Kidney donations from living donors form an attractive alternative to long waiting times on a list for a post-mortem donation. However, even if a living donor for a given patient is found, the donor's kidney might not meet the patient's medical requirements. If several patients are in this position, they may be able to exchange donors in a cyclic fashion. Current algorithmic approaches for determining such exchange cycles neglect the privacy requirements of donors and patients as they require their medical data to be centrally collected and evaluated. In this paper, we present the first distributed privacy-preserving protocol for kidney exchange that ensures the correct computing of the exchange cycles while at the same time protecting the privacy of the patients' sensitive medical data. We prove correctness and security of the new protocol and evaluate its practical performance.

中文翻译：

---

肾脏交换问题的隐私保护协议

活体捐赠者的肾脏捐赠是一种有吸引力的替代方案，可以替代死后捐赠清单上的漫长等待时间。然而，即使找到了给定患者的活体捐赠者，捐赠者的肾脏也可能无法满足患者的医疗要求。如果有几个患者处于这个位置，他们可能能够以循环方式交换供体。当前用于确定此类交换周期的算法方法忽略了捐赠者和患者的隐私要求，因为他们需要集中收集和评估他们的医疗数据。在本文中，我们提出了第一个用于肾脏交换的分布式隐私保护协议，该协议可确保正确计算交换周期，同时保护患者敏感医疗数据的隐私。