Do CHANGE platform: A service-based architecture for secure aggregation and distribution of health and wellbeing data. (September 2018)

• Record Type: Journal Article
• Authors: Ayoola, Idowu; Wetzels, Mart; Peters, Peter; van Berlo, Sander; Feijs, Loe
• Is Part Of: International journal of medical informatics. Volume 117(2018)
• Page Start: 103
• Page End: 111
• Publication Date: 2018-09
• Subjects: IoT -- Personal data -- Health services -- Privacy -- Security -- Data aggregation -- Data distribution; Medical informatics -- Periodicals; Information science -- Periodicals; Computers -- Periodicals; Medical technology -- Periodicals; Medical Informatics -- Periodicals; Technology, Medical -- Periodicals; Computers; Information science; Medical informatics; Medical technology; Electronic journals; Periodicals; Electronic journals; 610.285
• DOI: 10.1016/j.ijmedinf.2018.06.004
• Languages: English
• ISSNs: 1386-5056

Abstract

Highlights: Design of a data aggregation and distribution platform for small businesses. A privacy-preserving platform for connecting with health and wellbeing APIs. Realtime re-distribution of personal data in a safe and controllable way. Presentation of use cases using the proposed life management platform. Abstract: Over the last decade, the adoption of open API standards offers new services meaningful in the domain of health informatics and behavior change. We present our privacy-oriented solution to support personal data collection, distribution, and usage. Given the new General Data Protection Regulations in Europe, the proposed platform is designed with requirements in mind to position citizens as the controllers of their data. The proposed result uses NodeJS servers, OAuth protocol for Authentication and Authorization, a publish-subscribe semantic for real-time data notification and Cron for APIs without a notification strategy. It uses Distributed Data Protocol to control and securely provision data to distributed frameworks utilizing the data and those distributed applications are exemplified. The platform design is transparent and modularized for research projects and small businesses to set-up and manage, and to allow them to focus on the application layer utilizing personal information. This solution can easily be configured to support custom or new data sources with open API and can scale. In our use cases, maintaining the separate ecosystem services was trivial. The adopted distributed protocol was the most challenging to manage due to its high RAM usage. And implementing a fine-grained privacy control by end-users was challenging in an existing clinical enterprise system.