DATA DE-IDENTIFICATION BY OBFUSCATION

摘要

Medical or other data is de-identified by obfuscation. Located instances are replaced (36). By replacing (36) with values in a same format and level of generality, multiple possible identifications - the replacement values and the instances not located - are provided in the data, obfuscating the original identification. By replacing (36) as a function of a probability, the resulting data set has different instances distributed in a way making identification of the actual or original instances not located by searching (34) more difficult.