Latest news

2016-10-12 Hans Harmannij, one of our project members, has won the Joop Bautz Information Security Award for his master's thesis about Polymorphic Pseudonymization in Educational Identity Federations.

2016-09-30 Mentioning of PEP in national NOS news bulletins, at 8:30 (at 1:55) and at 20:00 (at 13:35).

2016-09-30 Several online articles about PEP e.g. at NOS and also NOS, Tweakers, and Skipr.

2016-07-04 Column about the project by Jaap-Henk Hoepman in the Financieel Dagblad. Available as PDF.

2016-05-15 Blog post by Lucien Engelen about the PEP project.

Welcome to the PEP project page. This project is about privacy friendly exchange of medical data for specific medical research purposes. The PEP methodology combines advanced encryption with distributed pseudonymisation, and distribution of trusted data with fine-grained access management. The first pilot project is a large scale Parkinson's Disease research project.

Motivation

The collection and analysis of medical data on a big data scale is becoming an essential approach to understand complicated diseases. In order to gain new insights it is important that international researchers can cooperate: they will have to access each other's data and contribute to the data sets. In many cases, such medical research involves privacy sensitive data about patients. Patients should be able to count on preservation of their privacy and on secure storage of their data. All this should comply with European privacy regulations, which are the most stringent in the world.

The PEP project builds on the Polymorphic Encryption and Pseudonymisation technique developed by Bart Jacobs and Eric Verheul. This technique stores pseudonymised data in encrypted form. Researchers working on the data can only decrypt the parts of the data for which they have access rights.

Pilot project: Parkinson

The first case study performed with the PEP technique is Parkinson op Maat, a large scale Parkison's Disease research project by the medical centre from Radboud University, together with Verily (see their blog). This case study involves monitoring 650 patients over aperiod of two years, using amongst others wearable devices. The data collected this way will be shared, in pseudonymised form, with top research institutes over the world.

Details

For more details, see our PEP whitepaper (PDF). For a quick overview, see these slides.

Funding and embedding

The PEP project has its own funding from public sources, with a current budget of 1.6M Euro; 760K Euro is funded by the Province of Gelderland. Additional funding for one postdoc position comes from the Pranadata project. The whole PEP project operates under the umbrella of the Privacy and Identity Lab (pi.lab)

Availability

The PEP software will be made publicly available at some later stage under an open source license.