The metadata management unit 22, assuming that consent information for the provision of genome data to a third party has been obtained in advance, receives and manages metadata of genome information from the data provision device 10, and has the function of generating and managing a virtual metadata list catalog of that metadata.

[0026] The agreement policy management unit 23 has the function of reaching an agreement with data providers (data provisioning device 10) to use the required genomic information in the required processing logic and data processing device 20, reaching an agreement with data users (data utilization device 30) to use the required processing logic in the data processing device 20, and managing the agreed-upon agreement policy.

[0027] The genome information processing unit 24 has the function of obtaining encrypted genome information corresponding to metadata searched by the data utilization device 30 from the metadata list catalog (via the metadata management unit 22) from the data provision device 10, and processing the encrypted genome information in an isolated execution environment using encrypted processing logic from the data utilization device 30.

[0028] The data store 25 has the function of storing the results of genome information processing performed by the genome information processing unit 24.

[0029] The data utilization device 30 is a computer used by data users. A data user is, for example, a pharmaceutical company that develops new drugs from genomic information.

[0030] The data utilization device 30 comprises a search unit 31 and a transmission / reception unit 32.

[0031] The search unit 31 has the function of searching for the required metadata from a virtual metadata list catalog provided by the data processing device 20.

[0032] The transmitting / receiving unit 32 has the function of sending encrypted processing logic for the searched required metadata to the data processing device 20 and receiving processing results from the data processing device 20.

[0033] [Operation of the Data Processing System] Figure 2 shows an example of the operation of the data processing system 1. Figure 2 shows the data provision devices 10a and 10b used by medical institutions A and B respectively, the data processing device 20 used by the platform provider, and the data utilization device 30 used by pharmaceutical company C.

[0034] Step S1; The transmitting / receiving unit 13 of the data provision device 10a acquires genome data from each end user who is currently receiving or has received treatment at medical institution A, and acquires third-party consent information for the provision of genome data exchanged between each end user and medical institution A. Genome data includes, for example, gene sequence data and gene discovery data.

[0035] Step S2; The processing unit 11 of the data provision device 10a processes each end user's genome data into the required genome information. The required genome information includes, for example, information on susceptibility to disease and information on intergenetic interactions.

[0036] Step S3; The management unit 12 of the data provision device 10a encrypts and manages each end user's genome information and manages the consent information for third-party provision of each end user's genome data. The management unit 12 of the data provision device 10a also manages each end user's genome data.

[0037] The data provisioning device 10b also performs steps S1 to S3. The following description will mainly focus on the case where the data provisioning device 10a provides each end-user's genome information to the data processing device 20.

[0038] Step S4; The transmitting / receiving unit 13 of the data provision device 10a transmits the third-party provision consent information exchanged with each end user to the data processing device 20.

[0039] Step S5; The consent information management unit 21 of the data processing device 20 acquires and manages the third-party consent information from the data provision device 10a.

[0040] Step S6; After the transmission and reception unit 13 of the data providing device 10a transmits the third-party-provided consent information, while keeping the genomic information at the data providing device 10a, it transmits the metadata of the genomic information to the data processing device 20. Metadata is, for example, the attributes, related information, and user ID of the genomic information.

[0041] Step S7; After the metadata management unit 22 of the data processing device 20 confirms that the third-party-provided consent information has been previously acquired by the consent information management unit 21, it receives a plurality of metadata of a plurality of genomic information from the data providing device 10a and generates a virtual metadata list catalog that aggregates the received plurality of metadata.

[0042] The metadata list catalog is a virtual data lake that virtually integrates a plurality of metadata. A virtual data lake can be realized by existing technologies that integrate data that is geographically dispersed without aggregating it in a single location.

[0043] Steps S1 to S7 are also executed by the data providing device 10b of the medical institution B. As a result, the metadata list catalog aggregates the metadata of the genomic information of end users who are or have visited medical institutions A and B and have consented to third-party provision.

[0044] Hereinafter, the case where the pharmaceutical company C develops a new drug for the required user U will be described.

[0045] Step S8; The search unit 31 of the data utilization device 30 refers to the metadata list catalog that is being publicly disclosed by the data processing device 20 and selects the required metadata M related to the required user U from the metadata list catalog.

[0046] Step S9; The search unit 31 of the data utilization device 30 transmits to the data processing device 20 that it intends to use the genomic information G of the required metadata M with the required processing logic L. The required processing logic is, for example, rare disease discovery processing logic, lifestyle disease prediction processing logic.

[0047] Step S10; The consent policy management unit 23 of the data processing device 20 transmits the fact to the data providing device 10a or the data providing device 10b, and receives a response from the data providing device 10a or the data providing device 10b regarding the fact.

[0048] Step S11; If the response is a commitment to the use of the genomic information G, the consent policy management unit 23 of the data processing device 20 generates and manages a consent policy P that agrees to use the genomic information G with the required processing logic L, and notifies the data utilization device 30 that the use has been committed.

[0049] Here, steps S9 to S11 are supplemented.

[0050] In steps S9 to S11, the formation of a consent for using the genomic information of a medical institution with the processing logic of a third party (pharmaceutical company) was explained, but it may also be the formation of a consent for using the genomic information of a medical institution with the data processing device 20 of a third party (platform). In the case of such consent formation, it may be performed when receiving the metadata of the genomic information from the data providing device 10a in step S7.

[0051] Step S12; The transceiver 32 of the data utilization device 30 transmits the encrypted required processing logic L to the data processing device 20.

[0052] Step S13; When receiving the encrypted required processing logic L, the genomic information processing unit 24 of the data processing device 20 refers to the consent policy P, and acquires the encrypted genomic information G corresponding to the required processing logic L through the data list catalog (via the metadata management unit 22).

[0053] Step S14; The genomic information processing unit 24 of the data processing device 20 processes the encrypted genomic information G acquired in step S13 with the encrypted required processing logic L received in step S13 within a secure isolation execution environment.

[0054] A secure, isolated execution environment is one in which data can be processed with a data usage policy agreed upon between parties, while the data is encrypted and invisible to the platform provider.

[0055] For example, there is a Trusted Execution Environment (TEE). A TEE is an isolated execution environment configured so that the CPU encrypts and uses memory areas to prevent users with OS administrative privileges from accessing them.

[0056] Within the isolated execution environment, genomic information and processing logic are decrypted before processing, but since the data within the isolated execution environment cannot be read or tampered with, processing can be carried out while keeping the genomic information and processing logic confidential.

[0057] Step S15; The genome information processing unit 24 of the data processing device 20 stores the processing results in the data store 25 for pharmaceutical company C.

[0058] Step S16; The transmitting / receiving unit 32 of the data utilization device 30 acquires the processing result from the data store 25 for pharmaceutical company C.

[0059] (Modification) In this embodiment, the case in which the data provision device 10 manages the genome information has been described, but the genome information may also be managed (copied, moved) in the data provider's on-premise environment or private cloud environment. In that case, the data processing device 20 acquires the genome information from a server or database where the genome information is located, rather than from the data provision device 10.

[0060] [Effects] According to this embodiment, the medical institution's data provision device 10 extracts the necessary genomic information from the end user's genomic data, and the platform provider's data processing device 20 generates a virtual metadata catalog of that genomic information. The data processing device 20 then obtains encrypted genomic information corresponding to the metadata searched by the pharmaceutical company's data utilization device 30 from the data provision device 10, and processes the encrypted genomic information in an isolated execution environment using the encrypted processing logic of the data utilization device 30. This makes it possible to safely collect only the necessary information from genomic data, providing a technology that contributes to the pharmaceutical company's new drug development.

[0061] For example, if a pharmaceutical company wants to predict lifestyle-related diseases in a specific patient, they can search for the patient's metadata in a metadata catalog. Using the patient's genomic information, the pharmaceutical company's developed lifestyle-related disease prediction logic can then calculate the patient's risk of developing lifestyle-related diseases. Based on this lifestyle-related disease data, the pharmaceutical company can then develop new drugs tailored to that patient.

[0062] In other words, it becomes possible to screen genetic data, and by combining pharmaceutical companies' proprietary processing logic with genomic information from medical institutions, it becomes possible to develop new drugs that maximize individual efficacy. As a result, new drug sales to wholesalers are expected to increase, leading to improved profitability for pharmaceutical companies.

[0063] In healthcare settings, this will enable personalized and optimal medication prescriptions. It will also allow for secure data provision while maintaining data sovereignty for end-users. This can lead to increased revenue from data users or platform providers through data provision fees.

[0064] For end users, this allows them to receive the most suitable medication for their individual needs, enabling health promotion, prevention, pre-disease management, and disease improvement.

[0065] Platform providers can expect increased revenue from pharmaceutical companies through fees for using their data utilization platforms.

[0066] [Other] This disclosure is not limited to the embodiments described above. This disclosure can be modified in numerous ways within the scope of the gist of this disclosure.

[0067] The data processing device 20 of this embodiment described above can be realized using a general-purpose computer system, for example, as shown in Figure 3, which includes a CPU 901, a memory 902, a storage device 903, a communication device 904, an input device 905, and an output device 906. The memory 902 and the storage device 903 are storage devices. In this computer system, the CPU 901 executes a predetermined program loaded onto the memory 902, thereby realizing each function of the data processing device 20.

[0068] The data processing device 20 may be implemented on a single computer. The data processing device 20 may be implemented on multiple computers. The data processing device 20 may be a virtual machine implemented on a computer.

[0069] The program for the data processing device 20 can be stored on a computer-readable recording medium such as an HDD, SSD, USB memory, CD, or DVD. A computer-readable recording medium is, for example, a non-transitory recording medium. The program for the data processing device 20 can also be distributed via a communication network.

[0070] The data provisioning device 10 and the data utilization device 30 also have the same hardware configuration as the data processing device 20.

[0071] 1 Data Processing System 10 Data Provisioning Device 11 Processing Unit 12 Management Unit 13 Transmit / Receive Unit 20 Data Processing Device 21 Consent Information Management Unit 22 Metadata Management Unit 23 Agreement Policy Management Unit 24 Genome Information Processing Unit 25 Data Store 30 Data Utilization Device 31 Search Unit 32 Transmit / Receive Unit 901 CPU 902 Memory 903 Storage 904 Communication Device 905 Input Device 906 Output Device

Claims

1. A data processing system comprising a data providing device, a data processing device, and a data utilization device, wherein the data providing device includes a transmission unit that transmits a plurality of metadata relating to a plurality of genome information extracted from a plurality of genome data to the data processing device, the data processing device includes a metadata management unit that manages the plurality of metadata, and a processing unit that acquires encrypted genome information corresponding to metadata searched by the data utilization device from the plurality of metadata, and processes the acquired genome information in an isolated execution environment using the encrypted processing logic of the data utilization device, and the data utilization device includes a search unit that searches for metadata from the plurality of metadata, and a transmission / reception unit that transmits encrypted processing logic for the searched metadata to the data processing device and receives processing results from the data processing device.

2. The data processing system according to claim 1, wherein the metadata management unit manages the plurality of metadata, on the premise that consent information for the provision of genome data to a third party has been obtained in advance.

3. The data processing system according to claim 1, further comprising a consensus policy management unit for forming an agreement regarding the use of the genome information.

4. The data processing system according to claim 1, wherein the genomic information is information regarding susceptibility to disease or intergenetic interactions obtained from genomic data, and the processing logic is a rare disease detection processing logic or a lifestyle-related disease prediction processing logic.

5. A data processing device comprising: a metadata management unit that manages multiple metadata relating to multiple genome information extracted from multiple genome data; and a processing unit that acquires encrypted genome information corresponding to metadata searched by a data utilization device from the multiple metadata, and processes the acquired genome information in an isolated execution environment using the encrypted processing logic of the data utilization device.

6. A data processing method performed by a data processing device, comprising: managing multiple metadata relating to multiple genome information extracted from multiple genome data; obtaining encrypted genome information corresponding to metadata searched by a data utilization device from the multiple metadata; and processing the obtained genome information within an isolated execution environment using the encrypted processing logic of the data utilization device.

7. A data processing program that causes a computer to perform the following: a process for managing multiple metadata related to multiple genome information extracted from multiple genome data; a process for obtaining encrypted genome information corresponding to metadata searched by a data utilization device from the multiple metadata, and a process for processing the obtained genome information in an isolated execution environment using the encrypted processing logic of the data utilization device.

Images