The DtMin Protocol: Implementing Data Minimization Principles in Medical Information Sharing

This study proposes DtMin, a novel protocol for implementing data minimization principles in medical information sharing between healthcare providers (HCPs) and electronic health record providers (EHRPs). DtMin utilizes a multi-type encryption approach, combining attribute-based encryption (ABE) and hybrid encryption techniques. The protocol classifies patient data attributes into six categories based on sensitivity, consent status, and sharing requests. It then applies differential encryption methods to ensure only the intersection of patient-consented and EHRP-requested attributes is shared in decipherable form. DtMin’s security is formally analyzed and proven under the ICR-DB and ICR-IS security games. Performance analysis demonstrates efficiency across various data volumes and patient numbers. This study explores the integration of DtMin with advanced cryptographic techniques such as lattice-based ABE and lightweight ABE variants, which can potentially enhance its performance and security in complex healthcare environments. Furthermore, it proposes strategies for integrating DtMin with existing healthcare information systems and adapting it to future big data environments processing over 100,000 records. These enhancements and integration strategies position DtMin as a scalable and practical solution for implementing data minimization in diverse healthcare settings, from small clinics to large-scale health information exchanges.