Abstract:With great interest we read the article entitled "Development of a Trusted Third Party at a Large University Hospital: Design and Implementation Study" by Wündisch et al. (1). The objective of the article was to introduce a "comprehensive architecture for a Trusted Third Party (TTP) that aims to support a wide range of different research projects" incorporating "a fine-grained authentication and authorization model [and] a modern REST-API" in order to "support cross-service workflows". Their work is based on well-established software components of the University Medicine Greifswald for record linkage (E PIX®), pseudonymisation (gPAS®) and consent management (gICS®) (2). With this letter, we aim to place the authors' statement that "the literature lacks insights into the design of more comprehensive architectures that support complex research workflows that are actually in production use" into a state-of-the-art perspective to prevent any misleading impressions. While the authors concede that "research exists on the components mentioned above", their article contains several inaccuracies that we would like to highlight in the following. The functional scope of the existing solutions (E-PIX, gPAS, gICS) is presented in Table 1. However, the existing workflow management solution of the University Medicine Greifswald (TTP Dispatcher) was not displayed (2). The authors only reference this highly relevant component later in text of their article. Furthermore, the content and designation of Table 2 "additional functional requirements" misleadingly suggests that the listed requirements are not covered by the solutions mentioned in Table 1. In published work (2) (3) and available materials (4), many of the checkmarks listed in Table 2 have been successfully validated, and moreover, the compliance of the tools with the pertinent TMF guidelines (3) has been demonstrated. Unlike the authors' indication, the TTP dispatcher solution from the University Medicine Greifswald provides a common REST-API across all TTP services (based on E-PIX, gPAS and gICS) and enables cross-service workflows (2). Contrary to the description by Wündisch et. al., the dispatcher architecture allows the implementation of complex research workflows. We published a list of available workflows together with a corresponding example ("automatic creation of pseudonyms linked to the primary identifier when registering a patient or study participant")(2). Since 2018, the existing TTP dispatcher solution has been made available in various project collaborations (3). In 2024, the TTP dispatcher is used in projects throughout Germany and the comprehensive documentation for the latest software version is publicly available (4). With regard to the relevance of the secure authentication mechanisms, we fully agree with the authors that OAuth 2.0 support based on OIDC and a fine-grained authorisation model are essential for securing TTP-Services. Therefore, Keycloak-support for E-PIX, gPAS and gICS is operational since 2022 (5). We can also only encourage the interoperability endeavours of the authors with regard to HL7 FHIR. For this reason, the University Medicine Greifswald has actively contributed to the HL7 FHIR standard and has fully implemented it (5). We hope that our additions have clarified any remaining uncertainties and welcome further opportunities to exchange and share our practical experience with the authors.

PASTA-4-PHT: A Pipeline for Automated Security and Technical Audits for the Personal Health Train

Bringing the Algorithms to the Data -- Secure Distributed Medical Analytics using the Personal Health Train (PHT-meDIC)

Development of a Trusted Third Party at a Large University Hospital: Design and Implementation Study

Pipeline Provenance for Analysis, Evaluation, Trust or Reproducibility

Exploratory Study of the Privacy Extension for System Theoretic Process Analysis (STPA-Priv) to elicit Privacy Risks in eHealth

A study on interoperability between two Personal Health Train infrastructures in leukodystrophy data analysis

A New Approach to Web Application Security: Utilizing GPT Language Models for Source Code Inspection

Trusted Provenance of Automated, Collaborative and Adaptive Data Processing Pipelines

Privacy-Preserving Workflow for the Cross-Border Federated Analysis of Clinical Data

Towards AI-enabled Cyber Threat Assessment in the Health Sector

Assessing data protection and governance in health information systems: a novel methodology of Privacy and Ethics Impact and Performance Assessment (PEIPA)

PPaaS: Privacy Preservation as a Service

The University Medicine Greifswald's Trusted Third Party Dispatcher: State-of-the-Art Perspective Into Comprehensive Architectures and Complex Research Workflows

Development and Analysis of P2SCP: A Paradigm for Penetration Testing of Systems that Cannot be Subjected to the Risk of Penetration Testing

S3PHER: Secure and Searchable System for Patient-driven HEalth data shaRing

Privacy-Preserving Linkage of Distributed Datasets using the Personal Health Train

Robust Privacy Assessment in Transnational Healthcare Systems

Automated Cyber and Privacy Risk Management Toolkit

Enhancing privacy awareness through a novel BPMN based methodology

No One Size (PPM) Fits All: Towards Privacy in Stream Processing Systems

SoK: Security of the Image Processing Pipeline in Autonomous Vehicles