Ran Jiuhong, Li Dong
Hospital of Chongqing University, Chongqing University, No. 174, Shazheng Street, Shapingba, 400044, Chongqing, China.
College of Computer, Chongqing University, No. 55 Daxuecheng South Rd, Shapingba, 401331, Chongqing, China.
J Imaging Inform Med. 2025 Jan 3. doi: 10.1007/s10278-024-01384-4.
Convolutional neural networks (CNNs) have become indispensable to medical image diagnosis research, enabling the automated differentiation of diseased images from extensive medical image datasets. Due to their efficacy, these methods raise significant privacy concerns regarding patient images and diagnostic models. To address these issues, some researchers have explored privacy-preserving medical image diagnosis schemes using fully homomorphic encryption (FHE). However, these schemes often support and are suitable for only a limited number of non-linear layers, resulting in less effective diagnoses and potentially inaccurate results. To improve upon these limitations, we propose and design a robust privacy-preserving medical diagnosis scheme that maintains both diagnostic accuracy and effectiveness at the same time. First, we utilize FHE to encrypt both the image and the model to safeguard the confidentiality of medical data and the model itself. Then, we introduce batch normalization to facilitate the use of multiple non-linear layers in deep convolutional neural networks within a ciphertext context. Furthermore, we employ a 2-degree polynomial function to approximate the ReLU activation function effectively. Finally, we introduce two innovative network depth optimization techniques to solve the issue of CNN depth insufficiency. Both theoretical and empirical analyses confirm that our scheme not only protects the confidentiality of medical images and diagnostic models but also ensures practicality and efficiency.
卷积神经网络(CNN)已成为医学图像诊断研究中不可或缺的工具,能够从大量医学图像数据集中自动区分病变图像。由于其有效性,这些方法引发了有关患者图像和诊断模型的重大隐私问题。为了解决这些问题,一些研究人员探索了使用全同态加密(FHE)的隐私保护医学图像诊断方案。然而,这些方案通常仅支持并适用于有限数量的非线性层,导致诊断效果较差且可能产生不准确的结果。为了改进这些局限性,我们提出并设计了一种强大的隐私保护医学诊断方案,该方案能同时保持诊断的准确性和有效性。首先,我们利用FHE对图像和模型进行加密,以保护医学数据和模型本身的机密性。然后,我们引入批量归一化,以便在密文环境中促进深度卷积神经网络中多个非线性层的使用。此外,我们采用二次多项式函数有效地逼近ReLU激活函数。最后,我们引入两种创新的网络深度优化技术来解决CNN深度不足的问题。理论分析和实证分析均证实,我们的方案不仅保护了医学图像和诊断模型的机密性,还确保了实用性和效率。