Technology

The registry of Czech and Slovak Duchenne/Becker muscular dystrophy patients is a result of cooperation between the Institute of Biostatistics and Analyses, Masaryk University (technical realization, data analyses), the Parent Project Czech Republic civil association (project initiation, financial support) and University Hospital Brno (scientific advisor).

The registry of Czech and Slovak DMD/BMD patients is being developed as a web based application designed to capture and store patient data. The Central data repository is based on the Oracle database server, which provides us with the robustness, performance and security necessary for this type of application. Data in the central repository is accessed and manipulated using a web application (developed in ASP), which is accessible using Internet Explorer browsers. Users with access to the registry do not need to install any specific client software on their computers. All they need to access the system is an internet browser. Access to the registry is protected by the login and password and all the communication between the client's browser and our server is encrypted. For the encryption https protocol is used (the same technology which is used e.g. for internet banking).

All the patients in the registry have access to their personal data (data related to their diagnosis) for viewing. This access is also protected with login names and password and the communication uses a secure encrypted connection again.

The registry is currently available on-line:

• https://trials.cba.muni.cz/mdb
• https://trials.cba.muni.cz/trialdb/mdb.html

System's architecture

Used technologies

Thin client - web browser

• Internet Explorer 5.5 or later
• Data collecting, viewing, etc.
• Analytical functions
• Client side scripts

Web server (application server)

• Microsoft Windows Server, Microsoft IIS
• Web application
• Server side script
• ASP

Database server

• Central data repository
• Definition and design of data forms
• Definition and administration of user accounts and user rights
• Validation rules
• Oracle
• SUSE Linux Enterprise Server

Data security

Because this project involves the collection of personal data and medical records, strong security measures have been adopted:

• access to the registry is protected by logins and passwords
• all the communication is encrypted using SSL encryption (https protocol)
• users have defined access rights (read, write, delete, enroll patient, ...)
• automatic log out of users
• system monitoring and logging
• logging of data modifications
• firewalls, vulnerability scanning
• limited physical access to the servers
• uninterruptible power supplies (UPS), fire alarm, air condition etc. in the server room
• regular backups of the system/database
• etc.