Cloud-based privacy-preserving remote ECG monitoring and surveillance

Ann Noninvasive Electrocardiol. 2015 Jul;20(4):328-37. doi: 10.1111/anec.12204. Epub 2014 Dec 16.

Abstract

Background: The number of technical solutions for monitoring patients in their daily activities is expected to increase significantly in the near future. Blood pressure, heart rate, temperature, BMI, oxygen saturation, and electrolytes are few of the physiologic factors that will soon be available to patients and their physicians almost continuously. The availability and transfer of this information from the patient to the health provider raises privacy concerns. Moreover, current data encryption approaches expose patient data during processing, therefore restricting their utility in applications requiring data analysis.

Methods: We propose a system that couples health monitoring techniques with analytic methods to permit the extraction of relevant information from patient data without compromising privacy. This proposal is based on the concept of fully homomorphic encryption (FHE). Since this technique is known to be resource-heavy, we develop a proof-of-concept to assess its practicality. Results are presented from our prototype system, which mimics live QT monitoring and detection of drug-induced QT prolongation.

Results: Transferring FHE-encrypted QT and RR samples requires about 2 Mbps of network bandwidth per patient. Comparing FHE-encrypted values--for example, comparing QTc to a given threshold-runs quickly enough on modest hardware to alert the doctor of important results in real-time.

Conclusions: We demonstrate that FHE could be used to securely transfer and analyze ambulatory health monitoring data. We present a unique concept that could represent a disruptive type of technology with broad applications to multiple monitoring devices. Future work will focus on performance optimizations to accelerate expansion to these other applications.

Keywords: cybersecurity; e-health; electrocardiogram; telemedicine.

Publication types

  • Research Support, Non-U.S. Gov't

MeSH terms

  • Computer Security / standards*
  • Computer Simulation
  • Confidentiality*
  • Electrocardiography, Ambulatory*
  • Feasibility Studies
  • Humans
  • Long QT Syndrome / diagnosis
  • Privacy
  • Telemedicine / standards*