Navigation Links
Study reveals security weaknesses in file-sharing methods used in clinical trials

Ottawa Patients who participate in clinical trials expect that their personal information will remain confidential, but a recent study led by Dr. Khaled El-Emam, Canada Research Chair in Electronic Health Information at the CHEO Research Institute, found that the security practices used to transfer and share sensitive files were inadequate.

The two-part study, entitled "How Strong Are Passwords Used to Protect Personal Health Information in Clinical Trials?", published today in the Journal of Medical Internet Research, showed that the majority of passwords used to protect files are poorly constructed and easily cracked using commercial password recovery tools. Study coordinator interviews indicated that electronic information shared in the context of clinical trials may put personal health information at risk.

"The patients in these trials expect that their personal information will be protected," said Dr. El-Emam. "This is critical for maintaining the trust of clinical trial participants, and the public in general."

In the course of the study, passwords for 14 out of 15 sensitive files transmitted by email were successfully decoded. Of these 14, 13 contained sensitive health information and other potentially identifying factors such as name of study site, dates of birth, initials, and gender. File sharing practices were also found to be insecure, with unencrypted patient information being shared via email and posted on shared drives with common passwords.

"Cracking the passwords proved to be trivial," said Dr. El-Emam. "Choices included passwords as simple as car makers (e.g., "nissan"), and common number sequences (e.g., "123"). It was easy for the password recovery tools to guess them."

Poor security practices can be harmful to patients participating in clinical trials, who are at risk of being identified and possibly stigmatized by the disclosure of personal health information. There is also a potential for both medical and non-medical identity theft. In the context of international clinical trials, inadvertent disclosure of personal health information is considered a data breach in countries like the United States, which can lead to penalties in some states.

Dr. El-Emam believes that with some effort file sharing in clinical trials can be made secure: "There are protocols and tools that can be employed for secure file sharing. It may take more effort on the part of those who conduct clinical trials, but the alternative would not be acceptable."

Dr. El-Emam makes several recommendations, including enforcement of strong passwords and encryption algorithms, encrypting all information sent via email including site queries, and minimizing password sharing.


Contact: Isabelle Mailloux
613-737-7600 x3536
Children's Hospital of Eastern Ontario Research Institute

Related medicine news :

1. Despite Treatment, Employees with Depression Generate Higher Absentee Costs, According to Thomson Reuters Study
2. American Council on Exercise (ACE) Study Reveals Kettlebells Provide Powerful Workout in Short Amount of Time
3. TV drama can be more persuasive than news program, study finds
4. Study carried out into biological risks of eating reptiles
5. Neuroimaging study may pave way for effective Alzheimers treatments
6. Study finds racial gaps continue in heart disease awareness
7. Luth Researchs IndicatorEDG(TM) Study Finds Americans Hopes of Achieving Their Dreams Are Fading
8. First blinded study of venous insufficiency prevalence in MS shows promising results
9. Soothing infants with food focus of childhood obesity study
10. People with anxiety disorder less able to regulate response to negative emotions, study shows
11. American Heart Association Rapid Access Journal Report: Study Finds Racial Gaps Continue in Heart Disease Awareness, Low Knowledge of Heart Attack Warning Signs Among Women
Post Your Comments:
(Date:10/13/2017)... Rock, AR (PRWEB) , ... October 13, 2017 ... ... firm with locations throughout Arkansas that offers insurance and financial preparation services, is ... benefit the Rock City Rescue organization. , Rock City Rescue is a locally ...
(Date:10/13/2017)... ... October 13, 2017 , ... PurhealthRX , a leading Health and ... Applying the Purzorb™process to full spectrum CBD oil will revolutionize the rapidly growing CBD ... that can be easily incorporated into liquid products, while reducing costs to end users. ...
(Date:10/13/2017)... ... 2017 , ... The Visiting Nurse Association (VNA) of Somerset Hills is proud ... and unique items from across the nation, this holiday-themed event will raise funds and ... the VNA. The boutique will be open Saturday, November 4 (10:00 a.m. – ...
(Date:10/13/2017)... (PRWEB) , ... October 13, 2017 , ... ... DevOps and Agile Software Development, has been awarded a contract by the Center ... Purchase Agreement (BPA) aims to accelerate the enterprise use of Agile methodologies in ...
(Date:10/12/2017)... New Orleans, LA (PRWEB) , ... October 12, 2017 , ... ... fitness centers in the U.S., announced today its plans to open a flagship location ... club will occupy the former Rooms To Go store next to Office Depot in ...
Breaking Medicine News(10 mins):
(Date:10/2/2017)... Denmark , Oct. 2, 2017 The Rebound ... in the struggle to reverse the tide of prescription drug ... for regulating their medicine intake and stepping down their dosage ... set to launch in December 2017; the first 100,000 people ... Learn more at ...
(Date:9/27/2017)... and NEW YORK , Sept. 27, 2017 /PRNewswire/ ... health and big data solutions, today announced that its MyDario product is ... your local TV listings for when The Dr. Oz Show airs in ... The nine-time ... month. ...
(Date:9/22/2017)... , Sept. 22, 2017  As the latest Obamacare ... Bill Cassidy (R-LA) and Lindsey Graham ... that the medical device industry is in an odd ... tax, the 2.3% excise tax on medical device sales ... also want covered patients, increased visits and hospital customers ...
Breaking Medicine Technology: