Abstract: Methods, systems and computer program products for health data protection. Embodiments commence upon receiving a data access request message from a participant in a health ecosystem. The data access request message comprises an indication of one or more health data sets that are held by or at least potentially of interest to the participant. System components are configured to receive the message and to identify the participant. Based on parameter values corresponding to a data protection policy of the participant, a data protection scheme is generated. The scheme includes parameter values derived from the data protection policy. The parameter values of the scheme are used to generate a variation of the health data set that is formed by applying one or more data anonymization, data obfuscation or other data protection techniques to the health data set. A balance among the parameters is calculated so as to achieve a desired outcome.

Abstract: Methods, systems, and computer program products for health data management. A user obtains a biomaterial collection kit that provides a unique identifier that is matched to a biomaterial specimen container. The identity of any user is not associated with any unit of the biomaterial kit. The user retains their unique identifier and mails their biomaterial (e.g., hair, saliva, etc.) anonymously to a lab. The lab analyzes the biomaterial sample to produce anonymous analysis results. The lab broadly publishes the anonymous analysis results to a publicly-accessible network location (e.g., the Internet). At will, users access the publicly-accessible repository to initiate compute operations on the published entries. If a particular user's identifier matches a published entry (e.g., if the entry can be decrypted using that particular user's unique identifier), then that user can gain access to that published entry while being unable to match to or decrypt any other user's published entries.

Abstract: Methods, systems, and computer program products for health data management. A user obtains a biomaterial collection kit that provides a unique identifier that is matched to a biomaterial specimen container. The identity of any user is not associated with any unit of the biomaterial kit. The user retains their unique identifier and mails their biomaterial (e.g., hair, saliva, etc.) anonymously to a lab. The lab analyzes the biomaterial sample to produce anonymous analysis results. The lab broadly publishes the anonymous analysis results to a publicly-accessible network location (e.g., the Internet). At will, users access the publicly-accessible repository to initiate compute operations on the published entries. If a particular user's identifier matches a published entry (e.g., if the entry can be decrypted using that particular user's unique identifier), then that user can gain access to that published entry while being unable to match to or decrypt any other user's published entries.

Abstract: Methods, systems and computer program products for data analytics. An information ecosystem comprises a plurality of participants and a plurality of data sets associated with the participants. An event initiates performance of a computation over different obfuscated data sets to determine an obfuscated computational result. An integrity value pertaining to constituent data of the different obfuscated data sets and, correspondingly, an integrity value pertaining to the computational result itself, is quantified by checking if the earlier offered data set or any constituents thereof are consistent with one or more aspects of later retrieved data. Certain variations of methods, systems and computer program products are used for verifying data accuracy in privacy-preserving computations that are performed in a health ecosystem where the data sets pertain to health information associated with the participants.

Abstract: Methods, systems and computer program products for health data protection. Embodiments commence upon receiving a data access request message from a participant in a health ecosystem. The data access request message comprises an indication of one or more health data sets that are held by or at least potentially of interest to the participant. System components are configured to receive the message and to identify the participant. Based on parameter values corresponding to a data protection policy of the participant, a data protection scheme is generated. The scheme includes parameter values derived from the data protection policy. The parameter values of the scheme are used to generate a variation of the health data set that is formed by applying one or more data anonymization, data obfuscation or other data protection techniques to the health data set. A balance among the parameters is calculated so as to achieve a desired outcome.

Abstract: Methods, systems and computer program products for data analytics. Multiple components are interconnected to carry out operations for said data analytics. A method commences upon establishing a connection with a user device that is associated with a user. The user operates the user device to produce a plurality of datasets that correspond to a plurality of differing data regimes. The plurality of datasets from the different data regimes are analyzed to determine spatial and temporal correlations between the datasets. The quality score is in turn based on the determined spatial and temporal correlations. To improve the quality score, specific action requests are sent to the user device. The specific action requests are based on a comparison between the quality score and a quality score threshold. To protect against spoofing, capture time windows of respective datasets selected from the differing data regimes are analyzed to verify the provenance of the datasets.

Abstract: Methods, systems and computer program products for health data protection. Embodiments commence upon receiving a data access request message from a participant in a health ecosystem. The data access request message comprises an indication of one or more health data sets that are held by or at least potentially of interest to the participant. System components are configured to receive the message and to identify the participant. Based on parameter values corresponding to a data protection policy of the participant, a data protection scheme is generated. The scheme includes parameter values derived from the data protection policy. The parameter values of the scheme are used to generate a variation of the health data set that is formed by applying one or more data anonymization, data obfuscation or other data protection techniques to the health data set. A balance among the parameters is calculated so as to achieve a desired outcome.