A RESTful interface to pseudonymization services in modern web applications

Abstract

BackgroundMedical research networks rely on record linkage and pseudonymization to determine which records from different sources relate to the same patient. To establish informational separation of powers, the required identifying data are redirected to a trusted third party that has, in turn, no access to medical data. This pseudonymization service receives identifying data, compares them with a list of already reported patient records and replies with a (new or existing) pseudonym. We found existing solutions to be technically outdated, complex to implement or not suitable for internet-based research infrastructures. In this article, we propose a new RESTful pseudonymization interface tailored for use in web applications accessed by modern web browsers.MethodsThe interface is modelled as a resource-oriented architecture, which is based on the representational state transfer (REST) architectural style. We translated typical use-cases into resources to be manipulated with well-known HTTP verbs. Patients can be re-identified in real-time by authorized users’ web browsers using temporary identifiers. We encourage the use of PID strings for pseudonyms and the EpiLink algorithm for record linkage. As a proof of concept, we developed a Java Servlet as reference implementation.ResultsThe following resources have been identified: Sessions allow data associated with a client to be stored beyond a single request while still maintaining statelessness. Tokens authorize for a specified action and thus allow the delegation of authentication. Patients are identified by one or more pseudonyms and carry identifying fields. Relying on HTTP calls alone, the interface is firewall-friendly. The reference implementation has proven to be production stable.ConclusionThe RESTful pseudonymization interface fits the requirements of web-based scenarios and allows building applications that make pseudonymization transparent to the user using ordinary web technology. The open-source reference implementation implements the web interface as well as a scientifically grounded algorithm to generate non-speaking pseudonyms.

PRESAGE: PRivacy-preserving gEnetic testing via SoftwAre Guard Extension

“…Many HME-based applications have been studied for safeguarding linear classification [ 23 ], predictive analysis on encrypted medical data [ 24 ], genetic association studies [ 25 , 26 ], Edit distance computation [ 27 ], GWAS study using exact logistic regression [ 28 ]. Secure multiparty computation (SMC) is another widely adopted technique for securing genomic data analysis, such as secure multiparty GWAS [ 29 – 33 ], secure distributed regression model learning [ 34 ] and so on. However, the high computational complexity of the existing HME and SMC solutions plague their practical adoption over the large-scale genomic data.…”

Registries in Clinical Epidemiology: the European Surveillance System on Contact Allergies (ESSCA)

“…Since the ESSCA data collection platform was established, more comprehensive approaches towards decentralized data collection have been developed and published. Record linkage tools like the TMF PID Generator [24], the Mainzelliste [25], or the MOSAIC E-PIX service [26] provide methods for the centralized management of patient pseudonyms and allow to merge records when patients have been examined in multiple participating centres. The deployment of such a centralized ID management service, however, raises the barrier to entry in a distributed scenario with different data entry solutions in multiple countries that need to be integrated.…”

MOPS -- A feasibility Study for working with GPS and sensor data in a medical context

“…The ID Management solution LEIM was developed in coordination with the Data Integration Center of the Uni- . Currently LEIM does not use a so-called PID-Generator like the Mainzelliste [4], but instead the pseudonymisation service generates a random Contact ID (KID ) for use in the contact management and links it internally to the (also randomly generated) PID.…”