| << Chapter < Page | Chapter >> Page > |
The flipside of practical issues with authentication and authorisation is the lack of trust in the security of distributed computing systems that is often observed:
"other projects (not necessarily medical ones, but also engineering ones) where the organisations involved saw the Grid as [a] great looking solution but didn’t want their data to leave their network [...]it has happened before where companies involved didn’t want to go beyond some toy examples, despite the project being able to solve a lot grid related problems."The lack of strong assurances about security and confidentiality in general e-Infrastructures for research means that research with sensitive data often has to be carried out in secure environments ('data enclaves'):
"if we want to link individual level data and link things like census data and council registries then we need to have names and addresses."To date there are no generic mechanisms and organisational arrangements that make work with sensitive data possible at a reasonable cost while complying with data protection legislation and relevant regulatory regimes.
Practical arrangements can sometimes be made that allow some processing to be carried out outside these secure settings, e.g., through the use of artificial identifiers (or pseudonyms):
"have you heard of pseudo-anonymisation where you create an ID from a name and address, for example, and then those pseudo-anonymised IDs can be [...] kept in a very secretive file."
Notification Switch
Would you like to follow the 'E-research community engagement findings' conversation and receive update notifications?
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|