MicroShare: Privacy-Preserved Medical Resource Sharing through MicroService Architecture

Enhancing Microservices Security with Token-Based Access Control Method

Microservices are compact, independent services that work together with other microservices to support a single application function. Organizations may quickly deliver high-quality applications using the effective design pattern of the application function. Microservices allow for the alteration of one service in an application without affecting the other services. Containers and serverless functions, two cloud-native technologies, are frequently used to create microservices applications. A distributed, multi-component program has a number of advantages, but it also introduces new security risks that are not present in more conventional monolithic applications. The objective is to propose a method for access control that ensures the enhanced security of microservices. The proposed method was experimentally tested and validated in comparison to the centralized and decentralized architectures of the microservices. The obtained results showed that the proposed method enhanced the security of decentralized microservices by distributing the access control responsibility across multiple microservices within the external authentication and internal authorization processes. This allows for easy management of permissions between microservices and can help prevent unauthorized access to sensitive data and resources, as well as reduce the risk of attacks on microservices.

Microservice security: a systematic literature review

Microservices is an emerging paradigm for developing distributed systems. With their widespread adoption, more and more work investigated the relation between microservices and security. Alas, the literature on this subject does not form a well-defined corpus: it is spread over many venues and composed of contributions mainly addressing specific scenarios or needs. In this work, we conduct a systematic review of the field, gathering 290 relevant publications-at the time of writing, the largest curated dataset on the topic. We analyse our dataset along two lines: (a) quantitatively, through publication metadata, which allows us to chart publication outlets, communities, approaches, and tackled issues; (b) qualitatively, through 20 research questions used to provide an aggregated overview of the literature and to spot gaps left open. We summarise our analyses in the conclusion in the form of a call for action to address the main open challenges.

Microservice security: a systematic literature review

Microservices is an emerging paradigm for developing distributed systems. With their widespread adoption, more and more work investigated the relation between microservices and security. Alas, the literature on this subject does not form a well-defined corpus: it is spread over many venues and composed of contributions mainly addressing specific scenarios or needs. In this work, we conduct a systematic review of the field, gathering 290 relevant publications-at the time of writing, the largest curated dataset on the topic. We analyse our dataset along two lines: (a) quantitatively, through publication metadata, which allows us to chart publication outlets, communities, approaches, and tackled issues; (b) qualitatively, through 20 research questions used to provide an aggregated overview of the literature and to spot gaps left open. We summarise our analyses in the conclusion in the form of a call for action to address the main open challenges.

An Intelligent Individualized Cardiovascular App for Risk Elimination (iCARE) for Individuals With Coronary Heart Disease: Development and Usability Testing Analysis

Background

Death and disability from coronary heart disease (CHD) can be largely reduced by improving risk factor management. However, adhering to evidence-based recommendations is challenging and requires interventions at the level of the patient, provider, and health system.

Objective

The aim of this study was to develop an Intelligent Individualized Cardiovascular App for Risk Elimination (iCARE) to facilitate adherence to health behaviors and preventive medications, and to test the usability of iCARE.

Methods

We developed iCARE based on a user-centered design approach, which included 4 phases: (1) function design, (2) iterative design, (3) expert inspections and walkthroughs of the prototypes, and (4) usability testing with end users. The usability testing of iCARE included 2 stages: stage I, which included a task analysis and a usability evaluation (January to March 2019) of the iCARE patient app using the modified Health Information Technology Usability Survey (Health-ITUES); and stage II (June 2020), which used the Health-ITUES among end users who used the app for 6 months. The end users were individuals with a confirmed diagnosis of CHD from 2 university-affiliated hospitals in Beijing, China.

Results

iCARE consists of a patient app, a care provider app, and a cloud platform. It has a set of algorithms that trigger tailored feedback and can send individualized interventions based on data from initial assessment and health monitoring via manual entry or wearable devices. For stage I usability testing, 88 hospitalized patients (72% [63/88] male; mean age 60 [SD 9.9] years) with CHD were included in the study. The mean score of the usability testing was 90.1 (interquartile range 83.3-99.0). Among enrolled participants, 90% (79/88) were satisfied with iCARE; 94% (83/88) and 82% (72/88) reported that iCARE was useful and easy to use, respectively. For stage II usability testing, 61 individuals with CHD (85% [52/61] male; mean age 53 [SD 8.2] years) who were from an intervention arm and used iCARE for at least six months were included. The mean total score on usability testing based on the questionnaire was 89.0 (interquartile distance: 77.0-99.5). Among enrolled participants, 89% (54/61) were satisfied with the use of iCARE, 93% (57/61) perceived it as useful, and 70% (43/61) as easy to use.

Conclusions

This study developed an intelligent, individualized, evidence-based, and theory-driven app (iCARE) to improve patients’ adherence to health behaviors and medication management. iCARE was identified to be highly acceptable, useful, and easy to use among individuals with a diagnosis of CHD.

Trial Registration

Chinese Clinical Trial Registry ChiCTR-INR-16010242; https://tinyurl.com/2p8bkrew

An extensible big data software architecture managing a research resource of real-world clinical radiology data linked to other health data from the whole Scottish population

AIM

To enable a world-leading research dataset of routinely collected clinical images linked to other routinely collected data from the whole Scottish national population. This includes more than 30 million different radiological examinations from a population of 5.4 million and >2 PB of data collected since 2010.

METHODS

Scotland has a central archive of radiological data used to directly provide clinical care to patients. We have developed an architecture and platform to securely extract a copy of those data, link it to other clinical or social datasets, remove personal data to protect privacy, and make the resulting data available to researchers in a controlled Safe Haven environment.

RESULTS

An extensive software platform has been developed to host, extract, and link data from cohorts to answer research questions. The platform has been tested on 5 different test cases and is currently being further enhanced to support 3 exemplar research projects.

CONCLUSIONS

The data available are from a range of radiological modalities and scanner types and were collected under different environmental conditions. These real-world, heterogenous data are valuable for training algorithms to support clinical decision making, especially for deep learning where large data volumes are required. The resource is now available for international research access. The platform and data can support new health research using artificial intelligence and machine learning technologies, as well as enabling discovery science.

MedChain: Efficient Healthcare Data Sharing via Blockchain

Healthcare information exchange is an important research topic, which can benefit both healthcare providers and patients. In healthcare data sharing, many cloud-based solutions have been proposed, but the trustworthiness of a third-party cloud service is questionable. Recently, blockchain has been introduced in healthcare record sharing, which does not rely on trusting a third party. However, existing approaches only focus on the records collected from medical examination. They are not efficient in sharing data streams continuously generated from sensors and other monitoring devices. Today, IoT devices have been widely deployed and sensors and mobile applications can monitor patients’ body conditions. The collected data are shared to laboratories and institutions for diagnosis and further study. Moreover, existing approaches are too rigid to efficiently support metadata change. In this paper, an efficient data-sharing scheme is proposed, called MedChain, which combines blockchain, digest chain, and structured P2P network techniques to overcome the above efficiency issues in the existing approaches for sharing both types of healthcare data. Based on MedChain, a session-based healthcare data-sharing scheme is devised, which brings flexibility in data sharing. The evaluation results show that MedChain can achieve higher efficiency and satisfy the security requirements in data sharing.

Special issue on Computational Resources and Methods in Biological Sciences

This special issue covers a wide range of topics in computational biology, such as database construction, sequence analysis and function prediction with machine learning methods, disease-related diagnosis, drug-target and drug discovery, and electronic health record system construction.