Dendritic cells' death induced by contact sensitizers is controlled by Nrf2 and depends on glutathione levels☆

Z. El Ali,C. Deloménie,J. Botton,M. Pallardy,S. Kerdine-Römer

DOI: https://doi.org/10.1016/j.taap.2017.02.014

IF: 4.46

2017-05-01

Toxicology and Applied Pharmacology

Abstract:

What problem does this paper attempt to address?

The University Medicine Greifswald's Trusted Third Party Dispatcher: State-of-the-Art Perspective Into Comprehensive Architectures and Complex Research Workflows

Martin Bialke,Dana Stahl,Torsten Leddig,Wolfgang Hoffmann

DOI: https://doi.org/10.2196/65784

IF: 3.2

2024-12-01

JMIR Medical Informatics

Abstract:With great interest we read the article entitled "Development of a Trusted Third Party at a Large University Hospital: Design and Implementation Study" by Wündisch et al. (1). The objective of the article was to introduce a "comprehensive architecture for a Trusted Third Party (TTP) that aims to support a wide range of different research projects" incorporating "a fine-grained authentication and authorization model [and] a modern REST-API" in order to "support cross-service workflows". Their work is based on well-established software components of the University Medicine Greifswald for record linkage (E PIX®), pseudonymisation (gPAS®) and consent management (gICS®) (2). With this letter, we aim to place the authors' statement that "the literature lacks insights into the design of more comprehensive architectures that support complex research workflows that are actually in production use" into a state-of-the-art perspective to prevent any misleading impressions. While the authors concede that "research exists on the components mentioned above", their article contains several inaccuracies that we would like to highlight in the following. The functional scope of the existing solutions (E-PIX, gPAS, gICS) is presented in Table 1. However, the existing workflow management solution of the University Medicine Greifswald (TTP Dispatcher) was not displayed (2). The authors only reference this highly relevant component later in text of their article. Furthermore, the content and designation of Table 2 "additional functional requirements" misleadingly suggests that the listed requirements are not covered by the solutions mentioned in Table 1. In published work (2) (3) and available materials (4), many of the checkmarks listed in Table 2 have been successfully validated, and moreover, the compliance of the tools with the pertinent TMF guidelines (3) has been demonstrated. Unlike the authors' indication, the TTP dispatcher solution from the University Medicine Greifswald provides a common REST-API across all TTP services (based on E-PIX, gPAS and gICS) and enables cross-service workflows (2). Contrary to the description by Wündisch et. al., the dispatcher architecture allows the implementation of complex research workflows. We published a list of available workflows together with a corresponding example ("automatic creation of pseudonyms linked to the primary identifier when registering a patient or study participant")(2). Since 2018, the existing TTP dispatcher solution has been made available in various project collaborations (3). In 2024, the TTP dispatcher is used in projects throughout Germany and the comprehensive documentation for the latest software version is publicly available (4). With regard to the relevance of the secure authentication mechanisms, we fully agree with the authors that OAuth 2.0 support based on OIDC and a fine-grained authorisation model are essential for securing TTP-Services. Therefore, Keycloak-support for E-PIX, gPAS and gICS is operational since 2022 (5). We can also only encourage the interoperability endeavours of the authors with regard to HL7 FHIR. For this reason, the University Medicine Greifswald has actively contributed to the HL7 FHIR standard and has fully implemented it (5). We hope that our additions have clarified any remaining uncertainties and welcome further opportunities to exchange and share our practical experience with the authors.

medical informatics
Integration of Trusted Third Party Software into an EDC System for Data Protection - Compliant Identity Management, Consent Management and Pseudonymization in Medical Research Studies

Johannes Wagner,Hauke Schneiderheinze,Marcus Wurlitzer,Oliver Köckritz,Nils Dittberner,Martin Bialke,Peter Penndorf,Arne Blumentritt,Jan Gewehr

DOI: https://doi.org/10.3233/SHTI240840

2024-08-30

Abstract:Introduction: Medical research studies which involve electronic data capture of sensitive data about human subjects need to manage medical and identifying participant data in a secure manner. To protect the identity of data subjects, an independent trusted third party should be responsible for pseudonymization and management of the identifying data. Methods: We have developed a web-based integrated solution that combines REDCap as an electronic data capture system with the trusted third party software tools of the University Medicine Greifswald, which provides study personnel with a single user interface for both clinical data entry and management of identities, pseudonyms and informed consents. Results: Integration of the two platforms enables a seamless workflow of registering new participants, entering identifying and consent information, and generating pseudonyms in the trusted third party system, with subsequent capturing of medical data in the electronic data capture system, while maintaining strict separation of medical and identifying data in the two independently managed systems. Conclusion: Our solution enables a time-efficient data entry workflow, provides a high level of data protection by minimizing visibility of identifying information and pseudonym lists, and avoids errors introduced by manual transfer of pseudonyms between separate systems.
PASTA-4-PHT: A Pipeline for Automated Security and Technical Audits for the Personal Health Train

Sascha Welten,Karl Kindermann,Ahmet Polat,Martin Görz,Maximilian Jugl,Laurenz Neumann,Alexander Neumann,Johannes Lohmöller,Jan Pennekamp,Stefan Decker

2024-12-02

Abstract:With the introduction of data protection regulations, the need for innovative privacy-preserving approaches to process and analyse sensitive data has become apparent. One approach is the Personal Health Train (PHT) that brings analysis code to the data and conducts the data processing at the data premises. However, despite its demonstrated success in various studies, the execution of external code in sensitive environments, such as hospitals, introduces new research challenges because the interactions of the code with sensitive data are often incomprehensible and lack transparency. These interactions raise concerns about potential effects on the data and increases the risk of data breaches. To address this issue, this work discusses a PHT-aligned security and audit pipeline inspired by DevSecOps principles. The automated pipeline incorporates multiple phases that detect vulnerabilities. To thoroughly study its versatility, we evaluate this pipeline in two ways. First, we deliberately introduce vulnerabilities into a PHT. Second, we apply our pipeline to five real-world PHTs, which have been utilised in real-world studies, to audit them for potential vulnerabilities. Our evaluation demonstrates that our designed pipeline successfully identifies potential vulnerabilities and can be applied to real-world studies. In compliance with the requirements of the GDPR for data management, documentation, and protection, our automated approach supports researchers using in their data-intensive work and reduces manual overhead. It can be used as a decision-making tool to assess and document potential vulnerabilities in code for data processing. Ultimately, our work contributes to an increased security and overall transparency of data processing activities within the PHT framework.

Cryptography and Security,Distributed, Parallel, and Cluster Computing
Designing and piloting a generic research architecture and workflows to unlock German primary care data for secondary use

Thomas Bahls,Johannes Pung,Stephanie Heinemann,Johannes Hauswaldt,Iris Demmer,Arne Blumentritt,Henriette Rau,Johannes Drepper,Philipp Wieder,Roland Groh,Eva Hummers,Falk Schlegelmilch

DOI: https://doi.org/10.1186/s12967-020-02547-x

2020-10-19

Abstract:Background: Medical data from family doctors are of great importance to health care researchers but seem to be locked in German practices and, thus, are underused in research. The RADAR project (Routine Anonymized Data for Advanced Health Services Research) aims at designing, implementing and piloting a generic research architecture, technical software solutions as well as procedures and workflows to unlock data from family doctor's practices. A long-term medical data repository for research taking legal requirements into account is established. Thereby, RADAR helps closing the gap between the European countries and to contribute data from primary care in Germany. Methods: The RADAR project comprises three phases: (1) analysis phase, (2) design phase, and (3) pilot. First, interdisciplinary workshops were held to list prerequisites and requirements. Second, an architecture diagram with building blocks and functions, and an ordered list of process steps (workflow) for data capture and storage were designed. Third, technical components and workflows were piloted. The pilot was extended by a data integration workflow using patient-reported outcomes (paper-based questionnaires). Results: The analysis phase resulted in listing 17 essential prerequisites and guiding requirements for data management compliant with the General Data Protection Regulation (GDPR). Based on this list existing approaches to fulfil the RADAR tasks were evaluated-for example, re-using BDT interface for data exchange and Trusted Third Party-approach for consent management and record linkage. Consented data sets of 100 patients were successfully exported, separated into person-identifying and medical data, pseudonymised and saved. Record linkage and data integration workflows for patient-reported outcomes in the RADAR research database were successfully piloted for 63 responders. Conclusion: The RADAR project successfully developed a generic architecture together with a technical framework of tools, interfaces, and workflows for a complete infrastructure for practicable and secure processing of patient data from family doctors. All technical components and workflows can be reused for further research projects. Additionally, a Trusted Third Party-approach can be used as core element to implement data privacy protection in such heterogeneous family doctor's settings. Optimisations identified comprise a fully-electronic consent recording using tablet computers, which is part of the project's extension phase.
MainzelHandler: A Library for a Simple Integration and Usage of the Mainzelliste

Daniel Preciado-Marquez,Ludger Becker,Michael Storck,Leonard Greulich,Martin Dugas,Tobias J Brix

DOI: https://doi.org/10.3233/SHTI210155

2021-05-27

Abstract:Pseudonymization plays a vital role in medical research. In Germany, the Technologie- und Methodenplattform für die vernetzte medizinische Forschung e.V. (TMF) has developed guidelines on how to create pseudonyms and how to handle personally identifiable information (PII) during this process. An open-source implementation of a pseudonymization service following these guidelines and therefore recommended by the TMF is the so-called "Mainzelliste". This web application supports a REST-API for (de-) pseudonymization. For security reasons, a complex session and tokening mechanism for each (de-) pseudonymization is required and a careful interaction between front- and backend to ensure a correct handling of PII. The objective of this work is the development of a library to simplify the integration and usage of the Mainzelliste's API in a TMF conform way. The frontend library uses JavaScript while the backend component is based on Java with an optional Spring Boot extension. The library is available under MIT open-source license from https://github.com/DanielPreciado-Marquez/MainzelHandler.
Integrated Data Repository Toolkit (IDRT). A Suite of Programs to Facilitate Health Analytics on Heterogeneous Medical Data

C R K D Bauer,T Ganslandt,B Baum,J Christoph,I Engel,M Löbe,S Mate,S Stäubert,J Drepper,H-U Prokosch,A Winter,U Sax

DOI: https://doi.org/10.3414/ME15-01-0082

Abstract:Background: In recent years, research data warehouses moved increasingly into the focus of interest of medical research. Nevertheless, there are only a few center-independent infrastructure solutions available. They aim to provide a consolidated view on medical data from various sources such as clinical trials, electronic health records, epidemiological registries or longitudinal cohorts. The i2b2 framework is a well-established solution for such repositories, but it lacks support for importing and integrating clinical data and metadata. Objectives: The goal of this project was to develop a platform for easy integration and administration of data from heterogeneous sources, to provide capabilities for linking them to medical terminologies and to allow for transforming and mapping of data streams for user-specific views. Methods: A suite of three tools has been developed: the i2b2 Wizard for simplifying administration of i2b2, the IDRT Import and Mapping Tool for loading clinical data from various formats like CSV, SQL, CDISC ODM or biobanks and the IDRT i2b2 Web Client Plugin for advanced export options. The Import and Mapping Tool also includes an ontology editor for rearranging and mapping patient data and structures as well as annotating clinical data with medical terminologies, primarily those used in Germany (ICD-10-GM, OPS, ICD-O, etc.). Results: With the three tools functional, new i2b2-based research projects can be created, populated and customized to researcher's needs in a few hours. Amalgamating data and metadata from different databases can be managed easily. With regards to data privacy a pseudonymization service can be plugged in. Using common ontologies and reference terminologies rather than project-specific ones leads to a consistent understanding of the data semantics. Conclusions: i2b2's promise is to enable clinical researchers to devise and test new hypothesis even without a deep knowledge in statistical programing. The approach presented here has been tested in a number of scenarios with millions of observations and tens of thousands of patients. Initially mostly observant, trained researchers were able to construct new analyses on their own. Early feedback indicates that timely and extensive access to their "own" data is appreciated most, but it is also lowering the barrier for other tasks, for instance checking data quality and completeness (missing data, wrong coding).
Exploring Stakeholder Requirements to Enable Research and Development of Artificial Intelligence Algorithms in a Hospital-Based Generic Infrastructure: Results of a Multistep Mixed Methods Study

Lina Weinert,Maximilian Klass,Gerd Schneider,Oliver Heinze

DOI: https://doi.org/10.2196/43958

2023-04-18

Abstract:Background: Legal, controlled, and regulated access to high-quality data from academic hospitals currently poses a barrier to the development and testing of new artificial intelligence (AI) algorithms. To overcome this barrier, the German Federal Ministry of Health supports the "pAItient" (Protected Artificial Intelligence Innovation Environment for Patient Oriented Digital Health Solutions for developing, testing and evidence-based evaluation of clinical value) project, with the goal to establish an AI Innovation Environment at the Heidelberg University Hospital, Germany. It is designed as a proof-of-concept extension to the preexisting Medical Data Integration Center. Objective: The first part of the pAItient project aims to explore stakeholders' requirements for developing AI in partnership with an academic hospital and granting AI experts access to anonymized personal health data. Methods: We designed a multistep mixed methods approach. First, researchers and employees from stakeholder organizations were invited to participate in semistructured interviews. In the following step, questionnaires were developed based on the participants' answers and distributed among the stakeholders' organizations. In addition, patients and physicians were interviewed. Results: The identified requirements covered a wide range and were conflicting sometimes. Relevant patient requirements included adequate provision of necessary information for data use, clear medical objective of the research and development activities, trustworthiness of the organization collecting the patient data, and data should not be reidentifiable. Requirements of AI researchers and developers encompassed contact with clinical users, an acceptable user interface (UI) for shared data platforms, stable connection to the planned infrastructure, relevant use cases, and assistance in dealing with data privacy regulations. In a next step, a requirements model was developed, which depicts the identified requirements in different layers. This developed model will be used to communicate stakeholder requirements within the pAItient project consortium. Conclusions: The study led to the identification of necessary requirements for the development, testing, and validation of AI applications within a hospital-based generic infrastructure. A requirements model was developed, which will inform the next steps in the development of an AI innovation environment at our institution. Results from our study replicate previous findings from other contexts and will add to the emerging discussion on the use of routine medical data for the development of AI applications. International registered report identifier (irrid): RR2-10.2196/42208.
Bringing the Algorithms to the Data -- Secure Distributed Medical Analytics using the Personal Health Train (PHT-meDIC)

Marius de Arruda Botelho Herr,Michael Graf,Peter Placzek,Florian König,Felix Bötte,Tyra Stickel,David Hieber,Lukas Zimmermann,Michael Slupina,Christopher Mohr,Stephanie Biergans,Mete Akgün,Nico Pfeifer,Oliver Kohlbacher

DOI: https://doi.org/10.48550/arXiv.2212.03481

IF: 5.414

2022-12-07

Machine Learning

Abstract:The need for data privacy and security -- enforced through increasingly strict data protection regulations -- renders the use of healthcare data for machine learning difficult. In particular, the transfer of data between different hospitals is often not permissible and thus cross-site pooling of data not an option. The Personal Health Train (PHT) paradigm proposed within the GO-FAIR initiative implements an 'algorithm to the data' paradigm that ensures that distributed data can be accessed for analysis without transferring any sensitive data. We present PHT-meDIC, a productively deployed open-source implementation of the PHT concept. Containerization allows us to easily deploy even complex data analysis pipelines (e.g, genomics, image analysis) across multiple sites in a secure and scalable manner. We discuss the underlying technological concepts, security models, and governance processes. The implementation has been successfully applied to distributed analyses of large-scale data, including applications of deep neural networks to medical image data.
Fraxinus rhynchophylla ethanol extract attenuates carbon tetrachloride-induced liver fibrosis in rats via down-regulating the expressions of uPA, MMP-2, MMP-9 and TIMP-1.

W. Peng,Yun‐chen Tien,Chih-Yang Huang,Tai-Hung Huang,Jung-Chun Liao,Chao-Lin Kuo,Ying-Chih Lin

DOI: https://doi.org/10.1016/j.jep.2009.12.016

IF: 5.195

2010-02-17

Journal of Ethnopharmacology

Abstract:
Rapid Deployment of a Pseudonymization Service in a Distributed Research Data Infrastructure - Lessons Learned

Hammam Abu Attieh,Mehmet Halilovic,Thierry Meurers,Armin Müller,Diogo Telmo Neves,Fabian Prasser

DOI: https://doi.org/10.3233/SHTI240637

2024-08-22

Abstract:The SARS-CoV-2 pandemic highlighted the importance of fast, collaborative research in biomedicine. Within the ORCHESTRA consortium, we rapidly deployed a pseudonymization service with minimal training and maintenance efforts under time-critical conditions to support a complex, multi-site research project. Over two years, the service was deployed in 13 sites across 11 countries to register more than 10,000 study participants and 15,000 biosamples. In this work, we present lessons learned as part of this process. Most importantly, we learned that common challenges can be overcome by creatively utilizing widely available tools and that having a dedicated partner to manage software rollout and pre-configure software packages for each site fosters the effective implementation.
Comparison of Peripheral Blood with Heart Blood in Guinea Pigs.

P. G. Roofe,H. Latimer,M. Madison,M. Maffet,P. Wilkinson

DOI: https://doi.org/10.1126/SCIENCE.111.2883.337

IF: 56.9

1950-03-31

Science

Abstract:
Detection of lipids in the plant meristematic cell with the aid of Sudan black staining

K. Benes

DOI: https://doi.org/10.1007/BF02926669

1964-06-01

Biologia Plantarum

Abstract:
Cerebral bypass procedures. What have we learned so far?

L. Hirsh,M. Romy

DOI: https://doi.org/10.1080/00325481.1983.11697873

1983-06-01

Postgraduate Medicine

Abstract:PreviewPhysicians are surely being asked by patients and their relatives about cerebral revascularization, a relatively new neurosurgical procedure that allows creation of new collateral blood channels to supply the brain. The technique may be useful in treatment of cerebrovascular disease, orbital ischemia, and conditions in which deliberate sacrifice of a major intracranial vessel is required. This article provides an overview of this important method and summarizes the experience to date with its use.
Development and Validation of a Natural Language Processing Algorithm to Pseudonymize Documents in the Context of a Clinical Data Warehouse

Xavier Tannier,Perceval Wajsbürt,Alice Calliger,Basile Dura,Alexandre Mouchet,Martin Hilka,Romain Bey,Bey,Romain

DOI: https://doi.org/10.1055/s-0044-1778693

IF: 1.8

2024-03-07

Methods of Information in Medicine

Abstract:Objective The objective of this study is to address the critical issue of deidentification of clinical reports to allow access to data for research purposes, while ensuring patient privacy. The study highlights the difficulties faced in sharing tools and resources in this domain and presents the experience of the Greater Paris University Hospitals (AP-HP for Assistance Publique-Hôpitaux de Paris) in implementing a systematic pseudonymization of text documents from its Clinical Data Warehouse. Methods We annotated a corpus of clinical documents according to 12 types of identifying entities and built a hybrid system, merging the results of a deep learning model as well as manual rules. Results and Discussion Our results show an overall performance of 0.99 of F1-score. We discuss implementation choices and present experiments to better understand the effort involved in such a task, including dataset size, document types, language models, or rule addition. We share guidelines and code under a 3-Clause BSD license. All authors designed the study. X.T. drafted the manuscript. All authors interpreted data and made critical intellectual revisions of the manuscript. X.T. did the literature review. P.W. checked all the annotations. P.W., A.C. and B.D. developed the deidentification algorithms. P.W. conducted the experiments and computed the statistical results. X.T., A.M., M.H. and R.B. supervised the project. Access to the Clinical Data Warehouse's raw data can be granted following the process described on its Web site: eds.aphp.fr. Prior validation of the access by the local institutional review board is required. In the case of non-AP-HP researchers, the signature of a collaboration contract is moreover mandatory. Received: 24 March 2023 Accepted: 28 November 2023 Article published online: 05 March 2024 © 2024. The Author(s). This is an open access article published by Thieme under the terms of the Creative Commons Attribution-NonDerivative-NonCommercial License, permitting copying and reproduction so long as the original work is given appropriate credit. Contents may not be used for commercial purposes, or adapted, remixed, transformed or built upon. (https://creativecommons.org/licenses/by-nc-nd/4.0/) Georg Thieme Verlag KG Stuttgart · New York

health care sciences & services,computer science, information systems,medical informatics
Germany's Approach for the Secondary Use of Federated Real-World Data in the German Portal for Medical Research Data

Philip Kleinert,Marie Gebhardt,Karoline Buckow,Julian Gruendner,Thomas Ganslandt,Hans-Ulrich Prokosch,Sebastian C Semler

DOI: https://doi.org/10.3233/SHTI240751

2024-08-22

Abstract:In the light of big data driven clinical research, fair access to real world clinical health data enables evidence to improve patient care. Germany's healthcare system provides an abundant data resource but unique challenges due to its federated nature, heterogeneity and high data-protection standards. The Medical Informatics Initiative (MII) developed concepts that are being implemented in the German Portal for Medical Research Data (FDPG) to grant access to distributed data-sources across state borders. The portal currently provides access to more than 10 million patient resources containing hundreds of millions of laboratory parameters, diagnostic reports, administered medications, procedures and specimens. Upcoming datasets include among others oncological data, molecular analysis results and microbiological findings. Here, we describe the philosophy, implementation and experience behind the framework: standardized access processes, interoperable fair data, software for in depth feasibility requests, tools to support researchers and hospital stakeholders alike as well as transparency measures to provide data use information for patients. Challenges remain to improve data quality and automatization of technical and organizational processes.
Data integration between clinical research and patient care: A framework for context-depending data sharing and in silico predictions

Katja Hoffmann,Anne Pelz,Elena Karg,Andrea Gottschalk,Thomas Zerjatke,Silvio Schuster,Heiko Böhme,Ingmar Glauche,Ingo Roeder

DOI: https://doi.org/10.1371/journal.pdig.0000140

2023-05-15

Abstract:The transfer of new insights from basic or clinical research into clinical routine is usually a lengthy and time-consuming process. Conversely, there are still many barriers to directly provide and use routine data in the context of basic and clinical research. In particular, no coherent software solution is available that allows a convenient and immediate bidirectional transfer of data between concrete treatment contexts and research settings. Here, we present a generic framework that integrates health data (e.g., clinical, molecular) and computational analytics (e.g., model predictions, statistical evaluations, visualizations) into a clinical software solution which simultaneously supports both patient-specific healthcare decisions and research efforts, while also adhering to the requirements for data protection and data quality. Specifically, our work is based on a recently established generic data management concept, for which we designed and implemented a web-based software framework that integrates data analysis, visualization as well as computer simulation and model prediction with audit trail functionality and a regulation-compliant pseudonymization service. Within the front-end application, we established two tailored views: a clinical (i.e., treatment context) perspective focusing on patient-specific data visualization, analysis and outcome prediction and a research perspective focusing on the exploration of pseudonymized data. We illustrate the application of our generic framework by two use-cases from the field of haematology/oncology. Our implementation demonstrates the feasibility of an integrated generation and backward propagation of data analysis results and model predictions at an individual patient level into clinical decision-making processes while enabling seamless integration into a clinical information system or an electronic health record.
Next-Generation Capabilities in Trusted Research Environments: Interview Study

Sanaz Kavianpour,James Sutherland,Esma Mansouri-Benssassi,Natalie Coull,Emily Jefferson

DOI: https://doi.org/10.2196/33720

2022-09-20

Abstract:Background: A Trusted Research Environment (TRE; also known as a Safe Haven) is an environment supported by trained staff and agreed processes (principles and standards), providing access to data for research while protecting patient confidentiality. Accessing sensitive data without compromising the privacy and security of the data is a complex process. Objective: This paper presents the security measures, administrative procedures, and technical approaches adopted by TREs. Methods: We contacted 73 TRE operators, 22 (30%) of whom, in the United Kingdom and internationally, agreed to be interviewed remotely under a nondisclosure agreement and to complete a questionnaire about their TRE. Results: We observed many similar processes and standards that TREs follow to adhere to the Seven Safes principles. The security processes and TRE capabilities for supporting observational studies using classical statistical methods were mature, and the requirements were well understood. However, we identified limitations in the security measures and capabilities of TREs to support "next-generation" requirements such as wide ranges of data types, ability to develop artificial intelligence algorithms and software within the environment, handling of big data, and timely import and export of data. Conclusions: We found a lack of software or other automation tools to support the community and limited knowledge of how to meet the next-generation requirements from the research community. Disclosure control for exporting artificial intelligence algorithms and software was found to be particularly challenging, and there is a clear need for additional controls to support this capability within TREs.
FoPraNet-BW: An Infrastructure for Clinical Studies in Practice-Based Research Networks in the German Health System

Patrick Schmutz,Arthur Krauss,Sven Dörflinger,Arndt Becker,Roland Koch,Andreas Polanc,Elke Feil,Claudia Salm,Karin Scheeser,Frank Peters-Klimm,Christian Thies

DOI: https://doi.org/10.3233/SHTI240376

2024-08-22

Abstract:General practice-based research networks have become an integral tool to gain medical knowledge from primary care in many countries. For this purpose, a scalable IT-infrastructure is presented considering the limiting peculiarities in the German health system and enabling GPs to participate in clinical studies based on their patient population. The infrastructure consists of a central study management server and local clients for each practice. It adopts to the currently limited digital connectivity of GP practices, data protection regulations for clinical data and the needs of the medical staff to manage a clinical study. The infrastructure is in production at the four university hospitals in the state of Baden-Württemberg. Until now three clinical studies with over 70 GPs and 350 Participants are successfully conducted or have been finished. Further clinical studies are in the planning stages.
The Trusted Server: A secure computational environment for privacy compliant evaluations on plain personal data

Nikolaus von Bomhard,Bernd Ahlborn,Catherine Mason,Ulrich Mansmann

DOI: https://doi.org/10.1371/journal.pone.0202752

2018-07-27

Abstract:A growing framework of legal and ethical requirements limit scientific and commercial evalua-tion of personal data. Typically, pseudonymization, encryption, or methods of distributed com-puting try to protect individual privacy. However, computational infrastructures still depend on human system administrators. This introduces severe security risks and has strong impact on privacy: system administrators have unlimited access to the computers that they manage in-cluding encryption keys and pseudonymization-tables. Distributed computing and data obfuscation technologies reduce but do not eliminate the risk of privacy leakage by administrators. They produce higher implementation effort and possible data quality degradation. This paper proposes the Trusted Server as an alternative approach that provides a sealed and inaccessible computational environment in a cryptographically strict sense. During operation or by direct physical access to storage media, data stored and processed inside the Trusted Server can by no means be read, manipulated or leaked, other than by brute-force. Thus, secure and privacy-compliant data processing or evaluation of plain person-related data becomes possible even from multiple sources, which want their data kept mutually secret.

Cryptography and Security,Computers and Society
Trust Management as a Service: Enabling Trusted Execution in the Face of Byzantine Stakeholders

Franz Gregor,Wojciech Ozga,Sébastien Vaucher,Rafael Pires,Do Le Quoc,Sergei Arnautov,André Martin,Valerio Schiavoni,Pascal Felber,Christof Fetzer

DOI: https://doi.org/10.48550/arXiv.2003.14099

2020-03-31

Abstract:Trust is arguably the most important challenge for critical services both deployed as well as accessed remotely over the network. These systems are exposed to a wide diversity of threats, ranging from bugs to exploits, active attacks, rogue operators, or simply careless administrators. To protect such applications, one needs to guarantee that they are properly configured and securely provisioned with the "secrets" (e.g., encryption keys) necessary to preserve not only the confidentiality, integrity and freshness of their data but also their code. Furthermore, these secrets should not be kept under the control of a single stakeholder - which might be compromised and would represent a single point of failure - and they must be protected across software versions in the sense that attackers cannot get access to them via malicious updates. Traditional approaches for solving these challenges often use ad hoc techniques and ultimately rely on a hardware security module (HSM) as root of trust. We propose a more powerful and generic approach to trust management that instead relies on trusted execution environments (TEEs) and a set of stakeholders as root of trust. Our system, PALAEMON, can operate as a managed service deployed in an untrusted environment, i.e., one can delegate its operations to an untrusted cloud provider with the guarantee that data will remain confidential despite not trusting any individual human (even with root access) nor system software. PALAEMON addresses in a secure, efficient and cost-effective way five main challenges faced when developing trusted networked applications and services. Our evaluation on a range of benchmarks and real applications shows that PALAEMON performs efficiently and can protect secrets of services without any change to their source code.

Cryptography and Security,Distributed, Parallel, and Cluster Computing

Dendritic cells' death induced by contact sensitizers is controlled by Nrf2 and depends on glutathione levels☆

The University Medicine Greifswald's Trusted Third Party Dispatcher: State-of-the-Art Perspective Into Comprehensive Architectures and Complex Research Workflows

Integration of Trusted Third Party Software into an EDC System for Data Protection - Compliant Identity Management, Consent Management and Pseudonymization in Medical Research Studies

PASTA-4-PHT: A Pipeline for Automated Security and Technical Audits for the Personal Health Train

Designing and piloting a generic research architecture and workflows to unlock German primary care data for secondary use

MainzelHandler: A Library for a Simple Integration and Usage of the Mainzelliste

Integrated Data Repository Toolkit (IDRT). A Suite of Programs to Facilitate Health Analytics on Heterogeneous Medical Data

Exploring Stakeholder Requirements to Enable Research and Development of Artificial Intelligence Algorithms in a Hospital-Based Generic Infrastructure: Results of a Multistep Mixed Methods Study

Bringing the Algorithms to the Data -- Secure Distributed Medical Analytics using the Personal Health Train (PHT-meDIC)

Fraxinus rhynchophylla ethanol extract attenuates carbon tetrachloride-induced liver fibrosis in rats via down-regulating the expressions of uPA, MMP-2, MMP-9 and TIMP-1.

Rapid Deployment of a Pseudonymization Service in a Distributed Research Data Infrastructure - Lessons Learned

Comparison of Peripheral Blood with Heart Blood in Guinea Pigs.

Detection of lipids in the plant meristematic cell with the aid of Sudan black staining

Cerebral bypass procedures. What have we learned so far?

Development and Validation of a Natural Language Processing Algorithm to Pseudonymize Documents in the Context of a Clinical Data Warehouse

Germany's Approach for the Secondary Use of Federated Real-World Data in the German Portal for Medical Research Data

Data integration between clinical research and patient care: A framework for context-depending data sharing and in silico predictions

Next-Generation Capabilities in Trusted Research Environments: Interview Study

FoPraNet-BW: An Infrastructure for Clinical Studies in Practice-Based Research Networks in the German Health System

The Trusted Server: A secure computational environment for privacy compliant evaluations on plain personal data

Trust Management as a Service: Enabling Trusted Execution in the Face of Byzantine Stakeholders