Skip to content

Latest commit

 

History

History
85 lines (53 loc) · 3.96 KB

README.md

File metadata and controls

85 lines (53 loc) · 3.96 KB

context

Current Docker-Version of gPAS: 2023.1.2 (Okt. 2023) Current Docker-Version of TTP-FHIR-Gateway: 2023.1.2 (October 2023), Details from ReleaseNotes

About

The use of pseudonyms is a privacy-enhancing technique supporting privacy-by-design and ensuring non-attribution. Pseudonymisation allows storing directly person identifying data separately and securely from medical data and supports the data controller to meet the GDPR’s data security requirements (Art. 32 lit. 1 EU GDPR).

To facilitate the generation and administration of appropriate pseudonyms the Institute for Community Medicine of the University Medicine Greifswald (UMG) developed the web-service-based gPAS.

The use of pseudonymization domains, the specification of individual alphabets and generator algorithms allow for the free generation of different pseudonyms per data source, application context or study site.

context

Download

Latest Docker-compose version of gPAS

Source

https://github.com/mosaic-hgw/gPAS/tree/master/source

Live-Demo and more information

Try out gPAS from https://demo.ths-greifswald.de

or visit https://ths-greifswald.de/gpas for more information.

API

SOAP

All functionalities of the gPAS are provided for external use via SOAP-interfaces. The JavaDoc specs for the Services are available online (see package org.emau.icmvc.ganimed.ttp.psn).

Use SOAP-UI to create sample requests based on the WSDL files.

Service-Interface for PSN Management

The WSDL URL is http://<YOUR IPADDRESS>:8080/gpas/gpasService?wsdl

Service-Interface for PSN Management with Notifications

The WSDL URL is http://<YOUR IPADDRESS>:8080/gpas/gpasServiceWithNotification?wsdl

Service-Interface for Configuration and Domain Management

The WSDL URL is http://<YOUR IPADDRESS>:8080/gpas/DomainService?wsdl

FHIR

More details from https://www.ths-greifswald.de/gpas/fhir

IT-Security Recommendations

Access to relevant application and database servers of the Trusted Third Party tools should only be possible for authorised personnel and via authorised end devices. We therefore recommend additionally implementing the following IT security measures:

  • Operation of the relevant servers in separate network zones (separate from the research and supply network).
  • Use of firewalls and IP filters
  • Access restriction at URL level with Basic Authentication (e.g. with NGINX or Apache)
  • use of Keycloak to restrict access to Web-Frontends and technical interfaces

Additional Information

The gPAS was developed by the University Medicine Greifswald and published in 2013 as part of the MOSAIC-Project (funded by the DFG HO 1937/2-1).

Selected functionalities of gPAS were developed as part of the following research projects:

  • MIRACUM (funded by the German Federal Ministry of Education and Research 01ZZ1801M)

Credits

Concept and implementation: L. Geidel
Web-Client: A. Blumentritt, M. Bialke, F.M. Moser
Docker: R. Schuldt
TTP-FHIR Gateway für gPAS: M. Bialke, P. Penndorf, L. Geidel, S. Lang, F.M. Moser

License

License: AGPLv3, https://www.gnu.org/licenses/agpl-3.0.en.html
Copyright: 2013 - 2023 University Medicine Greifswald
Contact: https://www.ths-greifswald.de/kontakt/

Publications

Supported languages

German, English