A secure protocol for protecting the identity of providers when disclosing data for disease surveillance