Search NASA⌕ Search

SEARCH · Search NASA

Results for “privacy”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 55 records · Page 3

A Scalable, Distribution Network-Aware, Customer Privacy-Preserving Framework for Operation of Virtual Power Plants

This poster presents a hierarchical control framework for a virtual power plant that leverages behind-the-meter resources for grid services while maintaining customer privacy during setpoint disaggregation. Unlike many existing approaches, the virtual power plant model uses a hierarchical control strategy and an iterative approach to determine the optimal set point dis-aggregation without direct load control while maintaining system-level power flow and voltage constraints. The proposed approach is numerically validated on a synthetic distribution feeder in San Francisco, demonstrating the ability of the framework to provide privacy-preserving virtual power plant services.

24 POWER TRANSMISSION AND DISTRIBUTION↗

Access control and privacy in large distributed systems

Large scale distributed systems consists of workstations, mainframe computers, supercomputers and other types of servers, all connected by a computer network. These systems are being used in a variety of applications including the support of collaborative scientific research. In such an environment, issues of access control and privacy arise. Access control is required for several reasons, including the protection of sensitive resources and cost control. Privacy is also required for similar reasons, including the protection of a researcher's proprietary results. A possible architecture for integrating available computer and communications security technologies into a system that meet these requirements is described. This architecture is meant as a starting point for discussion, rather that the final answer.

Leiner, B. M.↗

Access control and privacy in large distributed systems

Large scale distributed systems consists of workstations, mainframe computers, supercomputers and other types of servers, all connected by a computer network. These systems are being used in a variety of applications including the support of collaborative scientific research. In such an environment, issues of access control and privacy arise. Access control is required for several reasons, including the protection of sensitive resources and cost control. Privacy is also required for similar reasons, including the protection of a researcher's proprietary results. A possible architecture for integrating available computer and communications security technologies into a system that meet these requirements is described. This architecture is meant as a starting point for discussion, rather that the final answer.

Leiner, B. M.↗

Watching Without Seeing a Tool to Surveil Astronaut Health Outcomes While Maintaining Astronaut Medical Privacy

BACKGROUND The Privacy Act of 1974 regulates the use a nd disclosure of personally identifiable information by US Federal agencies. The Act applies to biographical, financial, a nd other identity-linked information, a s well a s personal health information (PHI). As such, the use of astronaut PHI is limited to authorized personnel for preapproved uses, with data reporting often limited to aggregated information about groups. These limitations on the use a nd reporting of astronaut PHI complicates surveillance efforts, wherein epidemiologists a t the National Aeronautics and Space Administration (NASA)monitor the incidence of targeted health conditions in the astronaut population, or to discover emerging trends of aging and disease. Stratification on one or more covariates –particularly time-period, sex, a nd mission participation –can lead to extremely small datasets such that the reporting of results is potentially attributable to individuals. An additional challenge is the small size of the astronaut population, both in terms of numbers of individuals a s well a s in terms of density of exposure time. Such small datasets yield volatile rate estimates that are difficult to interpret. To a id the epidemiological surveillance efforts, a surveillance tool is required that can (a) satisfy the need for rapid computation of condition-specific incidence and mortality rates; (b) improve the statistical estimates of these estimated rates; and (c) maintain astronaut privacy. Here we describe a nd demonstrate such a tool. METHODS We devised a system that models incidence a nd mortality rates rather than calculating them directly. This ha s the advantage of using all the available data to derive the estimates, lea ding to rates that a re not attributable to any one individual, a nd a re a s numerically stable a s they can be given the extremely limited data. The system models disease endpoints using a Poisson regression model with exposure density (measured in person-years) a s a n offset term. By doing so the model is estimating event counts per person-year, equivalent to modeling the rates directly. It uses a standard (pre-specified)set of covariates; the system does not engage in “model-building” as model parsimony is not the goa l. Instead, it is explicitly recognized that if a covariate is not statistically significant a nd not a confounder then it will likely have very little effect on the estimate of the incidence a nd mortality rates. Users are able to specify the disease endpoint of interest and the covariates over which they would like to stratify. The system then uses the resulting model to compute the estimated rates for the user-chosen configuration of variables as visualizes those either over an age range within a specified time-period, or over time for astronauts with a specified age range. RESULTS The first iteration of the tool computes incidence a nd mortality rates for cardiovascular conditions and cancers. Code ha s been developed to retrieve the appropriate data from the IMPALA analysis platform, compute the models for incidence a nd mortality, a nd then use those models to generate the corresponding rate curves. A companion graphical user interface allows the user to specify the curves and visualize the results. CONCLUSIONS It is important to note that the rapid surveillance tool described here is neither meant to be a definitive assessment of the incidence or mortality of any particular disease or condition in the astronaut population, nor is it meant to be used for research purposes. Rather, it is meant as an early indicator that in-depth investigation may be warranted. By automating a repetitive process and leveraging carefully curated astronaut health outcomes, the tool makes possible a rapid “first look” into known areas of concern, and, if used judiciously, may surface new areas of concern for long-term astronaut health. This work is supported in part by the Translational Research Institute for Space Health (TRISH) through NASA Cooperative Agreement NNX16AO69A.

R J Reynolds↗

Privacy-Preserving Control of Partitioned Energy Resources

Distributed energy resources are an increasingly important part of the electric grid. We examine the problem of partitioning a distributed energy resource among many users while providing privacy to them. In this model, clients can send requests to a server, the server can verify that the requests are valid and aggregate them, but it cannot see the actual values in the requests. Without privacy, each user is forced to reveal their daily schedule or energy use. Energy resources add a novel challenge that prior systems do not address: they require verifying limits on private power (a rate over time) and energy (a sum) values. Furthermore, the cryptographic mechanisms must run on embedded energy control systems. We describe Weft, a novel cryptographic system that verifies both power (rate) and energy (integral) constraints on private client values and aggregates them. The key insight behind the approach is to rely on additively homomorphic secret shares, which allows servers to compute sums from rates. We present 3 cryptographic proof systems with different system trade-off for embedded systems: bit-splitting proofs minimize memory use, sorting proofs minimize computation, and commitment proofs minimize network communication. Using bit-splitting proofs, it takes an IoT client using a CortexM microcontroller 4 minutes of compute time to privately control its share of an energy resource for a day at 20s granularity.

Laufer, Evan↗

Privacy-Protected Simultaneous Provision of Energy and Primary Frequency Control Reserve

This paper investigates a Mixed Integer Linear Programming (MILP) model for simultaneous scheduling of energy and primary frequency control reserve. Given the model’s unique structure and growing concerns about privacy, we adopt Dantzig-Wolfe Decomposition (DWD) algorithm to solve the problem in a decentralized fashion while obfuscating the privacy of the energy and reserve resources. Additionally, we present a novel criterion for checking the model’s feasibility. Finally, simulation results are given and discussed.

24 POWER TRANSMISSION AND DISTRIBUTION↗

Resource-Adaptive Federated Text Generation with Differential Privacy

In cross-silo federated learning (FL), sensitive text datasets remain confined to local organizations due to privacy regulations, making repeated training for each downstream task both communication-intensive and privacy-demanding. A promising alternative is to generate differentially private (DP) synthetic datasets that approximate the global distribution and can be reused across tasks. However, pretrained large language models (LLMs) often fail under domain shift, and federated finetuning is hindered by computational heterogeneity: only resource-rich clients can update the model, while weaker clients are excluded, amplifying data skew and the adverse effects of DP noise. We propose a flexible participation framework that adapts to client capacities. Strong clients perform DP federated finetuning, while weak clients contribute through a lightweight DP voting mechanism that refines synthetic text. To ensure the synthetic data mirrors the global dataset, we apply control codes (e.g., labels, topics, metadata) that represent each client’s data proportions and constrain voting to semantically coherent subsets. This two-phase approach requires only a single round of communication for weak clients and integrates contributions from all participants. Experiments show that our framework improves distribution alignment and downstream robustness under DP and heterogeneity.

Wang, Jiayi [ORNL]↗

Privacy Preservation from High-Performance Computing to Autonomous Science [Industrial and Governmental Activities]

High-Performance Computing (HPC) and Leadership-Class Supercomputing are driving forces behind scientific advancements, enabling researchers to tackle complex challenges in physics, chemistry, biology, and engineering. These systems power vast simulations and data analyses, fueling discoveries in fields ranging from materials science to climate modeling. However, their use often involves processing sensitive data—such as proprietary industry simulations, biomedical records, and national security computations—posing significant privacy concerns. In conclusion, this issue is amplified in collaborative environments like Department of Energy (DOE) user facilities, where HPC resources are shared across institutions to foster innovation.

Kotevska, Olivera [Oak Ridge National Laboratory (↗

A Perspective on Data and Privacy for AI in Healthcare [Industrial and Governmental Activities]

As large language models continue to push the bounds of AI model size, they are also being trained on unprecedented volumes of data. While individual hospitals are estimated to produce petabytes of data per year, only a small fraction is currently being used for developing AI models. Additionally, with such data resources available, healthcare is well-positioned to benefit from the current trends in AI. Moreover, the inherently multi-modal and longitudinal nature of clinical data – from omics to imaging to unstructured notes – provides a fertile ground for the development and application of cutting-edge architectures like foundation models.

Gounley, John [Oak Ridge National Laboratory (ORNL↗

Protecting Astronaut Medical Privacy: Review of Presentations and Publications for Attributability

Retrospective research and medical data collected on astronauts can be a valuable resource for researchers. This data can be requested from two separate NASA Archives. The Lifetime Surveillance of Astronaut Health (LSAH) holds astronaut medical data, and the Life Sciences Data Archive (LSDA) holds research data. One condition of use of astronaut research and medical data is the requirement that all abstracts, publications and presentations using this data must be reviewed for attributability. All final versions of abstracts, presentations, posters, and manuscripts must be reviewed by LSDA/LSAH prior to submission to a conference, journal, or other entities outside the Principal Investigator (PI) laboratory [including the NASA Export Control Document Availability Authorization (DAA) system]. If material undergoes multiple revisions (e.g., journal editor comments), the new versions must also be reviewed by LSDA/LSAH prior to re-submission to the journal. The purpose of this review is to ensure that no personally identifiable information (PII) is included in materials that are presented in a public venue or posted to the public domain. The procedures for submitting materials for review will be outlined. The process that LSAH/LSDA follows for assessing attributability will be presented. Characteristics and parameter combinations that often prompt attributability concerns will be identified. A published case report for a National Football League (NFL) player will be used to demonstrate how, in a population of public interest, a combination of information can result in inadvertent release of private or sensitive information.

Wear, M. L.↗

Differentially Private Map Matching (DPMM) v1.0

Human mobility trajectories provide valuable information for developing mobility applications, as they contain diverse and rich information about the users. User mobility data is valuable for various applications such as intelligent transportation systems (ITS), commercial business models, and disease-spread models. However, such spatio-temporal traces may pose a threat to user privacy. GPS trajectories in their raw form are not suitable for transportation studies, as they require matching locations with nearest road links — a process called map-matching. This software implements a differential privacy (DP)-based map-matching algorithm, called DPMM, that generates link-level location trajectories in a privacy-preserving manner to protect users' origin destinations (OD) and travel paths. OD privacy is achieved by injecting Planar Laplace noise to the user OD GPS points. Travel-path privacy is provided with randomized travel path construction using exponential DP mechanism. The injected noise level is selected adaptively, by considering the link density of the location and the functional category of the localized links. For path privacy, our mechanism samples waypoints and selects candidate paths between waypoints. DPMM provides privacy effectively with respect to link density instead of other trajectory samples in the database compared to other privacy mechanisms. Compared to the different baseline models our DP-based privacy model offers closer query responses to the raw data in terms of individual and aggregate trajectory-level statistics with an average at absolute deviation from the baseline for individual statistics on ϵ = 1.0. Beyond individual trajectory statistics, the DPMM outperforms the other benchmark DP-based mechanisms on different aggregate statistics with up to 8x improvement in utility.

Peisert, Sean [Lawrence Berkeley National Laborato↗