The use of pseudonyms is a privacy-enhancing technique supporting privacy-by-design and ensuring non-attribution. Pseudonymisation allows storing directly person identifying data separately and securely from medical data and supports the data controller to meet the GDPR’s data security requirements (Art. 32 lit. 1 EU GDPR).
To facilitate the generation and administration of appropriate pseudonyms the Institute for Community Medicine of the University Medicine Greifswald (UMG) developed the web-service-based gPAS.
The use of pseudonymization domains, the specification of individual alphabets and generator algorithms allow for the free generation of different pseudonyms per data source, application context or study site.
Try out gPAS from https://demo.ths-greifswald.de
or visit https://ths-greifswald.de/gpas for more information.
Docker-compose version of gPAS (Standard)
Docker-compose version of gPAS (Web-Auth)
All functionalities of the gPAS are provided for external use via SOAP-interfaces.
DomainManager Interface-Description (JavaDoc)
The WSDL URL is http://:8080/gpas/DomainService?wsdl
PSNManager Service Interface-Description (JavaDoc)
The WSDL URL is http://:8080/gpas/gpasService?wsdl
Use SOAP-UI to create sample requests.
For the operation of gPAS at least following IT-security measures are recommended:
- operation in a separate network-zone
- use of firewalls and IP-filters
- access restriction to the gPAS-Servers with basic authentication (e.g. with nginx or apache)
The gPAS was developed by the University Medicine Greifswald and published in 2014 as part of the MOSAIC-Project (funded by the DFG HO 1937/2-1).
Concept and implementation: L. Geidel
Web-Client: A. Blumentritt
License: AGPLv3, https://www.gnu.org/licenses/agpl-3.0.en.html
Copyright: 2014 - 2020 University Medicine Greifswald
Contact: https://www.ths-greifswald.de/kontakt/
https://dx.doi.org/10.3414/ME14-01-0133
https://dx.doi.org/10.1186/s12967-015-0545-6
Domain Configuration
List processing
Show Pseudonym trees