Thirion X, Sambuc R, San Marco J L
Service hospitalo-universitaire de Santé Publique, Faculté de Médecine, Marseille.
Rev Epidemiol Sante Publique. 1988;36(1):36-42.
The authors propose a system of registering epidemiological data which ensures strict observation of anonymity. Data are made anonymous at the source: the practitioners who possess the medically confidential information themselves compute the code number creating anonymity through a nonreversible calculation formula: it is impossible to work back from the number to the patient's identity, even if one has the formula and powerful computer resources. This method differs from simple data encoding whose key could either be discovered or revealed: it requires neither keys nor a secret but effects a definitive and irreversible transformation. In compliance with the recommendations of the committee on Ethics, of the French "Ordre des Médecins" and of the Law on Data Processing and Liberties, the method was subjected to a double test for reliability, experimental and theoretical.
作者们提出了一个流行病学数据登记系统，该系统可确保严格遵守匿名规定。数据在源头即被匿名化：掌握医疗保密信息的从业者自己通过不可逆的计算公式计算出编码号码以实现匿名化：即使有人掌握该公式和强大的计算机资源，也不可能从编码号码追溯到患者身份。这种方法不同于简单的数据编码，后者的密钥可能会被发现或泄露：它既不需要密钥也不需要秘密，而是进行一种确定且不可逆的转换。根据法国“医师公会”伦理委员会以及数据处理与自由法的建议，该方法经过了可靠性的双重测试，包括实验测试和理论测试。
