# A Secure CDM-Based Data Analysis Platform (SCAP) in Multi-Centered Distributed Setting
## 1 Introduction
Although this protocol protects communication in a general way, it does not provide the security specific to the business logic of the medical system, such as a home health care service, between the user and the server. This problem is exacerbated in a multi-institutional medical data research environment where medical data is distributed on a network. Kerberos [23] provides authentication services in such an environment, but only one server at a time proves a user's identity and does not provide security for data sent and received after that. Therefore, a specialized security protocol is required to design a system to support multi-institutional medical data-based research. In this paper, we propose a secure CDM-based data analysis platform (SCAP) for securely analyzing CDM data from multiple hospitals in a distributed network environment. SCAP distributes and executes software analysis codes (AC) and returns the analysis results to external investigators to analyze the CDM data of all hospitals connected to the platform. While providing an automated CDM data analysis service, SCAP provides end-to-end authentication to users accessing the platform and the integrity of CDM data analysis codes. The biggest advantage of this platform is that the medical data kept by each hospital is not shared beyond the hospital for analysis. This feature reduces the risk of the patients' personal information being leaked, and at the same time it enables us to obtain analysis results from multiple institutions. To safely manage this entire process, SCAP has the following features: (1) a secure multi-center user authentication, (2) integrity assurance for AC delivered over the network, (3) running AC and returning analysis results, and (4) providing a platform user authentication method without an account database for each hospital. To satisfy these features, the platform includes six subcomponents: a certificate authority (CA), an authentication server (AS), a code signer (CS), a ticket-granting server (TGS), a relaying server (RS), and a service server (SS). Among these components, the AS, CS, TGS, and RS form the central server group of the SCAP and provide an interface allowing users to deliver AC to hospitals registered on the platform. The CA issues certificates for public key cryptography for all participants of the platform. Finally, the SS is installed in the internal network of each hospital and analyzes the CDM data using the AC delivered from the central server group and returns the analysis results. The contributions of this paper are as follows:* This paper proposes a process for safely analyzing medical CDM data in a multi-center distributed network environment. * This paper describes in detail the functions of the components constituting the A secure CDM-based data analysis platform (SCAP) and the communication between components of the SCAP. The rest of this paper is organized as follows. Section 2 presents the existing research on addressing the multi-institutional medical data and authentication methods. Section 3 describes the proposed data analysis platform. Section 4 details the implementations for the proposed platform. Lastly, Section 5 discusses the limitations and the conclusion.