Navigation Links
Study reveals security weaknesses in file-sharing methods used in clinical trials
Date:2/16/2011

Ottawa Patients who participate in clinical trials expect that their personal information will remain confidential, but a recent study led by Dr. Khaled El-Emam, Canada Research Chair in Electronic Health Information at the CHEO Research Institute, found that the security practices used to transfer and share sensitive files were inadequate.

The two-part study, entitled "How Strong Are Passwords Used to Protect Personal Health Information in Clinical Trials?", published today in the Journal of Medical Internet Research, showed that the majority of passwords used to protect files are poorly constructed and easily cracked using commercial password recovery tools. Study coordinator interviews indicated that electronic information shared in the context of clinical trials may put personal health information at risk.

"The patients in these trials expect that their personal information will be protected," said Dr. El-Emam. "This is critical for maintaining the trust of clinical trial participants, and the public in general."

In the course of the study, passwords for 14 out of 15 sensitive files transmitted by email were successfully decoded. Of these 14, 13 contained sensitive health information and other potentially identifying factors such as name of study site, dates of birth, initials, and gender. File sharing practices were also found to be insecure, with unencrypted patient information being shared via email and posted on shared drives with common passwords.

"Cracking the passwords proved to be trivial," said Dr. El-Emam. "Choices included passwords as simple as car makers (e.g., "nissan"), and common number sequences (e.g., "123"). It was easy for the password recovery tools to guess them."

Poor security practices can be harmful to patients participating in clinical trials, who are at risk of being identified and possibly stigmatized by the disclosure of personal health information. There is also a potential for both medical and non-medical identity theft. In the context of international clinical trials, inadvertent disclosure of personal health information is considered a data breach in countries like the United States, which can lead to penalties in some states.

Dr. El-Emam believes that with some effort file sharing in clinical trials can be made secure: "There are protocols and tools that can be employed for secure file sharing. It may take more effort on the part of those who conduct clinical trials, but the alternative would not be acceptable."

Dr. El-Emam makes several recommendations, including enforcement of strong passwords and encryption algorithms, encrypting all information sent via email including site queries, and minimizing password sharing.


'/>"/>

Contact: Isabelle Mailloux
imailloux@cheo.on.ca
613-737-7600 x3536
Children's Hospital of Eastern Ontario Research Institute
Source:Eurekalert

Related medicine news :

1. Despite Treatment, Employees with Depression Generate Higher Absentee Costs, According to Thomson Reuters Study
2. American Council on Exercise (ACE) Study Reveals Kettlebells Provide Powerful Workout in Short Amount of Time
3. TV drama can be more persuasive than news program, study finds
4. Study carried out into biological risks of eating reptiles
5. Neuroimaging study may pave way for effective Alzheimers treatments
6. Study finds racial gaps continue in heart disease awareness
7. Luth Researchs IndicatorEDG(TM) Study Finds Americans Hopes of Achieving Their Dreams Are Fading
8. First blinded study of venous insufficiency prevalence in MS shows promising results
9. Soothing infants with food focus of childhood obesity study
10. People with anxiety disorder less able to regulate response to negative emotions, study shows
11. American Heart Association Rapid Access Journal Report: Study Finds Racial Gaps Continue in Heart Disease Awareness, Low Knowledge of Heart Attack Warning Signs Among Women
Post Your Comments:
*Name:
*Comment:
*Email:
(Date:5/26/2016)... ... May 26, 2016 , ... ... treatment for eating disorders, is opening a brand new child and adolescent residential ... 8-17 and their families with even more specialized eating disorder treatment and access ...
(Date:5/26/2016)... ... May 26, 2016 , ... North Cypress Medical Center ... Golf Club in Cypress. With the help of community partners, the event organizers raised ... renews hope for wounded service members and their families through health, wellness, and therapeutic ...
(Date:5/26/2016)... , ... May 26, 2016 , ... ... Mehling Orthopedics and chief medical officer of Blue Horizon International (BHI), Brian Mehling, ... The conference was held during May 5-6, 2016 in Chicago, IL, USA. Dr. ...
(Date:5/26/2016)... Scotch Plains, NJ (PRWEB) , ... May 26, ... ... year being recognized as an NJ Top Doc! Along with his wonderful accolades ... to excellence in podiatry. Congratulations, Dr. Batelli! , Dr. Eugene Batelli is ...
(Date:5/26/2016)... ... May 26, 2016 , ... Bunion Bootie , the manufacturer ... treatment was more than humbled by customer demand over the Mother’s Day Weekend promotion. ... sale. Now that Bunion Bootie has completely replenished its inventory levels, it hopes to ...
Breaking Medicine News(10 mins):
(Date:5/25/2016)... , May 25, 2016  According to Kalorama ... $381 billion in 2015.  Though these are challenging ... of opportunity for success for companies that remain ... search of new growth prospects medical device companies ... research and development (R&D) than do companies in ...
(Date:5/25/2016)... 2016 Digital Health Dialog, LLC dba ... the US Patent and Trademark Office of U.S. ... processes for electronic opt-­in and processing of discount ... HIPAA compliance and otherwise. Logo - ... "Our technology allows for individuals to opt­-in ...
(Date:5/24/2016)... -- Niederländische Chirurgen haben eine innovative ... erlaubt, ihre Expertise weltweit zu teilen und so ... mit einer Instant-Messaging-Funktion und der Möglichkeit, in einem ... Afrika, Asien und den USA ... Information und Weiterbildung   "MDLinking ...
Breaking Medicine Technology: