Facilitating collaboration with restricted-use data

Abstract

Data protection requirements often impede collaborations. A typical security plan requires a standalone (non-networked) computer in a locked office. This requirement makes collaborating with colleagues at the same institution difficult; moreover, it makes collaborating across institutions practically impossible.

The challenge is to provide a platform that facilitates collaboration while also meeting security requirements. Cloud computing with virtualized machines can meet these challenges. Virtual machines can be configured to prevent them from accessing the Internet so that researchers cannot copy files to a server on the Internet. With virtual environment, implementing vetting of output by authorized reviewers can easily be incorporated into the protocols. Researchers from different institutions can access the virtual machines in the cloud and have access to shared project resources and files.

Virtual environments have been recognized for their security. The most important feature of this type of virtual environment is that the restricted-use data never leave the system. Access to the data may be modified instantly. When a data use agreement expires, access can be immediately terminated. Another facet is controlling output so that it can be vetted for disclosure risk. In addition to these security controls, virtual environments can be setup with common disk space for projects. This disk space is a way for researcher at different location to collaborate. Since this space is within the virtual environment, it meets security requirements. How do we facilitate collaboration while maintaining adequate security? Security requirements typically put researchers in separate computing environments.