DyPS: Dynamic, Private and Secure GWAS

Antoine Boutet (1) , Túlio Pascoal (2) , Jérémie Decouchant (3) , Paulo Esteves-Verissimo (4)

1 PRIVATICS - Privacy Models, Architectures and Tools for the Information Society
2 SnT - Interdisciplinary Centre for Security, Reliability and Trust [Luxembourg]
3 TU Delft - Delft University of Technology
4 KAUST - King Abdullah University of Science and Technology [Saudi Arabia]

Genome-Wide Association Studies (GWAS) identify the genomic variations that are statistically associated with a particular phenotype (e.g., a disease). The confidence in GWAS results increases with the number of genomes analyzed, which encourages federated computations where biocenters would periodically share the genomes they have sequenced. However, for economical and legal reasons, this collaboration will only happen if biocenters cannot learn each others' data. In addition, GWAS releases should not jeopardize the privacy of the individuals whose genomes are used. We introduce DyPS, a novel framework to conduct dynamic privacy-preserving federated GWAS. DyPS leverages a Trusted Execution Environment to secure dynamic GWAS computations. Moreover, DyPS uses a scaling mechanism to speed up the releases of GWAS results according to the evolving number of genomes used in the study, even if individuals retract their participation consent. Lastly, DyPS also tolerates up to all-but-one colluding biocenters without privacy leaks. We implemented and extensively evaluated DyPS through several scenarios involving more than 6 million simulated genomes and up to 35,000 real genomes. Our evaluation shows that DyPS updates test statistics with a reasonable additional request processing delay (11% longer) compared to an approach that would update them with minimal delay but would lead to 8% of the genomes not being protected. In addition, DyPS can result in the same amount of aggregate statistics as a static release (i.e., at the end of the study), but can produce up to 2.6 times more statistics information during earlier dynamic releases. Besides, we show that DyPS can support a larger number of genomes and SNP positions without any significant performance penalty.

Mots clés: GWAS; Genomic privacy; Dynamic workload; Collusion resistance

Domaines: Cryptographie et sécurité [cs.CR]

Antoine Boutet, Túlio Pascoal, Jérémie Decouchant, Paulo Esteves-Verissimo. DyPS: Dynamic, Private and Secure GWAS. PETS 2021 - 21st Annual Privacy Enhancing Technologies Symposium, Jul 2021, Online, France. pp.1-19. ⟨hal-03354937⟩