Bringing Auditability to Privacy-Preserving Electronic Health Record Aggregation using Zero-Knowledge Proofs

Executing queries on data distributed among a set of institutions is an important task regularly needed in many data management systems. When the data is sensitive, time-consuming data use agreements need to be established before any data can be shared for central aggregation. In Chicagoland, a solution based on secure multi-party computation (MPC) is being deployed to aggregate health records from multiple hospitals while keeping individual records at their site of origin alone. We propose to augment this system for third-party auditability and test its practicality based on real-world deployment.