Search papers, labs, and topics across Lattice.
This paper introduces REAN, a novel ECG anonymization approach that leverages a 1-D U-Net architecture to balance privacy and utility in shared electrocardiogram signals. By training with losses from frozen privacy and utility classifiers, REAN achieves a near-orthogonal relationship between privacy and utility gradients, allowing for significant reductions in re-identification risk without compromising the accuracy of arrhythmia detection. Evaluated on four public PhysioNet databases, REAN demonstrates superior performance, driving re-identification rates to chance while maintaining high utility metrics.
Achieving a near-orthogonal balance between privacy and utility, REAN drives ECG re-identification rates to chance without sacrificing diagnostic accuracy.
A shared electrocardiogram (ECG) is itself a biometric fingerprint that can re-identify a patient and reveal personal information. Recent ECG anonymizers transform the signal before sharing to reduce privacy leakage. However, existing methods still face a privacy--utility trade-off, in which preserving privacy often compromises utility while preserving utility reveals personal information. We propose \emph{REAN} (\emph{RE}construction-aware ECG \emph{AN}onymizer), a raw ECG signal anonymizer, to address this privacy--utility trade-off. REAN reconstructs the signal using a 1-D U-Net trained with losses from frozen privacy and utility classifiers to reduce privacy leakage while preserving utility. The privacy and utility gradients are near-orthogonal ($\approx$93.8$^\circ$), so reducing privacy leakage leaves utility almost unchanged. On four public PhysioNet databases, REAN achieves the strongest privacy--utility balance among raw ECG signal baselines. It drives re-identification to chance (0.96$\to$0.00), keeps arrhythmia macro-AUROC at the clean level (Clean 0.9982 vs.\ REAN 0.9991), and maintains re-identification protection under unseen privacy-classifier architectures.
