Medical data belongs to whom it produces it. In an increasing manner, this data is usually processed in unauthorized third-party clouds that should never have the opportunity to access it. Moreover, recent data protection regulations (e.g., GDPR) pave the way towards the development of privacy-preserving processing techniques. In this paper, we present MedSpark, a proof of concept of a streaming IoT architecture that securely processes cardiac data in the cloud combining trusted hardware and Spark. The additional security guarantees come with no changes to the application;s code in the server. We tested the system with a database containing ECGs from wearable devices comprised of 8 healthy makes makes performing a standarized range of in-lab physisical activities (e.g., run, walk, bike). We show that, when compared with standard Spark Streaming, the addition of privacy in MedSpark comes at the cost of doubling the execution time.

翻译：医疗数据属于其制作者。 越来越多的情况是,这些数据通常在未经授权的第三方云层中处理,而第三方云层不应有机会访问这些数据。 此外,最近的数据保护条例(例如,GDPR)为开发保护隐私的处理技术铺平了道路。 在本文中,我们展示了MedSpark,这是将可信赖的硬件和火花混合在一起,在云层中安全处理心脏数据的流体化IoT结构概念的证明。额外的安全保障对应用程序没有变化;服务器的代码。我们用一个由8个健康设备组成的可磨损装置中含有ECG的数据库对系统进行了测试,使得实验室内物理活动(例如,运行,步行,自行车)的固定范围得以进行。我们表明,与标准Spoint Streaming相比, MedSpark增加隐私的成本是执行时间的两倍。