Cited by 513Privacy-Preserving Technologies in DataArtificial Intelligence in Healthcare and EducationCloud Data Security Solutions

End-to-end privacy preserving deep learning on multi-institutional medical imaging

Kaissis, Georgios, Ziller, Alexander, Passerat-Palmbach, Jonathan, Ryffel, Théo, Usynin, Dmitrii, Trask, Andrew, Lima, Ionésio, Mancuso, Jason +6 more·2021·Nature Machine Intelligence

Integrity signals

Registry

Crossref · 10.1038/s42256-021-00337-8

Cites

65 of 65 references verified0 citation errors · 0 not checkable

Statistics

Recomputing p-values needs the paper’s full text.

Claims the paper makes

We couldn’t retrieve this paper’s full text, so its claims and self-check weren’t run. The registry and citation checks still apply.

Claims other papers make about this one

Each is checked against this paper’s own text: does it say what the citing paper says it does?

  • The information in a patient's files can be leaked.

    “This is also a major issue in the case of medical data wherein the information in a patient's files can be leaked [3], [23].”
  • Federated learning without additional privacy-enhancing techniques can be reverse-engineered to reconstruct high-fidelity images which encode diagnostic information about patients, such as the absence of a breast indicative of a prior history of breast cancer.

    “Prior work demonstrates that federated learning without additional privacy-enhancing techniques can be reverse-engineered to reconstruct high-fidelity images which encode diagnostic information about patients, such as the absence of a breast indicative of a prior history of breast cancer8.”

    From Medical imaging deep learning with differential privacy (2021) · cites this paper as [8]

  • PriMIA is an open-source framework for privacy-preserving decentralized deep learning with medical images.

    “The Privacy-preserving Medical Image Analysis (PriMIA) [93] is an open-source framework for privacy-preserving decentralized deep learning with medical images.”

    From Federated learning for medical image analysis: A survey (2024) · cites this paper as [93]

  • Kaissis et al. [27] proposed a model able to detect different pneumonia samples.

    “We also found FL is used in pneumonia detection, Kaissis et al. [27] proposed a model that able to detect different pneumonia samples.”
  • ResNet18 was used in [23], [26], [27], and [29]; ResNet50 in [18] and [24]; ResNet101 in [24].

    “Residual Network (ResNet) is also a commonly used algorithm that can be constructed by different numbers of layers, e.g., ResNet18 ( [23], [26], [27], [29]), ResNet50 ( [18], [24]), ResNet101 ( [24]).”

Cites

Flagged first, then by citations

Cited by

Sorted by citations

Authors
Kaissis, G., Ziller, A., Passerat-Palmbach, J., Ryffel, T., Usynin, D., Trask, A., Lima, I., Mancuso, J., Jungmann, F., Steinborn, M.-M., Saleh, A., Makowski, M., Rueckert, D., & Braren, R.
Affiliations
  • Imperial College London (GB)
  • Technical University of Munich (DE)
  • Institut national de recherche en sciences et technologies du numérique (FR)
  • University of Oxford (GB)
  • Universidade Federal de Campina Grande (BR)
  • München Klinik Schwabing (DE)
Corresponding author
Braren, Rickmer
Venue
Nature Machine Intelligence
Published
2021-05-24
Volume
3
Issue
6
Pages
473-484
ISSN
2522-5839 (ISSN-L)
OpenAlex
W3165750456
Cited by
513
References
65
Citations by year
2026: 100 · 2025: 146 · 2024: 102 · 2023: 80 · 2022: 57 · 2021: 28
FWCI
22.49
Type
journal article
Language
en
Open access
closed
Locations
  • Nature Machine Intelligence (publishedVersion)
  • mediaTUM – the media and publications repository of the Technical University Munich (Technical University Munich) (submittedVersion)
Funders
  • UK Research and Innovation
  • Imperial College London
  • Deutsche Forschungsgemeinschaft (SPP 2177, FP7/2007–2013, SPP2177/1)
  • Technische Universität München
  • Deutschen Konsortium für Translationale Krebsforschung (FP7/2007-2013)
  • FP7 Ideas: European Research Council (339563)
Topics
  • Physical Sciences › Computer Science › Artificial Intelligence › Privacy-Preserving Technologies in Data
  • Health Sciences › Medicine › Health Informatics › Artificial Intelligence in Healthcare and Education
  • Physical Sciences › Computer Science › Information Systems › Cloud Data Security Solutions
Keywords
privacy-preserving machine learning, federated learning, differential privacy, secure multi-party computation, encrypted inference, diagnostic imaging, model inversion attacks, open source software framework, multi-institutional data sharing

About these checks

Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.

Statistics and arithmetic are recomputed, not judged.

Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.

What counts as a claim ›How we measure confidence ›How we check this ›

Are you an author, or do you see a problem with this page? Request a review