Securely and flexibly sharing a biomedical data management system

Abstract

Biomedical database systems need not only to address the issues of managing complex data, but also to provide data security and access control to the system. These include not only system level security, but also instance level access control such as access of documents, schemas, or aggregation of information. The latter is becoming more important as multiple users can share a single scientific data management system to conduct their research, while data have to be protected before they are published or IP-protected. This problem is challenging as users’ needs for data security vary dramatically from one application to another, in terms of who to share with, what resources to be shared, and at what access level. We develop a comprehensive data access framework for a biomedical data management system SciPort. SciPort provides fine-grained multi-level space based access control of resources at not only object level (documents and schemas), but also space level (resources set aggregated in a hierarchy way). Furthermore, to simplify the management of users and privileges, customizable role-based user model is developed. The access control is implemented efficiently by integrating access privileges into the backend XML database, thus efficient queries are supported. The secure access approach we take makes it possible for multiple users to share the same biomedical data management system with flexible access management and high data security.

SPIE Medical Imaging 50th anniversary: history of the Picture Archiving and Communication Systems Conference

“…In keeping with the name change, multiple papers described specialty clinical applications including for spine surgery, 544 endoscopy, 545 multiple sclerosis treatment, 546 breast cancer, 547 stroke, 548 telemedicine, 549 and regional healthcare. 550 Research databases 551 , 552 and CBIR 553 , 554 were also topics of interest. Papers on healthcare interoperability 555 and digital archives 556 , 557 were presented.…”

Metadata based management and sharing of distributed biomedical data

“…For example, we can define a hierarchy with levels of ‘site’ → ‘patient’ → ‘measurement’, and attach documents at different folder levels. SciPort also provides fine grained access control at folder level for the data in the database (Wang et al, 2009). …”

“…A schema is identified by its owner and schema ID. SciPort also provides comprehensive access control management (Wang et al, 2009), and two roles are related to schema management: (a) organiser role with privileges to author and update schemas and (b) publisher role with privileges to publish documents and schemas.…”

Seeing it through: translational validation of new medical imaging modalities

“…The VCS Core has attempted to establish concrete validation objectives and outcomes for NTR. At the ground-floor level, involving SOPs and other regulatory paperwork, validation can be accomplished using a software tool (SciPort) [ 34 ] for electronic data entry and analysis. Software such as SciPort or other electronic data capture (EDC) systems can and should be used for bench and pre-clinical data collection and analysis, as well as SOP access, and computers used with bench equipment such as spectrophotometers and plate readers should employ 21 CFR Part 11-compliant software to document data entry, assure instrument performance, and deter data falsification.…”