{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,3,18]],"date-time":"2026-03-18T05:24:19Z","timestamp":1773811459142,"version":"3.50.1"},"reference-count":19,"publisher":"Oxford University Press (OUP)","issue":"4","license":[{"start":{"date-parts":[[2017,2,21]],"date-time":"2017-02-21T00:00:00Z","timestamp":1487635200000},"content-version":"vor","delay-in-days":1,"URL":"http:\/\/creativecommons.org\/licenses\/by-nc\/4.0\/"}],"funder":[{"DOI":"10.13039\/100000002","name":"National Institutes of Health","doi-asserted-by":"publisher","award":["R01HG007078"],"award-info":[{"award-number":["R01HG007078"]}],"id":[{"id":"10.13039\/100000002","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/100000002","name":"National Institutes of Health","doi-asserted-by":"publisher","award":["K99HG008175"],"award-info":[{"award-number":["K99HG008175"]}],"id":[{"id":"10.13039\/100000002","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/100000002","name":"National Institutes of Health","doi-asserted-by":"publisher","award":["R00HG008175"],"award-info":[{"award-number":["R00HG008175"]}],"id":[{"id":"10.13039\/100000002","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/100000002","name":"National Institutes of Health","doi-asserted-by":"publisher","award":["T15LM011271"],"award-info":[{"award-number":["T15LM011271"]}],"id":[{"id":"10.13039\/100000002","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/100000002","name":"National Institutes of Health","doi-asserted-by":"publisher","award":["R00LM011392"],"award-info":[{"award-number":["R00LM011392"]}],"id":[{"id":"10.13039\/100000002","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/100000002","name":"National Institutes of Health","doi-asserted-by":"publisher","award":["R21LM012060"],"award-info":[{"award-number":["R21LM012060"]}],"id":[{"id":"10.13039\/100000002","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/100000050","name":"National Heart, Lung, and Blood Institute","doi-asserted-by":"publisher","award":["U54HL108460"],"award-info":[{"award-number":["U54HL108460"]}],"id":[{"id":"10.13039\/100000050","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/100004440","name":"Wellcome Trust","doi-asserted-by":"publisher","award":["WT201535\/Z\/16\/Z"],"award-info":[{"award-number":["WT201535\/Z\/16\/Z"]}],"id":[{"id":"10.13039\/100004440","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2017,7,1]]},"abstract":"<jats:title>Abstract<\/jats:title>\n               <jats:p>The Global Alliance for Genomics and Health (GA4GH) created the Beacon Project as a means of testing the willingness of data holders to share genetic data in the simplest technical context\u2014a query for the presence of a specified nucleotide at a given position within a chromosome. Each participating site (or \u201cbeacon\u201d) is responsible for assuring that genomic data are exposed through the Beacon service only with the permission of the individual to whom the data pertains and in accordance with the GA4GH policy and standards.<\/jats:p>\n               <jats:p>While recognizing the inference risks associated with large-scale data aggregation, and the fact that some beacons contain sensitive phenotypic associations that increase privacy risk, the GA4GH adjudged the risk of re-identification based on the binary yes\/no allele-presence query responses as acceptable. However, recent work demonstrated that, given a beacon with specific characteristics (including relatively small sample size and an adversary who possesses an individual\u2019s whole genome sequence), the individual\u2019s membership in a beacon can be inferred through repeated queries for variants present in the individual\u2019s genome.<\/jats:p>\n               <jats:p>In this paper, we propose three practical strategies for reducing re-identification risks in beacons. The first two strategies manipulate the beacon such that the presence of rare alleles is obscured; the third strategy budgets the number of accesses per user for each individual genome. Using a beacon containing data from the 1000 Genomes Project, we demonstrate that the proposed strategies can effectively reduce re-identification risk in beacon-like datasets.<\/jats:p>","DOI":"10.1093\/jamia\/ocw167","type":"journal-article","created":{"date-parts":[[2016,12,1]],"date-time":"2016-12-01T20:05:36Z","timestamp":1480622736000},"page":"799-805","source":"Crossref","is-referenced-by-count":62,"title":["Addressing Beacon re-identification attacks: quantification and mitigation of privacy risks"],"prefix":"10.1093","volume":"24","author":[{"given":"Jean Louis","family":"Raisaro","sequence":"first","affiliation":[{"name":"School of Computer and Communication Sciences, \u00c9cole Polytechnique F\u00e9d\u00e9rale de Lausanne, Lausanne, Switzerland"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Florian","family":"Tram\u00e8r","sequence":"additional","affiliation":[{"name":"School of Computer and Communication Sciences, \u00c9cole Polytechnique F\u00e9d\u00e9rale de Lausanne, Lausanne, Switzerland"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Zhanglong","family":"Ji","sequence":"additional","affiliation":[{"name":"Health Science Department of Biomedical Informatics, University of California San Diego, San Diego, CA, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Diyue","family":"Bu","sequence":"additional","affiliation":[{"name":"School of Informatics and Computing, Indiana University Bloomington, Bloomington, IN, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Yongan","family":"Zhao","sequence":"additional","affiliation":[{"name":"School of Informatics and Computing, Indiana University Bloomington, Bloomington, IN, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Knox","family":"Carey","sequence":"additional","affiliation":[{"name":"GeneCloud, Intertrust, CA, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"David","family":"Lloyd","sequence":"additional","affiliation":[{"name":"European Molecular Biology Laboratory, European Bioinformatics Institute, Wellcome Trust Genome Campus, Hinxton, Cambridge, CB10 1SD, UK"},{"name":"Wellcome Trust Sanger Institute, Hinxton, Cambridge, CB10 1SA, UK"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Heidi","family":"Sofia","sequence":"additional","affiliation":[{"name":"Division of Genomic Medicine, National Institutes of Health, Bethesda, MD, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Dixie","family":"Baker","sequence":"additional","affiliation":[{"name":"Martin, Blanck and Associates, Alexandria, VA, USA,"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Paul","family":"Flicek","sequence":"additional","affiliation":[{"name":"European Molecular Biology Laboratory, European Bioinformatics Institute, Wellcome Trust Genome Campus, Hinxton, Cambridge, CB10 1SD, UK"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Suyash","family":"Shringarpure","sequence":"additional","affiliation":[{"name":"Department of Genetics, Stanford University, Stanford, CA, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Carlos","family":"Bustamante","sequence":"additional","affiliation":[{"name":"Department of Genetics, Stanford University, Stanford, CA, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Shuang","family":"Wang","sequence":"additional","affiliation":[{"name":"Health Science Department of Biomedical Informatics, University of California San Diego, San Diego, CA, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Xiaoqian","family":"Jiang","sequence":"additional","affiliation":[{"name":"Health Science Department of Biomedical Informatics, University of California San Diego, San Diego, CA, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Lucila","family":"Ohno-Machado","sequence":"additional","affiliation":[{"name":"Health Science Department of Biomedical Informatics, University of California San Diego, San Diego, CA, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Haixu","family":"Tang","sequence":"additional","affiliation":[{"name":"School of Informatics and Computing, Indiana University Bloomington, Bloomington, IN, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"XiaoFeng","family":"Wang","sequence":"additional","affiliation":[{"name":"School of Informatics and Computing, Indiana University Bloomington, Bloomington, IN, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Jean-Pierre","family":"Hubaux","sequence":"additional","affiliation":[{"name":"School of Computer and Communication Sciences, \u00c9cole Polytechnique F\u00e9d\u00e9rale de Lausanne, Lausanne, Switzerland"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"286","published-online":{"date-parts":[[2017,2,20]]},"reference":[{"key":"2020110612443587900_ocw167-B1","first-page":"1278","article-title":"The Global Alliance for Genomics and Health. A federated ecosystem for sharing genomic, clinical data","volume-title":"Science","year":"2016"},{"key":"2020110612443587900_ocw167-B2","volume-title":"Framework for Responsible Sharing of Genomic and Health-related Data","year":"2014"},{"key":"2020110612443587900_ocw167-B3","volume-title":"GA4GH privacy and security policy","year":"2015"},{"issue":"3","key":"2020110612443587900_ocw167-B4","doi-asserted-by":"crossref","first-page":"175","DOI":"10.1089\/gtmb.2012.1542","article-title":"The haystack is made of needles","volume":"17","author":"Terry","year":"2013","journal-title":"Genetic Testing Mol Biomarkers"},{"issue":"6090","key":"2020110612443587900_ocw167-B5","doi-asserted-by":"crossref","first-page":"64","DOI":"10.1126\/science.1219240","article-title":"Evolution and functional impact of rare coding variation from deep sequencing of human exomes","volume":"337","author":"Tennessen","year":"2012","journal-title":"Science"},{"issue":"8","key":"2020110612443587900_ocw167-B6","doi-asserted-by":"crossref","first-page":"e1000167","DOI":"10.1371\/journal.pgen.1000167","article-title":"Resolving individuals contributing trace amounts of DNA to highly complex mixtures using high-density SNP genotyping microarrays","volume":"4","author":"Homer","year":"2008","journal-title":"PLoS Genet"},{"issue":"9","key":"2020110612443587900_ocw167-B7","doi-asserted-by":"crossref","first-page":"965","DOI":"10.1038\/ng.436","article-title":"Genomic privacy and limits of individual detection in a pool","volume":"41","author":"Sankararaman","year":"2009","journal-title":"Nat Genetics"},{"issue":"12","key":"2020110612443587900_ocw167-B8","doi-asserted-by":"crossref","first-page":"e28071","DOI":"10.1371\/journal.pone.0028071","article-title":"A systematic review of re-identification attacks on health data","volume":"6","author":"El Emam","year":"2011","journal-title":"PLoS One"},{"issue":"6117","key":"2020110612443587900_ocw167-B9","doi-asserted-by":"crossref","first-page":"321","DOI":"10.1126\/science.1229566","article-title":"Identifying personal genomes by surname inference","volume":"339","author":"Gymrek","year":"2013","journal-title":"Science"},{"issue":"12","key":"2020110612443587900_ocw167-B10","doi-asserted-by":"crossref","first-page":"e1002278","DOI":"10.1371\/journal.pcbi.1002278","article-title":"Genomics and privacy: implications of the new reality of closed data for the field","volume":"7","author":"Greenbaum","year":"2011","journal-title":"PLoS Comput Biol."},{"issue":"5","key":"2020110612443587900_ocw167-B11","doi-asserted-by":"crossref","first-page":"631","DOI":"10.1016\/j.ajhg.2015.09.010","article-title":"Privacy risks from genomic data-sharing beacons","volume":"97","author":"Shringarpure","year":"2015","journal-title":"Am J Hum Genet"},{"key":"2020110612443587900_ocw167-B12","author":"EPIC"},{"issue":"7422","key":"2020110612443587900_ocw167-B13","doi-asserted-by":"crossref","first-page":"56","DOI":"10.1038\/nature11632","article-title":"An integrated map of genetic variation from 1,092 human genomes","volume":"491","author":"The 1000 Genomes Project Consortium","year":"2012","journal-title":"Nature"},{"issue":"7571","key":"2020110612443587900_ocw167-B14","doi-asserted-by":"crossref","first-page":"68","DOI":"10.1038\/nature15393","article-title":"A global reference for human genetic variation","volume":"526","author":"The 1000 Genomes Project Consortium","year":"2015","journal-title":"Nature"},{"issue":"6968","key":"2020110612443587900_ocw167-B15","doi-asserted-by":"crossref","first-page":"789","DOI":"10.1038\/nature02168","article-title":"The international HapMap project","volume":"426","author":"Gibbs","year":"2003","journal-title":"Nature"},{"key":"2020110612443587900_ocw167-B16","author":"Kendall"},{"key":"2020110612443587900_ocw167-B17"},{"issue":"6","key":"2020110612443587900_ocw167-B18","doi-asserted-by":"crossref","first-page":"409","DOI":"10.1038\/nrg3723","article-title":"Routes for breaching and protecting genetic privacy","volume":"15","author":"Erlich","year":"2014","journal-title":"Nat Rev Genet"},{"issue":"4","key":"2020110612443587900_ocw167-B19","doi-asserted-by":"crossref","first-page":"515","DOI":"10.1145\/76894.76895","article-title":"Security-control methods for statistical databases: a comparative study","volume":"21","author":"Adam","year":"1989","journal-title":"ACM Computing Surveys (CSUR)."}],"container-title":["Journal of the American Medical Informatics Association"],"original-title":[],"language":"en","link":[{"URL":"http:\/\/academic.oup.com\/jamia\/article-pdf\/24\/4\/799\/34148978\/ocw167.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"syndication"},{"URL":"http:\/\/academic.oup.com\/jamia\/article-pdf\/24\/4\/799\/34148978\/ocw167.pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2020,11,6]],"date-time":"2020-11-06T18:21:46Z","timestamp":1604686906000},"score":1,"resource":{"primary":{"URL":"https:\/\/academic.oup.com\/jamia\/article\/24\/4\/799\/3038412"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2017,2,20]]},"references-count":19,"journal-issue":{"issue":"4","published-online":{"date-parts":[[2017,2,20]]},"published-print":{"date-parts":[[2017,7,1]]}},"URL":"https:\/\/doi.org\/10.1093\/jamia\/ocw167","relation":{},"ISSN":["1067-5027","1527-974X"],"issn-type":[{"value":"1067-5027","type":"print"},{"value":"1527-974X","type":"electronic"}],"subject":[],"published-other":{"date-parts":[[2017,7]]},"published":{"date-parts":[[2017,2,20]]}}}