ISO 25237:2017 健康情報学—偽名化 | ページ 6

3.1

access control

means of ensuring that the resources of a data processing system can be accessed only by authorized entities in authorized ways

[SOURCE:ISO/IEC 2382:2015, 2126294]

3.2

anonymization

process by which personal data (3.37) is irreversibly altered in such a way that a data subject can no longer be identified directly or indirectly, either by the data controller alone or in collaboration with any other party

Note 1 to entry: The concept is absolute, and in practice, it may be difficult to obtain.

[SOURCE:ISO/IEC 29100:2011, 2.2, modified.]

3.3

anonymized data

data (3.14) that has been produced as the output of an anonymization (3.2) process

[SOURCE:ISO/IEC 29100:2011, 2.3, modified.]

3.4

anonymous identifier

identifier (3.27) of a person which does not allow the identification (3.26) of the natural person (3.34)

3.5

authentication

assurance of the claimed identity

3.6

attacker

person deliberately exploiting vulnerabilities in technical and non-technical security controls in order to steal or compromise information systems and networks, or to compromise availability to legitimate users of information system and network resources

[SOURCE:ISO/IEC 27033‑1:2015, 3.3]

3.7

ciphertext

data (3.14) produced through the use of encryption, the semantic content of which is not available without the use of cryptographic techniques

[SOURCE:ISO/IEC 2382:2015, 2126285]

3.8

confidentiality

property that information (3.29) is not made available or disclosed to unauthorized individuals, entities or processes

[SOURCE:ISO 7498‑2:1989, 3.3.16]

3.9

content-encryption key

cryptographic key used to encrypt the content of a communication

3.10

controller

natural or legal person, public authority, agency or any other body which, alone or jointly with others, determines the purposes and means of the processing of personal data (3.40)

3.11

cryptography

discipline which embodies principles, means and methods for the transformation of data (3.14) in order to hide its information content, prevent its undetected modification and/or prevent its unauthorized use

[SOURCE:ISO 7498‑2:1989, 3.3.20]

3.12

cryptographic algorithm

<cipher> method for the transformation of data (3.14) in order to hide its information content, prevent its undetected modification and/or prevent its unauthorized use

3.13

cryptographic key management

key management

generation, storage, distribution, deletion, archiving and application of keys (3.31) in accordance with a security policy (3.46)

[SOURCE:ISO 7498‑2:1989, 3.3.33]

3.14

data

reinterpretable representation of information (3.29) in a formalized manner suitable for communication, interpretation or processing

Note 1 to entry: Data can be processed by humans or by automatic means.

[SOURCE:ISO/IEC 2382:2015, 2121272]

3.15

data integrity

property that data (3.14) has not been altered or destroyed in an unauthorized manner

[SOURCE:ISO 7498‑2:1989, 3.3.21]

3.16

data linking

matching and combining data (3.14) from multiple databases

3.17

data protection

technical and social regimen for negotiating, managing and ensuring informational privacy (3.39) , and security

3.18

data subject

person to whom data (3.14) refer

3.19

decryption

process of converting encrypted data (3.14) back into its original form so it can be understood

3.20

de-identification

general term for any process of reducing the association between a set of identifying data (3.14) and the data subject (3.18)

3.21

directly identifying data

data (3.14) that directly identifies a single individual

Note 1 to entry: Direct identifiers are those data that can be used to identify a person without additional information or with cross-linking through other information that is in the public domain.

3.22

disclosure

divulging of, or provision of access to, data (3.14)

Note 1 to entry: Whether the recipient actually looks at the data, takes them into knowledge or retains them, is irrelevant to whether disclosure has occurred.

3.23

encryption

process of converting information (3.29) or data (3.14) into a cipher or code

3.24

healthcare identifier

subject of care identifier

identifier (3.27) of a person for primary use by a healthcare system

3.25

identifiable person

one who can be identified, directly or indirectly, in particular by reference to an identification number or to one or more factors specific to his physical, physiological, mental, economic, cultural or social identity

[SOURCE:Directive 95/46/EC]

3.26

identification

process of using claimed or observed attributes of an entity to single out the entity among other entities in a set of identities

Note 1 to entry: The identification of an entity within a certain context enables another entity to distinguish between the entities with which it interacts.

3.27

identifier

information (3.29) used to claim an identity, before a potential corroboration by a corresponding authenticator

[SOURCE:ENV 13608-1:2000, 3.44]

3.28

indirectly identifying data

data (3.14) that can identify a single person only when used together with other indirectly identifying data

Note 1 to entry: Indirect identifiers can reduce the population to which the person belongs, possibly down to one if used in combination.

3.29

information

knowledge concerning objects that within a certain context has a particular meaning

[SOURCE:ISO/IEC 2382:2015, 2121271, modified.]

3.30

irreversibility

situation when, for any passage from identifiable to pseudonymous, it is computationally unfeasible to trace back to the original identifier (3.27) from the pseudonym (3.43)

3.31

key

sequence of symbols which controls the operations of encryption (3.23) and decryption (3.19)

[SOURCE:ISO 7498‑2:1989, 3.3.32]

3.32

linkage of information objects

process allowing a logical association to be established between different information objects

3.33

longitudinal or lifetime personal health record

permanent, coordinated record of significant information, in chronological sequence

Note 1 to entry: It may include all historical data collected or be retrieved as a user designated synopsis of significant demographic, genetic, clinical and environmental facts and events maintained within an automated system.

[SOURCE:ISO/TR 21089:2004, 3.61, modified]

3.34

natural person

real human being as opposed to a legal person which may be a private or public organization

3.35

person identification

process for establishing an association between an information object and a physical person

3.36

personal identifier

information with the purpose of uniquely identifying a person within a given context

3.37

personal data

information relating to an identified or identifiable natural person (3.34) (“data subject”)

[SOURCE:Directive 95/46/EC]

3.38

primary use of personal data

uses and disclosures (3.22) that are intended for the data (3.14) collected

3.39

privacy

freedom from intrusion into the private life or affairs of an individual when that intrusion results from undue or illegal gathering and use of data (3.14) about that individual

[SOURCE:ISO/IEC 2382:2015, 2126263]

3.40

processing of personal data

operation or set of operations that is performed upon personal data (3.37) , whether or not by automatic means, such as collection, recording, organization, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, blocking, erasure or destruction

[SOURCE:Directive 95/46/EC]

3.41

processor

natural or legal person, public authority, agency or any other body that processes personal data (3.37) on behalf of the controller (3.10)

Note 1 to entry: See Directive 95/46/EC of the European Parliament and of the Council of 24 October 1995 on the protection of individuals with regard to the processing of personal data and on the free movement of such data.

3.42

pseudonymization

particular type of de-identification (3.20) that both removes the association with a data subject (3.18) and adds an association between a particular set of characteristics relating to the data subject and one or more pseudonyms (3.43)

3.43

pseudonym

personal identifier (3.36) that is different from the normally used personal identifier and is used with pseudonymized data to provide dataset coherence linking all the information about a subject, without disclosing the real world person identity.

Note 1 to entry: This may be either derived from the normally used personal identifier in a reversible or irreversible way or be totally unrelated.

Note 2 to entry: Pseudonym is usually restricted to mean an identifier that does not allow the direct derivation of the normal personal identifier. Such pseudonymous information is thus functionally anonymous. A trusted third party may be able to obtain the normal personal identifier from the pseudonym.

3.44

recipient

natural or legal person, public authority, agency or any other body to whom data (3.14) are disclosed

3.45

secondary use of personal data

uses and disclosures (3.22) that are different than the initial intended use for the data (3.14) collected

3.46

security policy

plan or course of action adopted for providing computer security

[SOURCE:ISO/IEC 2382:2015, 2126246]

3.47

trusted third party

security authority, or its agent, trusted by other entities with respect to security-related activities

[SOURCE:ISO/IEC 18014‑1:2008, 3.20]