Bilayer lipid membrane permeation and rupture due to hole formation.

D. Kashchiev,D. Exerowa

DOI: https://doi.org/10.1016/0005-2736(83)90196-7

1983-07-13

Biochimica et Biophysica Acta

Abstract:

What problem does this paper attempt to address?

An adaptive cross-layer optimization scheme for light compressed high-definition video transmission based on 60 GHz system

Wei Zhang,Danpu Liu

DOI: https://doi.org/10.1109/ICCT.2013.6820459

2013-11-01

Abstract:By using 60GHz spectrum in high frequency carrier, IEEE 802.11ad is widely used in the transmission of high-definition videos. In this paper, an adaptive cross-layer optimization scheme is proposed based on IEEE 802.11ad which involves modulation and coding at the physical layer, retransmission policy at the medium access control layer and source coding at the video coding layer. The scheme aims at minimize the video distortion between original video at sending end and reconstructed video at receiver under certain time delay. Simulation results show that the proposed scheme can select a proper combination of parameters at each layer mentioned above for a given SNR and greatly improve the overall performance in minimizing the video distortion.
Anonymization and validation of three-dimensional volumetric renderings of computed tomography data using commercially available T1-weighted magnetic resonance imaging-based algorithms

Rahil Patel,Destie Provenzano,Murray Loew

DOI: https://doi.org/10.1117/1.JMI.10.6.066501

Abstract:Purpose: Previous studies have demonstrated that three-dimensional (3D) volumetric renderings of magnetic resonance imaging (MRI) brain data can be used to identify patients using facial recognition. We have shown that facial features can be identified on simulation-computed tomography (CT) images for radiation oncology and mapped to face images from a database. We aim to determine whether CT images can be anonymized using anonymization software that was designed for T1-weighted MRI data. Approach: Our study examines (1) the ability of off-the-shelf anonymization algorithms to anonymize CT data and (2) the ability of facial recognition algorithms to identify whether faces could be detected from a database of facial images. Our study generated 3D renderings from 57 head CT scans from The Cancer Imaging Archive database. Data were anonymized using AFNI (deface, reface, and 3Dskullstrip) and FSL's BET. Anonymized data were compared to the original renderings and passed through facial recognition algorithms (VGG-Face, FaceNet, DLib, and SFace) using a facial database (labeled faces in the wild) to determine what matches could be found. Results: Our study found that all modules were able to process CT data and that AFNI's 3Dskullstrip and FSL's BET data consistently showed lower reidentification rates compared to the original. Conclusions: The results from this study highlight the potential usage of anonymization algorithms as a clinical standard for deidentifying brain CT data. Our study demonstrates the importance of continued vigilance for patient privacy in publicly shared datasets and the importance of continued evaluation of anonymization methods for CT data.
Evaluation of an automated Presidio anonymisation model for unstructured radiation oncology electronic medical records in an Australian setting

Damian P Kotevski,Robert I Smee,Matthew Field,Yvonne N Nemes,Kathryn Broadley,Claire M Vajdic

DOI: https://doi.org/10.1016/j.ijmedinf.2022.104880

Abstract:Background: Electronic medical records (EMRs) contain valuable information for clinical research, however, the presence of personally identifying information (PII) restricts their use. Anonymisation of PII from EMRs enables clinical information to be shared for research purposes. Since there is limited research relating to the anonymisation of Australian EMRs, the performance of Microsoft Presidio with customisation on clinical documents from an Australian radiation oncology information system (OIS) was evaluated. Methods: A random sample of 300 unstructured free-text clinical documents were extracted from the Prince of Wales Cancer Centre OIS on patients diagnosed with cancer of the head and neck between 2000 and 2017. Anonymisation of clinical text was performed using Microsoft Presidio, implemented in Python programming language. Each clinical document was manually compared pre- and post-anonymisation for the identification and redaction of 13 PII. Model performance was evaluated using three classification criteria; correct, partial, and missed classification, to determine recall, precision, and F1-score. These three metrics were performed under relaxed conditions, where partial classifications were considered correct, and under strict conditions, where only correct classifications were considered correct. Results: A total of 8,713 PII were identified, of which 7,026 (81%) were classified as correct, 850 (10%) as partial, and 837 (9%) as missed. There were 245 instances of incorrect classifications. Evaluation of the model demonstrated an average precision of 0.8921, recall (strict) of 0.8064, F1-score (strict) of 0.8471, recall (relaxed) of 0.9039, and F1-score (relaxed) of 0.8980. Conclusion: This is the first example of an open-source anonymisation model to be customised and tested on clinical documents from an Australian radiation oncology EMR. These findings support the use of Presidio for the safe use and sharing of cancer data within Australia for certain PII, however, additional checks are required to ensure person names are successfully anonymised.
De-Identification of Medical Imaging Data: A Comprehensive Tool for Ensuring Patient Privacy

Moritz Rempe,Lukas Heine,Constantin Seibold,Fabian Hörst,Jens Kleesiek

2024-10-16

Abstract:Medical data employed in research frequently comprises sensitive patient health information (PHI), which is subject to rigorous legal frameworks such as the General Data Protection Regulation (GDPR) or the Health Insurance Portability and Accountability Act (HIPAA). Consequently, these types of data must be pseudonymized prior to utilisation, which presents a significant challenge for many researchers. Given the vast array of medical data, it is necessary to employ a variety of de-identification techniques. To facilitate the anonymization process for medical imaging data, we have developed an open-source tool that can be used to de-identify DICOM magnetic resonance images, computer tomography images, whole slide images and magnetic resonance twix raw data. Furthermore, the implementation of a neural network enables the removal of text within the images. The proposed tool automates an elaborate anonymization pipeline for multiple types of inputs, reducing the need for additional tools used for de-identification of imaging data. We make our code publicly available at <a class="link-external link-https" href="https://github.com/code-lukas/medical_image_deidentification" rel="external noopener nofollow">this https URL</a>.

Image and Video Processing,Computer Vision and Pattern Recognition
A De-Identification Pipeline for Ultrasound Medical Images in DICOM Format

Eriksson Monteiro,Carlos Costa,José Luís Oliveira

DOI: https://doi.org/10.1007/s10916-017-0736-1

IF: 4.92

2017-04-13

Journal of Medical Systems

Abstract:Clinical data sharing between healthcare institutions, and between practitioners is often hindered by privacy protection requirements. This problem is critical in collaborative scenarios where data sharing is fundamental for establishing a workflow among parties. The anonymization of patient information burned in DICOM images requires elaborate processes somewhat more complex than simple de-identification of textual information. Usually, before sharing, there is a need for manual removal of specific areas containing sensitive information in the images. In this paper, we present a pipeline for ultrasound medical image de-identification, provided as a free anonymization REST service for medical image applications, and a Software-as-a-Service to streamline automatic de-identification of medical images, which is freely available for end-users. The proposed approach applies image processing functions and machine-learning models to bring about an automatic system to anonymize medical images. To perform character recognition, we evaluated several machine-learning models, being Convolutional Neural Networks (CNN) selected as the best approach. For accessing the system quality, 500 processed images were manually inspected showing an anonymization rate of 89.2%. The tool can be accessed at https://bioinformatics.ua.pt/dicom/anonymizer and it is available with the most recent version of Google Chrome, Mozilla Firefox and Safari. A Docker image containing the proposed service is also publicly available for the community.

health care sciences & services,medical informatics
Abstract 6579: Accelerating de-identification of images with cloud services to support data sharing in cancer research

Benjamin P. Kopchick,Laura K. Opsahl-Ong,Qinyan Pan,Michael W. Rutherford,Ulrike Wagner,Bhavani S. Singh,Scott Gustafson,Fred W. Prior,David A. Clunie,Juergen A. Klenk,Keyvan Farahani

DOI: https://doi.org/10.1158/1538-7445.am2023-6579

IF: 11.2

2023-04-04

Cancer Research

Abstract:Abstract Purpose: De-identification of cancer imaging data is vitally important for data sharing and the advancement of research, however it is a time consuming and complex process that limits access to new cancer data sets such as those shared through NCI's Imaging Data Commons (IDC), built on the Google Cloud Platform (GCP). Our research demonstrates how this process can be automated using GCP-native services. Methods: We configured the Medical Image De-Identification (MIDI) pipeline to automate de-identification of cancer imaging data. De-identification is performed using an alpha release of GCP’s Healthcare API which was configured to scrub all Protected Health Information (PHI) from both Digital Imaging and Communications in Medicine (DICOM) headers and burnt-in text in pixel data. A dataset containing 216 patients and 23,921 images was prepared to test the de-identification algorithm by placing synthetic PHI in both DICOM headers and pixel data. The synthetic data matched real data seen during curation at The Cancer Imaging Archive (TCIA) and included data difficult for an algorithm to detect. Accuracy of the MIDI pipeline was measured against TCIA’s standard tools and procedures for de-identification. Measures included correct detection of all PHI data and correct action taken (e.g., remove, encrypt, or otherwise obscure). Throughput was also measured. Results: Throughput was measured at 22.0 images per second over 10 runs. The MIDI pipeline’s accuracy for DICOM headers was 98.7%, accurately detecting dates, addresses, phone numbers, unique identifiers, names, and other common PHI. The most common PHI failed to remove were special cases that included uncommon names or names with symbols, dates in string data types that were mistaken for other IDs, patient IDs, and abbreviated institution names. Private Creator data elements were consistently failed to be retained. These errors were due to options not currently available, and algorithms not trained on specific PHI, such as abbreviated institution names. UIDs were correctly replaced. PHI burnt-in the pixel data was successfully detected and removed, with one false positive. Conclusion: We demonstrate the current capability and performance of automated cancer image de-identification. Our results show that while full automation is within grasp, a semi-automated pipeline is now feasible. A human expert in the loop can be used for final verification. This will lead to a much-needed acceleration of image de-identification, to handle the rapidly growing volume of data and provide rapid timely access in support of cancer research. Future work will focus on including pre- and post-processing tools to aid the human expert in the loop, such as identifying and flagging questionable images for manual review. These tools will also be used to catch the errors mentioned in results. Citation Format: Benjamin P. Kopchick, Laura K. Opsahl-Ong, Qinyan Pan, Michael W. Rutherford, Ulrike Wagner, Bhavani S. Singh, Scott Gustafson, Fred W. Prior, David A. Clunie, Juergen A. Klenk, Keyvan Farahani. Accelerating de-identification of images with cloud services to support data sharing in cancer research. [abstract]. In: Proceedings of the American Association for Cancer Research Annual Meeting 2023; Part 1 (Regular and Invited Abstracts); 2023 Apr 14-19; Orlando, FL. Philadelphia (PA): AACR; Cancer Res 2023;83(7_Suppl):Abstract nr 6579.

oncology
Design and Implementation of a Desensitization Method of CT Medical Image Based on DICOM

Jiantin Yuan,Wei Wu,Wenqiang Zhang,Xiaoyi Lv,Chen

DOI: https://doi.org/10.1088/1742-6596/1576/1/012014

2020-01-01

Journal of Physics Conference Series

Abstract:Medical big data, medical image processing and other fields are based on a large number of clinical data. Data desensitization is of great significance to the privacy protection of patients. CT image desensitization based on DICOM standard protocol only uses the strategy of hiding or deleting the data on the image, which greatly weakens the value of data use and cannot meet the normal value demand. Data desensitization should consider that it can still meet the needs of data mining and other applications on the basis of ensuring the privacy security of users. Based on the above application requirements, a strategy to anonymize patient identity is developed. Based on this strategy, a desensitization method that can meet the actual desensitization standards and analysis application requirements at the same time is proposed. This method can not only protect the privacy of patients to a great extent, but also ensure the availability and authenticity of desensitized data. In the future, this method has great potential in the application of CT image desensitization.
A DICOM based radiotherapy plan database for research collaboration and reporting

J Westberg,S Krogh,C Brink,I R Vogelius

DOI: https://doi.org/10.1088/1742-6596/489/1/012100

2014-03-24

Journal of Physics: Conference Series

Abstract:Purpose: To create a central radiotherapy (RT) plan database for dose analysis and reporting, capable of calculating and presenting statistics on user defined patient groups. The goal is to facilitate multi-center research studies with easy and secure access to RT plans and statistics on protocol compliance. Methods: RT institutions are able to send data to the central database using DICOM communications on a secure computer network. The central system is composed of a number of DICOM servers, an SQL database and in-house developed software services to process the incoming data. A web site within the secure network allows the user to manage their submitted data. Results: The RT plan database has been developed in Microsoft .NET and users are able to send DICOM data between RT centers in Denmark. Dose-volume histogram (DVH) calculations performed by the system are comparable to those of conventional RT software. A permission system was implemented to ensure access control and easy, yet secure, data sharing across centers. The reports contain DVH statistics for structures in user defined patient groups. The system currently contains over 2200 patients in 14 collaborations. Conclusions: A central RT plan repository for use in multi-center trials and quality assurance was created. The system provides an attractive alternative to dummy runs by enabling continuous monitoring of protocol conformity and plan metrics in a trial.
A generalized software framework for consolidation of radiotherapy planning and delivery data from diverse data sources

Yasin Abdulkadir,Justin Hink,Peter Boyle,Dishane Luximon,Justin Pijanowski,Timothy Ritter,Bruce Curran,Min Leu,Nicholas Nickols,Steve P. Lee,Jatinder R. Palta,Maria Kelly,Rishabh Kapoor,Reid Thompson,Daniel A. Low,James M. Lamb,Jack Neylon

2024-11-14

Abstract:Aggregating large-scale radiotherapy planning and delivery data is crucial for advancing radiation oncology research and improving clinical practice, yet challenges persist due to the diversity of treatment planning systems (TPS), record and verify (R&V) systems, and complex data formats lacking standardized retrieval methods. We developed a robust software framework that automates the collection and integration of multi-institutional radiotherapy data from diverse TPS and R&V systems. By utilizing the unidirectional references of DICOM objects, our framework reconstructs complete patient datasets starting from Radiotherapy Treatment Records (RTRECORDs), managing tasks such as data queries, transfers, verification, and logging. It effectively maps DICOM linkages between RTRECORDs, RTPLANs, RTDOSEs, RTSTRUCTs, planning images, registrations, and associated diagnostic images, incorporating custom modules for data conversion and comprehensive error handling. Implemented across multiple institutions using various systems$-$ including ARIA, Eclipse, MOSAIQ, RayStation, MIM, Pinnacle$-$ the framework successfully collected data from two clinics over an 11-year period, aggregating data from 6,022 patients and 13,871 treatment plans with a success rate of 99.76% and an average processing time of approximately 18 minutes per patient. Ongoing efforts are extending data collection to clinics lacking DICOM Query/Retrieve capabilities, demonstrating the framework's adaptability to various clinical environments. This efficient automation of comprehensive data collection overcomes significant technical barriers, facilitating the creation of large-scale datasets that can accelerate advancements in radiation oncology.

Medical Physics
Deep Learning-based Anonymization of Chest Radiographs: A Utility-preserving Measure for Patient Privacy

Kai Packhäuser,Sebastian Gündel,Florian Thamm,Felix Denzinger,Andreas Maier

2023-07-24

Abstract:Robust and reliable anonymization of chest radiographs constitutes an essential step before publishing large datasets of such for research purposes. The conventional anonymization process is carried out by obscuring personal information in the images with black boxes and removing or replacing meta-information. However, such simple measures retain biometric information in the chest radiographs, allowing patients to be re-identified by a linkage attack. Therefore, there is an urgent need to obfuscate the biometric information appearing in the images. We propose the first deep learning-based approach (PriCheXy-Net) to targetedly anonymize chest radiographs while maintaining data utility for diagnostic and machine learning purposes. Our model architecture is a composition of three independent neural networks that, when collectively used, allow for learning a deformation field that is able to impede patient re-identification. Quantitative results on the ChestX-ray14 dataset show a reduction of patient re-identification from 81.8% to 57.7% (AUC) after re-training with little impact on the abnormality classification performance. This indicates the ability to preserve underlying abnormality patterns while increasing patient privacy. Lastly, we compare our proposed anonymization approach with two other obfuscation-based methods (Privacy-Net, DP-Pix) and demonstrate the superiority of our method towards resolving the privacy-utility trade-off for chest radiographs.

Image and Video Processing,Cryptography and Security,Computer Vision and Pattern Recognition,Machine Learning
Towards a Privacy Preserving Cohort Discovery Framework for Clinical Research Networks.

Jiawei Yuan,Bradley Malin,Francois Modave,Yi Guo,William R. Hogan,Elizabeth Shenkman,Jiang Bian

DOI: https://doi.org/10.1016/j.jbi.2016.12.008

IF: 8

2017-01-01

Journal of Biomedical Informatics

Abstract:Background: The last few years have witnessed an increasing number of clinical research networks (CRNs) focused on building large collections of data from electronic health records (EHRs), claims, and patient-reported outcomes (PROs). Many of these CRNs provide a service for the discovery of research cohorts with various health conditions, which is especially useful for rare diseases.Background: Supporting patient privacy can enhance the scalability and efficiency of such processes; however, current practice mainly relies on policy, such as guidelines defined in the Health Insurance Portability and Accountability Act (HIPAA), which are insufficient for CRNs (e.g., HIPAA does not require encryption of data which can mitigate insider threats). By combining policy with privacy enhancing technologies we can enhance the trustworthiness of CRNs. The goal of this research is to determine if searchable encryption can instill privacy in CRNs without sacrificing their usability.Methods: We developed a technique, implemented in working software to enable privacy-preserving cohort discovery (PPCD) services in large distributed CRNs based on elliptic curve cryptography (ECC). This technique also incorporates a block indexing strategy to improve the performance (in terms of computational running time) of PPCD. We evaluated the PPCD service with three real cohort definitions: (1) elderly cervical cancer patients who underwent radical hysterectomy, (2) oropharyngeal and tongue cancer patients who underwent robotic transoral surgery, and (3) female breast cancer patients who underwent mastectomy) with varied query complexity. These definitions were tested in an encrypted database of 7.1 million records derived from the publically available Healthcare Cost and Utilization Project (HCUP) Nationwide Inpatient Sample (NIS). We assessed the performance of the PPCD service in terms of (1) accuracy in cohort discovery, (2) computational running time, and (3) privacy. afforded to the underlying records during PPCD.Results: The empirical results indicate that the proposed PPCD can execute cohort discovery queries in a reasonable amount of time, with query runtime in the range of 165-262 s for the 3 use cases, with zero compromise in accuracy. We further show that the search performance is practical because it supports a highly parallelized design for secure evaluation over encrypted records. Additionally, our security analysis shows that the proposed construction is resilient to standard adversaries.Conclusions: PPCD services can be designed for clinical research networks. The security construction presented in this work specifically achieves high privacy guarantees by preventing both threats originating from within and beyond the network. (C) 2016 Elsevier Inc. All rights reserved.
Data Anonymization for Pervasive Health Care: Systematic Literature Mapping Study (Preprint)

Zheming Zuo,Matthew Watson,David Budgen,Robert Hall,Chris Kennelly,Noura Al Moubayed

DOI: https://doi.org/10.2196/preprints.29871

2021-04-23

Abstract:BACKGROUND Data science offers an unparalleled opportunity to identify new insights into many aspects of human life with recent advances in health care. Using data science in digital health raises significant challenges regarding data privacy, transparency, and trustworthiness. Recent regulations enforce the need for a clear legal basis for collecting, processing, and sharing data, for example, the European Union’s General Data Protection Regulation (2016) and the United Kingdom’s Data Protection Act (2018). For health care providers, legal use of the electronic health record (EHR) is permitted only in clinical care cases. Any other use of the data requires thoughtful considerations of the legal context and direct patient consent. Identifiable personal and sensitive information must be sufficiently anonymized. Raw data are commonly anonymized to be used for research purposes, with risk assessment for reidentification and utility. Although health care organizations have internal policies defined for information governance, there is a significant lack of practical tools and intuitive guidance about the use of data for research and modeling. Off-the-shelf data anonymization tools are developed frequently, but privacy-related functionalities are often incomparable with regard to use in different problem domains. In addition, tools to support measuring the risk of the anonymized data with regard to reidentification against the usefulness of the data exist, but there are question marks over their efficacy. OBJECTIVE In this systematic literature mapping study, we aim to alleviate the aforementioned issues by reviewing the landscape of data anonymization for digital health care. METHODS We used Google Scholar, Web of Science, Elsevier Scopus, and PubMed to retrieve academic studies published in English up to June 2020. Noteworthy gray literature was also used to initialize the search. We focused on review questions covering 5 bottom-up aspects: basic anonymization operations, privacy models, reidentification risk and usability metrics, off-the-shelf anonymization tools, and the lawful basis for EHR data anonymization. RESULTS We identified 239 eligible studies, of which 60 were chosen for general background information; 16 were selected for 7 basic anonymization operations; 104 covered 72 conventional and machine learning–based privacy models; four and 19 papers included seven and 15 metrics, respectively, for measuring the reidentification risk and degree of usability; and 36 explored 20 data anonymization software tools. In addition, we also evaluated the practical feasibility of performing anonymization on EHR data with reference to their usability in medical decision-making. Furthermore, we summarized the lawful basis for delivering guidance on practical EHR data anonymization. CONCLUSIONS This systematic literature mapping study indicates that anonymization of EHR data is theoretically achievable; yet, it requires more research efforts in practical implementations to balance privacy preservation and usability to ensure more reliable health care applications.
De-Identification of Facial Features in Magnetic Resonance Images: Software Development Using Deep Learning Technology

Yeon Uk Jeong,Soyoung Yoo,Young-Hak Kim,Woo Hyun Shim

DOI: https://doi.org/10.2196/22739

2020-12-10

Abstract:Background: High-resolution medical images that include facial regions can be used to recognize the subject's face when reconstructing 3-dimensional (3D)-rendered images from 2-dimensional (2D) sequential images, which might constitute a risk of infringement of personal information when sharing data. According to the Health Insurance Portability and Accountability Act (HIPAA) privacy rules, full-face photographic images and any comparable image are direct identifiers and considered as protected health information. Moreover, the General Data Protection Regulation (GDPR) categorizes facial images as biometric data and stipulates that special restrictions should be placed on the processing of biometric data. Objective: This study aimed to develop software that can remove the header information from Digital Imaging and Communications in Medicine (DICOM) format files and facial features (eyes, nose, and ears) at the 2D sliced-image level to anonymize personal information in medical images. Methods: A total of 240 cranial magnetic resonance (MR) images were used to train the deep learning model (144, 48, and 48 for the training, validation, and test sets, respectively, from the Alzheimer's Disease Neuroimaging Initiative [ADNI] database). To overcome the small sample size problem, we used a data augmentation technique to create 576 images per epoch. We used attention-gated U-net for the basic structure of our deep learning model. To validate the performance of the software, we adapted an external test set comprising 100 cranial MR images from the Open Access Series of Imaging Studies (OASIS) database. Results: The facial features (eyes, nose, and ears) were successfully detected and anonymized in both test sets (48 from ADNI and 100 from OASIS). Each result was manually validated in both the 2D image plane and the 3D-rendered images. Furthermore, the ADNI test set was verified using Microsoft Azure's face recognition artificial intelligence service. By adding a user interface, we developed and distributed (via GitHub) software named "Deface program" for medical images as an open-source project. Conclusions: We developed deep learning-based software for the anonymization of MR images that distorts the eyes, nose, and ears to prevent facial identification of the subject in reconstructed 3D images. It could be used to share medical big data for secondary research while making both data providers and recipients compliant with the relevant privacy regulations.
BT24 Pseudonymization for artificial intelligence skin lesion datasets: a real-world feasibility study

Trisha J M Chin,Gillian X M Chin,James Sutherland,Andrew Coon,Colin Morton,Colin Fleming

DOI: https://doi.org/10.1093/bjd/ljae090.421

IF: 11.113

2024-06-28

British Journal of Dermatology

Abstract:Abstract The use of patient data for artificial intelligence (AI) research should be transparent, rigorous and accountable. In the UK, the General Data Protection Regulation, Data Protection Act 2018 and General Medical Council govern data handling and patients’ rights to privacy. We report on our multistep pseudonymization protocol for real-world skin lesion datasets, in preparation for research within a trusted research environment (TRE). Firstly, patients referred from primary care are triaged for community locality and imaging centre (CLIC) suitability. There, trained healthcare professionals capture lesion images (dermoscopic, macroscopic and regional) and patient information using a mobile application on trust-certified devices. Training is standardized across all CLIC sites, with specific anonymization training on removing in-frame clothing and jewellery, device positioning, and magnification to minimize identifiable features like eyes, nose and ears. Lesion datasets (paired images and clinical information) are subsequently transferred to an image management system (IMS) hosted on our trust-secured network. Within the IMS, images are manually inspected, and those with identifiable tattoos and piercings are excluded. All regional images are also excluded from transfer to the TRE. Before transfer to the TRE, images undergo a further round of review. Data fields are manually checked for identifiable patient information, patient names are removed, and dates of birth are rounded to 3-month granularity. The job ID, patient’s hospital number, date of clinical episode and responsible photographer are replaced with randomly generated project-specific identifiers. In an initial study period, 658 of 963 (68%) captured lesion datasets have undergone IMS manual inspection. Of these, 24 lesion datasets were excluded for identifiable features, 10 (41%) for more than one-third of the face being visible, 9 (38%) for full iris visibility, and 5 (21%) for tattoos. On breakdown by anatomical location these images were of the face (19, 80%), torso (2, 8%), limbs (2, 8%) and neck (1, 4%). The remaining 634 datasets (96%) were securely transferred to the TRE, where a further 5% were excluded due to potential identifiability. Although full anonymization is desirable, it is usually achieved by aggregating patient data. Pseudonymization, which allows for future reidentification in a secured fashion, strikes the balance between patient data privacy and clinical governance, while retaining a level of granularity sufficient for meaningful analysis. Currently, this protocol is manually intensive with room to partly automate. Use of common standardized protocols will strengthen the public trust in clinical AI.

dermatology
Data Anonymization for Pervasive Health Care: Systematic Literature Mapping Study

Zheming Zuo,Matthew Watson,David Budgen,Robert Hall,Chris Kennelly,Noura Al Moubayed

DOI: https://doi.org/10.2196/29871

IF: 3.2

2021-10-15

JMIR Medical Informatics

Abstract:Background Data science offers an unparalleled opportunity to identify new insights into many aspects of human life with recent advances in health care. Using data science in digital health raises significant challenges regarding data privacy, transparency, and trustworthiness. Recent regulations enforce the need for a clear legal basis for collecting, processing, and sharing data, for example, the European Union’s General Data Protection Regulation (2016) and the United Kingdom’s Data Protection Act (2018). For health care providers, legal use of the electronic health record (EHR) is permitted only in clinical care cases. Any other use of the data requires thoughtful considerations of the legal context and direct patient consent. Identifiable personal and sensitive information must be sufficiently anonymized. Raw data are commonly anonymized to be used for research purposes, with risk assessment for reidentification and utility. Although health care organizations have internal policies defined for information governance, there is a significant lack of practical tools and intuitive guidance about the use of data for research and modeling. Off-the-shelf data anonymization tools are developed frequently, but privacy-related functionalities are often incomparable with regard to use in different problem domains. In addition, tools to support measuring the risk of the anonymized data with regard to reidentification against the usefulness of the data exist, but there are question marks over their efficacy. Objective In this systematic literature mapping study, we aim to alleviate the aforementioned issues by reviewing the landscape of data anonymization for digital health care. Methods We used Google Scholar, Web of Science, Elsevier Scopus, and PubMed to retrieve academic studies published in English up to June 2020. Noteworthy gray literature was also used to initialize the search. We focused on review questions covering 5 bottom-up aspects: basic anonymization operations, privacy models, reidentification risk and usability metrics, off-the-shelf anonymization tools, and the lawful basis for EHR data anonymization. Results We identified 239 eligible studies, of which 60 were chosen for general background information; 16 were selected for 7 basic anonymization operations; 104 covered 72 conventional and machine learning–based privacy models; four and 19 papers included seven and 15 metrics, respectively, for measuring the reidentification risk and degree of usability; and 36 explored 20 data anonymization software tools. In addition, we also evaluated the practical feasibility of performing anonymization on EHR data with reference to their usability in medical decision-making. Furthermore, we summarized the lawful basis for delivering guidance on practical EHR data anonymization. Conclusions This systematic literature mapping study indicates that anonymization of EHR data is theoretically achievable; yet, it requires more research efforts in practical implementations to balance privacy preservation and usability to ensure more reliable health care applications.

medical informatics
Proteus syndrome and unilateral congenital windblown hand deformity.

L. de Smet,J. Fryns

DOI: https://doi.org/10.1002/AJMG.1320490132

American Journal of Medical Genetics

Abstract:
Preparing a collection of radiology examinations for distribution and retrieval

Dina Demner-Fushman,Marc D Kohli,Marc B Rosenman,Sonya E Shooshan,Laritza Rodriguez,Sameer Antani,George R Thoma,Clement J McDonald,Marc D. Kohli,Marc B. Rosenman,Sonya E. Shooshan,George R. Thoma,Clement J. McDonald

DOI: https://doi.org/10.1093/jamia/ocv080

2015-07-01

Journal of the American Medical Informatics Association

Abstract:Abstract Objective Clinical documents made available for secondary use play an increasingly important role in discovery of clinical knowledge, development of research methods, and education. An important step in facilitating secondary use of clinical document collections is easy access to descriptions and samples that represent the content of the collections. This paper presents an approach to developing a collection of radiology examinations, including both the images and radiologist narrative reports, and making them publicly available in a searchable database. Materials and Methods The authors collected 3996 radiology reports from the Indiana Network for Patient Care and 8121 associated images from the hospitals’ picture archiving systems. The images and reports were de-identified automatically and then the automatic de-identification was manually verified. The authors coded the key findings of the reports and empirically assessed the benefits of manual coding on retrieval. Results The automatic de-identification of the narrative was aggressive and achieved 100% precision at the cost of rendering a few findings uninterpretable. Automatic de-identification of images was not quite as perfect. Images for two of 3996 patients (0.05%) showed protected health information. Manual encoding of findings improved retrieval precision. Conclusion Stringent de-identification methods can remove all identifiers from text radiology reports. DICOM de-identification of images does not remove all identifying information and needs special attention to images scanned from film. Adding manual coding to the radiologist narrative reports significantly improved relevancy of the retrieved clinical documents. The de-identified Indiana chest X-ray collection is available for searching and downloading from the National Library of Medicine ( http://openi.nlm.nih.gov/ ).

information science & library science,computer science, information systems, interdisciplinary applications,health care sciences & services,medical informatics
Anonymously Analyzing Clinical Datasets

Nafees Qamar,Yilong Yang,Andras Nadas,Zhiming Liu,Janos Sztipanovits

DOI: https://doi.org/10.48550/arXiv.1501.05916

2014-11-19

Abstract:This paper takes on the problem of automatically identifying clinically-relevant patterns in medical datasets without compromising patient privacy. To achieve this goal, we treat datasets as a black box for both internal and external users of data that lets us handle clinical data queries directly and far more efficiently. The novelty of the approach lies in avoiding the data de-identification process often used as a means of preserving patient privacy. The implemented toolkit combines software engineering technologies such as Java EE and RESTful web services, to allow exchanging medical data in an unidentifiable XML format as well as restricting users to the need-to-know principle. Our technique also inhibits retrospective processing of data, such as attacks by an adversary on a medical dataset using advanced computational methods to reveal Protected Health Information (PHI). The approach is validated on an endoscopic reporting application based on openEHR and MST standards. From the usability perspective, the approach can be used to query datasets by clinical researchers, governmental or non-governmental organizations in monitoring health care services to improve quality of care.

Software Engineering,Cryptography and Security,Databases
Prevention of Radiation Therapy Treatment Deviations by a Novel Combined Biometric, Radiofrequency Identification, and Surface Imaging System

Hui Zhao,Adam Paxton,Vikren Sarkar,Y Jessica Huang,Fan-Chi Frances Su,Christine Haacke,Prema Rassiah-Szegedi,Martin Szegedi,Bill Salter

DOI: https://doi.org/10.1016/j.prro.2020.08.006

Abstract:Purpose: To evaluate the impact of Varian Identify, a novel combined radiofrequency identification, biometric and surface-matching technology, on its potential for patient safety and prevention of radiation therapy treatment deviations. Methods and materials: One hundred eight radiation therapy treatment deviation reports at our facility over the past 8 years were analyzed. Three major categories were defined based on the time point of occurrence: physician order deviations (19.4%), treatment-planning deviations (24.1%), and machine treatment deviations (56.5%). The impact of Identify on potential prevention of machine treatment deviations was analyzed. A failure mode and effects analysis was performed on the 5 most frequently occurring errors preventable with Identify. Safety analysis of the Identify system was reported based on 3.5 years of clinical data post-Identify system installation on 3 treatment vaults. Results: Of the 61 machine treatment deviations, 47 (77%) were interpreted as being preventable by using Identify. Our failure mode and effects analysis showed reductions in all risk priority numbers post-Identify application. Safety analysis of the Identify system from our direct observation that for approximately 7 cumulative years of Identify use in 3 different treatment vaults, where 9 deviations would have been expected to occur over this combined period, zero machine treatment events occurred. Conclusions: The combination of Identify biometric, radiofrequency identification, and surface-matching technologies was observed to enable an effective process for enhancing safety and efficiency of radiation therapy treatment. A significant reduction in machine-related deviations was observed.

Bilayer lipid membrane permeation and rupture due to hole formation.

An adaptive cross-layer optimization scheme for light compressed high-definition video transmission based on 60 GHz system

Anonymization and validation of three-dimensional volumetric renderings of computed tomography data using commercially available T1-weighted magnetic resonance imaging-based algorithms

Evaluation of an automated Presidio anonymisation model for unstructured radiation oncology electronic medical records in an Australian setting

De-Identification of Medical Imaging Data: A Comprehensive Tool for Ensuring Patient Privacy

A De-Identification Pipeline for Ultrasound Medical Images in DICOM Format

Abstract 6579: Accelerating de-identification of images with cloud services to support data sharing in cancer research

Design and Implementation of a Desensitization Method of CT Medical Image Based on DICOM

A DICOM based radiotherapy plan database for research collaboration and reporting

A generalized software framework for consolidation of radiotherapy planning and delivery data from diverse data sources

Deep Learning-based Anonymization of Chest Radiographs: A Utility-preserving Measure for Patient Privacy

Towards a Privacy Preserving Cohort Discovery Framework for Clinical Research Networks.

Data Anonymization for Pervasive Health Care: Systematic Literature Mapping Study (Preprint)

De-Identification of Facial Features in Magnetic Resonance Images: Software Development Using Deep Learning Technology

BT24 Pseudonymization for artificial intelligence skin lesion datasets: a real-world feasibility study

Data Anonymization for Pervasive Health Care: Systematic Literature Mapping Study

Proteus syndrome and unilateral congenital windblown hand deformity.

Preparing a collection of radiology examinations for distribution and retrieval

Anonymously Analyzing Clinical Datasets

Prevention of Radiation Therapy Treatment Deviations by a Novel Combined Biometric, Radiofrequency Identification, and Surface Imaging System