Pommerening K, Miller M, Schmidtmann I, Michaelis J
Institut für Medizinische Statistik und Dokumentation, Johannes-Gutenberg-Universität, Mainz, Germany.
Methods Inf Med. 1996 Jun;35(2):112-21.
In order to conform to the rigid German legislation on data privacy and security we developed a new concept of data flow and data storage for population-based cancer registries. A special trusted office generates a pseudonym for each case by a cryptographic procedure. This office also handles the notification of cases and communicates with the reporting physicians. It passes pseudonymous records to the registration office for permanent storage. The registration office links the records according to the pseudonyms. Starting from a requirements analysis we show how to construct the pseudonyms; we then show that they meet the requirements. We discuss how the pseudonyms have to be protected by cryptographic and organizational means. A pilot study showed that the proposed procedure gives acceptable synonym and homonym error rates. The methods described are not restricted to cancer registration and may serve as a model for comparable applications in medical informatics.
为了符合德国严格的数据隐私和安全法规，我们为基于人群的癌症登记处开发了一种新的数据流和数据存储概念。一个特殊的受信任办公室通过加密程序为每个病例生成一个假名。该办公室还处理病例通知并与报告医生沟通。它将假名记录传递给登记办公室进行永久存储。登记办公室根据假名链接记录。从需求分析开始，我们展示了如何构建假名；然后我们证明它们符合要求。我们讨论了如何通过加密和组织手段保护假名。一项试点研究表明，所提出的程序给出了可接受的同义词和同音异义词错误率。所描述的方法不限于癌症登记，可作为医学信息学中类似应用的模型。
