SBIR Phase II: Zero Trust Solution for Precision Medicine and Precision Health Data Exchanges

SBIR 第二阶段：精准医疗和精准健康数据交换的零信任解决方案

• 批准号: 2226026
• 负责人: Anthony Deasey
• 金额: $ 98.49万
• 依托单位: SOFTHREAD, INC.
• 依托单位国家: 美国
• 项目类别: Cooperative Agreement
• 财政年份: 2024
• 资助国家: 美国
• 起止时间: 2024-04-01 至 2026-03-31
• 项目状态: 未结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=2226026&HistoricalAwards=false
• 关键词: SBIR; Phase; II; Zero; Trust

This Small Business Innovation Research (SBIR) Phase II project leverages novel converging technologies and expands blockchain technology to new healthcare domains enabling the secure exchange of confidential, precision health information such as advanced directives and life-sustaining management within and between organizations. The confidentiality, security, and efficiency of data management are critically important in advanced care and life-sustaining treatment decision pathways for ethical, clinical, regulatory, and legal reasons. The combination of the proprietary blockchain solution with artificial intelligence (AI) capabilities and edge computing enablement offers enhanced privacy and security, improved audit-readiness, better risk management, and superior operational efficiency. The solution functions as an overlay to legacy systems. It easily integrates with existing information management systems, in the cloud or on premise. Further, this solution is scalable, providing a competitive advantage and ease of adoption for stakeholders, including those who are seeking Web 3.0 upward compatibility. In addition to the direct impact within this application area, the technology can have a broader positive influence on the economy and society by preventing or reducing data breaches, increasing trust and quality of life, and reducing the total cost of healthcare. This SBIR Phase II project establishes a novel, efficient, and effective solution for advanced directives and life-sustaining management, which is one of the critical areas within precision health and medicine given the highly personalized and ethically-complex nature of the application. The zero-trust solution achieves decentralized confidentiality, fine-grained access control, and robust intrusion tolerance by avoiding any single point of failure and maintaining operational efficiency. By leveraging modern cryptographic protocols, pre-built privacy-preserving smart contracts, advanced user access control overlays, support for publish/subscribe messaging patterns, integration with off-chain operations, and confidentiality-preserving machine learning models, the solution offers a unique, modular, decentralized architecture that can meet complex regulatory, privacy and security requirements. Further, the technology is specifically designed to address Internet of Things (IoT) network security and data management at scale. The project aims to reduce cyber-vulnerability, increase operational flexibility and achieve scalability that will prove beneficial to a broad array of related healthcare and precision medicine domains such as transplant services, genomic medicine, or biobanks where data confidentiality is of critical importance, especially as these are highly vulnerable to data breaches and cyberattacks.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.

这个小型企业创新研究 (SBIR) 第二阶段项目利用新颖的融合技术，并将区块链技术扩展到新的医疗保健领域，从而能够在组织内部和组织之间安全交换机密、精确的健康信息，例如高级指令和生命维持管理。出于伦理、临床、监管和法律原因，数据管理的机密性、安全性和效率对于高级护理和维持生命的治疗决策路径至关重要。专有的区块链解决方案与人工智能 (AI) 功能和边缘计算支持相结合，提供增强的隐私和安全性、改进的审计准备、更好的风险管理和卓越的运营效率。该解决方案作为遗留系统的覆盖。它可以轻松地与云端或本地的现有信息管理系统集成。此外，该解决方案具有可扩展性，可为利益相关者（包括寻求 Web 3.0 向上兼容性的利益相关者）提供竞争优势并易于采用。 除了在该应用领域内产生直接影响外，该技术还可以通过防止或减少数据泄露、提高信任和生活质量以及降低医疗保健总成本，对经济和社会产生更广泛的积极影响。该 SBIR 第二阶段项目为高级指令和生命维持管理建立了一种新颖、高效且​​有效的解决方案，鉴于该应用的高度个性化和道德复杂性，这是精准健康和医学的关键领域之一。零信任解决方案通过避免任何单点故障并保持运营效率，实现了分散的机密性、细粒度的访问控制和强大的入侵容忍能力。通过利用现代加密协议、预构建的隐私保护智能合约、高级用户访问控制覆盖、对发布/订阅消息模式的支持、与链下操作的集成以及保密机器学习模型，该解决方案提供了独特的、模块化、去中心化的架构，可以满足复杂的监管、隐私和安全要求。此外，该技术专门用于大规模解决物联网 (IoT) 网络安全和数据管理问题。该项目旨在减少网络漏洞、提高运营灵活性并实现可扩展性，这将有利于一系列相关的医疗保健和精准医学领域，例如移植服务、基因组医学或生物库，在这些领域，数据保密性至关重要，特别是在这些非常容易受到数据泄露和网络攻击。该奖项反映了 NSF 的法定使命，并通过使用基金会的智力优势和更广泛的影响审查标准进行评估，被认为值得支持。