Abstract:Objective: To address database interoperability challenges to improve collaboration among disparate organizations. Materials and methods: We developed a lightweight system to allow broad but well-controlled data sharing while preserving local data protection policies. We used 2 NIST-developed technologies-Next-generation Database Access Control (NDAC) and the Data Block Matrix (DBM)-to create a proof-of-concept system called the Secure Federated Data Sharing System (SFDS). NDAC controls access to database resources down to the field level based on attributes assigned to users. The DBM manages and shares authoritative user-attribute assignments across a federation of organizations, implemented using a modified open-source permissioned blockchain, to manage and share authoritative user-attribute assignments across a federation of organizations. We used synthetic data to demonstrate a clinical research data-sharing use case using the SFDS. Results: We demonstrated, through consent, the onboarding of previously unknown users into NDAC via assignments to their DBM-validated attributes, allowing those users policy-preserving access to local database resources. The SFDS main system components-NDAC and DBM-also showed excellent performance metrics. Discussion: The SFDS provides a generic data-sharing infrastructure that effectively and securely achieves data-sharing objectives. It is completely transparent to the otherwise normal business operations of participating organizations. It requires no changes to database management systems or existing methods of authenticating and authorizing local user access to local resources. Conclusion: This efficiency, flexibility of deployment, and granularity of control make this new infrastructure solution practical for meeting the data-sharing and protection objectives of the clinical research community.

A Java Data Security Framework (JDSF) and its Case Studies

Research on security extensions based on Java 2 security architecture

A Privacy Framework

A Framework for Java 3d Based Collaborative Virtual Environment

The Jigsaw secure distributed file system

Java File Security System (JFSS) Evaluation Using Software Engineering Approaches

Android Security Framework: Enabling Generic and Extensible Access Control on Android

Performance Evaluation of Java File Security System (JFSS)

Secure Online/Offline Data Sharing Framework for Cloud-Assisted Industrial Internet of Things

An infrastructure for secure data sharing: a clinical data implementation

A Framework for Storage Security in Cloud Computing

An Identity-Based Authentication Framework for Big Data Security

Securing SQLJ Source Codes from Business Logic Disclosure by Data Hiding Obfuscation

Machine learning-based intelligent security framework for secure cloud key management

An Extensible Framework for Architecture-Based Data Flow Analysis for Information Security

Secure Execution of Distributed Session Programs

Data Behind the Walls An Advanced Architecture for Data Privacy Management

Secure multi-dimensional data retrieval with access control and range query in the cloud

A cloud based 3-tier data security framework for industrial internet of things

Java Cryptography API Security Enhancement Based on Annotations

Anonymous Secure Framework in Connected Smart Home Environments