Halaman ini diterjemahkan oleh Cloud Translation API.

Melakukan de-identifikasi data FHIR

Halaman ini menjelaskan cara melakukan de-identifikasi data sensitif dalam resource FHIR menggunakan Cloud Healthcare API pada tingkat berikut:

Di tingkat set data menggunakan datasets.deidentify
Di tingkat penyimpanan FHIR menggunakan fhirStores.deidentify

Halaman ini juga menjelaskan cara menerapkan filter saat mende-identifikasi data di tingkat FHIR store.

Ringkasan de-identifikasi

De-identifikasi tingkat set data

Untuk melakukan de-identifikasi data FHIR di tingkat set data, panggil operasi datasets.deidentify. Panggilan API de-identifikasi memiliki komponen berikut:

Set data sumber: Set data yang berisi penyimpanan FHIR dengan satu atau beberapa resource yang memiliki data sensitif.
Set data tujuan: De-identifikasi tidak memengaruhi set data asli atau datanya. Sebagai gantinya, salinan data asli yang telah dihapus identitasnya ditulis ke set data baru, yang disebut set data tujuan.
Hal yang harus dide-identifikasi: Parameter konfigurasi yang menentukan cara memproses set data. Anda dapat mengonfigurasi parameter ini dengan menentukannya dalam FhirConfig dan/atau TextConfig di dalam objek DeidentifyConfig dan meneruskannya dengan:
- Menetapkan kolom config isi permintaan
- Menyimpan file dalam Cloud Storage dalam format JSON dan menentukan lokasi file dalam bucket menggunakan kolom gcsConfigUri dari isi permintaan

Sebagian besar contoh dalam panduan ini menunjukkan cara mende-identifikasi data FHIR di tingkat set data.

De-identifikasi tingkat penyimpanan FHIR

Melakukan de-identifikasi data FHIR di tingkat penyimpanan FHIR memungkinkan Anda memiliki kontrol yang lebih besar terhadap data FHIR yang dide-identifikasi.

Untuk melakukan de-identifikasi data FHIR di penyimpanan FHIR, panggil metode fhirStores.deidentify. Panggilan API de-identifikasi memiliki komponen berikut:

Penyimpanan FHIR sumber: Penyimpanan FHIR yang berisi satu atau beberapa resource yang memiliki data sensitif.
Penyimpanan FHIR tujuan: De-identifikasi tidak memengaruhi penyimpanan FHIR asli atau datanya. Sebagai gantinya, salinan data asli yang telah di-de-identifikasi ditulis ke penyimpanan FHIR tujuan. FHIR store tujuan harus sudah ada.
Hal yang harus dilakukan untuk de-identifikasi: Parameter konfigurasi yang menentukan cara memproses penyimpanan FHIR. Anda dapat mengonfigurasi parameter ini dengan menentukannya dalam FhirConfig dan/atau TextConfig di dalam objek DeidentifyConfig dan meneruskannya dengan:
- Menetapkan kolom config isi permintaan
- Menyimpan file dalam Cloud Storage dalam format JSON dan menentukan lokasi file dalam bucket menggunakan kolom gcsConfigUri dari isi permintaan

Untuk contoh cara melakukan de-identifikasi data FHIR di tingkat penyimpanan FHIR, lihat Melakukan de-identifikasi data di tingkat penyimpanan FHIR.

Filter

Anda dapat melakukan de-identifikasi sebagian data di penyimpanan FHIR dengan menentukan daftar ID resource FHIR dalam permintaan fhirStores.deidentify. Sebagai contoh, lihat Melakukan de-identifikasi pada subset penyimpanan FHIR.

Contoh resource FHIR yang digunakan dalam panduan ini

Contoh dalam panduan ini menggunakan resource Pasien (DSTU2, STU3, dan R4) di penyimpanan FHIR. Pasien memiliki properti yang ditampilkan dalam contoh berikut. Nilai id dihasilkan oleh server. Jika Anda membuat resource Pasien di penyimpanan FHIR Anda sendiri, nilai id yang ditampilkan akan berbeda dengan nilai yang ditampilkan dalam sampel Pasien.

{
  "address": [
    {
      "city": "Anycity",
      "district": "Anydistrict",
      "line": [
        "123 Main Street"
      ],
      "period": {
        "start": "1990-12-05"
      },
      "postalCode": "12345",
      "state": "CA",
      "text": "123 Main Street Anycity, Anydistrict, CA 12345",
      "type": "both",
      "use": "home"
    }
  ],
  "birthDate": "1980-12-05",
  "gender": "female",
  "id": "r77433dd-dkeuc-633743nfd-383nfdsjds732",
  "name": [
    {
      "family": "Smith",
      "given": [
        "Darcy"
      ],
      "use": "official"
    }
  ],
  "resourceType": "Patient",
  "text": {
    "status": "generated",
    "div": "<div><p><b>Patient</b></p><p><b>Name</b>: Smith, Darcy</p><p><b>DateOfBirth</b>: 1980-12-05</p><p><b>Gender</b>: Female</p></div>"
  }
}

De-identifikasi data FHIR default

Anda dapat melakukan de-identifikasi data FHIR menggunakan metode "default" yang menyamarkan informasi kesehatan terlindungi (PHI) umum dalam resource di penyimpanan FHIR. Metode default menyamarkan informasi berikut:

infoTypes yang ditentukan dalam infoTypes FHIR default
Jalur yang ditentukan dalam profil de-identifikasi FHIR default

Contoh berikut menunjukkan cara menghapus identitas resource Pasien menggunakan metode default FHIR. Saat menggunakan metode default, gunakan FhirConfig kosong di dalam objek DeidentifyConfig.

curl

curl -X POST \
    -H "Authorization: Bearer $(gcloud auth application-default print-access-token)" \
    -H "Content-Type: application/json; charset=utf-8" \
    --data "{
      'destinationDataset': 'projects/PROJECT_ID/locations/LOCATION/datasets/DESTINATION_DATASET_ID',
      'config': {
        'fhir': {}
      }
    }" "https://healthcare.googleapis.com/v1/projects/PROJECT_ID/locations/LOCATION/datasets/SOURCE_DATASET_ID:deidentify"

Jika permintaan berhasil, server akan menampilkan respons dalam format JSON:

{
  "name": "projects/PROJECT_ID/locations/REGION/datasets/SOURCE_DATASET_ID/operations/OPERATION_ID"
}

Respons berisi nama operasi. Anda dapat menggunakan Metode get operasi untuk melacak status operasi:

curl -X GET \
    -H "Authorization: Bearer $(gcloud auth print-access-token)" \
    -H "Content-Type: application/json; charset=utf-8" \
    "https://healthcare.googleapis.com/v1/projects/PROJECT_ID/locations/REGION/datasets/SOURCE_DATASET_ID/operations/OPERATION_ID"

Jika permintaan berhasil, server akan menampilkan respons dalam format JSON. Setelah proses de-identifikasi selesai, respons akan berisi "done": true.

{
  "name": "projects/PROJECT_ID/locations/REGION/datasets/SOURCE_DATASET_ID/operations/OPERATION_ID",
  "metadata": {
    "@type": "type.googleapis.com/google.cloud.healthcare.v1.OperationMetadata",
    "apiMethodName": "google.cloud.healthcare.v1.dataset.DatasetService.DeidentifyDataset",
    "createTime": "CREATE_TIME",
    "endTime": "END_TIME",
    "logsUrl": "https://console.cloud.google.com/logs/viewer/CLOUD_LOGGING_URL"
  },
  "done": true,
  "response": {
    "@type": "type.googleapis.com/google.cloud.healthcare.v1.deidentify.DeidentifySummary",
    "successStoreCount": "1",
    "successResourceCount": "1"
  }
}

Selanjutnya, menggunakan ID Pasien, Anda bisa mendapatkan detail untuk resource Pasien di set data tujuan baru:

curl -X GET \
     -H "Authorization: Bearer $(gcloud auth print-access-token)" \
     -H "Content-Type: application/fhir+json; charset=utf-8" \
     "https://healthcare.googleapis.com/v1/projects/PROJECT_ID/locations/REGION/datasets/DESTINATION_DATASET_ID/fhirStores/FHIR_STORE_ID/fhir/Patient/r77433dd-dkeuc-633743nfd-383nfdsjds732"

Server menampilkan respons berikut:

{
  "address": [
    {
      "city": "",
      "district": "",
      "line": [
        ""
      ],
      "period": {
        "start": "1990-12-05"
      },
      "postalCode": "",
      "state": "CA",
      "text": "",
      "type": "both",
      "use": "home"
    }
  ],
  "birthDate": "1981-02-24",
  "gender": "female",
  "id": "r77433dd-dkeuc-633743nfd-383nfdsjds732",
  "meta": {
    "lastUpdated": "2018-01-01T2018-01-01T00:00:00+00:00",
    "versionId": "MTU0MDU4NTcxNjI2MTUxNDAwMA"
  },
  "name": [
    {
      "family": "",
      "given": [
        ""
      ],
      "use": "official"
    }
  ],
  "resourceType": "Patient",
  "text": {
    "div": "<div><p><b>Patient</b></p><p><b>Name</b>: [PERSON_NAME][PERSON_NAME][PERSON_NAME]</p><p><b>DateOfBirth</b>: 1981-02-24</p><p><b>Gender</b>: Female</p></div>",
    "status": "generated"
  }
}

PowerShell

$cred = gcloud auth application-default print-access-token
$headers = @{ Authorization = "Bearer $cred" }

Invoke-WebRequest `
  -Method Post `
  -Headers $headers `
  -ContentType: "application/json; charset=utf-8" `
  -Body "{
    'destinationDataset': 'projects/PROJECT_ID/locations/LOCATION/datasets/DESTINATION_DATASET_ID',
    'config': {
      'fhir': {}
    }
  }" `
  -Uri "https://healthcare.googleapis.com/v1/projects/PROJECT_ID/locations/LOCATION/datasets/SOURCE_DATASET_ID:deidentify" | Select-Object -Expand Content

Jika permintaan berhasil, server akan menampilkan respons dalam format JSON:

{
  "name": "projects/PROJECT_ID/locations/REGION/datasets/SOURCE_DATASET_ID/operations/OPERATION_ID"
}

Respons berisi nama operasi. Anda dapat menggunakan Metode get operasi untuk melacak status operasi:

$cred = gcloud auth print-access-token
$headers = @{ Authorization = "Bearer $cred" }

Invoke-WebRequest `
  -Method Get `
  -Headers $headers `
  -ContentType: "application/json; charset=utf-8" `
  -Uri "https://healthcare.googleapis.com/v1/projects/PROJECT_ID/locations/REGION/datasets/SOURCE_DATASET_ID/operations/OPERATION_ID" | Select-Object -Expand Content

Jika permintaan berhasil, server akan menampilkan respons dalam format JSON. Setelah proses de-identifikasi selesai, respons akan berisi "done": true.

{
  "name": "projects/PROJECT_ID/locations/REGION/datasets/SOURCE_DATASET_ID/operations/OPERATION_NUMBER",
  "metadata": {
    "@type": "type.googleapis.com/google.cloud.healthcare.v1.OperationMetadata",
    "apiMethodName": "google.cloud.healthcare.v1.dataset.DatasetService.DeidentifyDataset",
    "createTime": "CREATE_TIME",
    "endTime": "END_TIME",
    "logsUrl": "https://console.cloud.google.com/logs/viewer/CLOUD_LOGGING_URL"
  },
  "done": true,
  "response": {
    "@type": "type.googleapis.com/google.cloud.healthcare.v1.deidentify.DeidentifySummary",
    "successStoreCount": "1",
    "successResourceCount": "1"
  }
}

Selanjutnya, menggunakan ID Pasien, Anda bisa mendapatkan detail untuk resource Pasien di set data tujuan baru:

$cred = gcloud auth print-access-token
$headers = @{ Authorization = "Bearer $cred" }

Invoke-RestMethod `
  -Method Get `
  -Headers $headers `
  -ContentType: "application/fhir+json; charset=utf-8" `
  -Uri "https://healthcare.googleapis.com/v1/projects/PROJECT_ID/locations/REGION/datasets/DESTINATION_DATASET_ID/fhirStores/FHIR_STORE_ID/fhir/Patient/r77433dd-dkeuc-633743nfd-383nfdsjds732" | ConvertTo-Json

Server menampilkan respons berikut:

{
  "address": [
    {
      "city": "",
      "district": "",
      "line": [
        ""
      ],
      "period": {
        "start": "1990-12-05"
      },
      "postalCode": "",
      "state": "CA",
      "text": "",
      "type": "both",
      "use": "home"
    }
  ],
  "birthDate": "1981-02-24",
  "gender": "female",
  "id": "r77433dd-dkeuc-633743nfd-383nfdsjds732",
  "meta": {
    "lastUpdated": "2018-01-01T2018-01-01T00:00:00+00:00",
    "versionId": "MTU0MDU4NTcxNjI2MTUxNDAwMA"
  },
  "name": [
    {
      "family": "",
      "given": [
        ""
      ],
      "use": "official"
    }
  ],
  "resourceType": "Patient",
  "text": {
    "div": "<div><p><b>Patient</b></p><p><b>Name</b>: [PERSON_NAME][PERSON_NAME][PERSON_NAME]</p><p><b>DateOfBirth</b>: 1981-02-24</p><p><b>Gender</b>: Female</p></div>",
    "status": "generated"
  }
}

Anda dapat melihat bahwa nilai berikut telah diubah untuk menghapus identitas resource:

Nilai baru diberikan di kolom birthDate menggunakan teknik pergeseran tanggal dengan diferensial 100 hari.
Nilai di address.city telah disamarkan.
Nilai di address.district telah disamarkan.
Nilai di address.line telah disamarkan.
Nilai di address.postalCode telah disamarkan.
Nilai di address.text telah disamarkan.
Nilai di name.family telah disamarkan.
Nilai di name.given telah disamarkan.
Teks bebas di kolom text.div diubah untuk mengganti nama pasien dengan infoType-nya, [PERSON_NAME]. Nilai tanggal lahir pasien diubah dengan cara yang sama seperti nilai di kolom birthDate diubah.

Melakukan de-identifikasi jalur FHIR tertentu

Untuk menentukan jalur FHIR yang akan dide-identifikasi dan cara mentransformasinya, konfigurasikan fieldMetadataList dalam objek FhirConfig.

Di dalam fieldMetadataList, Anda menentukan daftar nama kolom atau nama jenis resource FHIR yang dipisahkan titik dalam daftar paths. Selanjutnya, Anda menentukan nilai Action untuk diterapkan ke semua yang tercantum dalam paths. Lihat dokumentasi Action untuk mengetahui nilai yang memungkinkan.

Untuk mengetahui informasi tentang cara menetapkan kolom paths di Cloud Healthcare API, lihat paths. Pemformatan nilai di paths didasarkan pada FHIRPath.

Profil de-identifikasi FHIR default

Secara default, jika Anda tidak menentukan jalur FHIR apa pun di fieldMetadataList, Cloud Healthcare API akan menerapkan profil de-identifikasi berikut untuk memilih dan mengubah jalur FHIR. Profil yang diterapkan bergantung pada versi FHIR yang Anda gunakan. Anda dapat meluaskan bagian berikut untuk melihat profil untuk versi yang Anda gunakan. Anda juga dapat mendownload profil (DSTU2, STU3, dan R4).

DSTU2

fhir {
  field_metadata_list {
    paths: "AuditEvent.Event.outcomeDesc"
    paths: "AuditEvent.Participant.altId"
    paths: "AuditEvent.Participant.Network.address"
    paths: "AuditEvent.Source.site"
    paths: "CarePlan.Activity.Detail.Scheduled.string"
    paths: "Claim.school"
    paths: "Claim.Coverage.businessArrangement"
    paths: "ClaimResponse.Coverage.businessArrangement"
    paths: "Composition.title"
    paths: "Composition.Section.title"
    paths: "ConceptMap.publisher"
    paths: "ConceptMap.copyright"
    paths: "Condition.Onset.string"
    paths: "Condition.Abatement.string"
    paths: "Conformance.publisher"
    paths: "Conformance.copyright"
    paths: "Contract.Signer.signature"
    paths: "Coverage.group"
    paths: "Coverage.plan"
    paths: "Coverage.subPlan"
    paths: "DataElement.publisher"
    paths: "DataElement.copyright"
    paths: "Device.udi"
    paths: "FamilyMemberHistory.Born.string"
    paths: "FamilyMemberHistory.Deceased.string"
    paths: "FamilyMemberHistory.Condition.Onset.string"
    paths: "HealthcareService.serviceName"
    paths: "HealthcareService.publicKey"
    paths: "ImagingStudy.Series.Instance.title"
    paths: "ImplementationGuide.publisher"
    paths: "ImplementationGuide.copyright"
    paths: "List.title"
    paths: "NamingSystem.publisher"
    paths: "NamingSystem.responsible"
    paths: "OperationDefinition.publisher"
    paths: "Questionnaire.publisher"
    paths: "Questionnaire.Group.linkId"
    paths: "SearchParameter.publisher"
    paths: "StructureDefinition.publisher"
    paths: "StructureDefinition.copyright"
    paths: "ValueSet.publisher"
    paths: "ValueSet.copyright"
    paths: "Address.text"
    paths: "Address.line"
    paths: "Address.city"
    paths: "Address.district"
    paths: "Address.postalCode"
    paths: "Annotation.text"
    paths: "Annotation.Author.string"
    paths: "ContactPoint.value"
    paths: "HumanName"
    paths: "Identifier.value"
    action: TRANSFORM
  }
  field_metadata_list {
    paths: "Appointment.comment"
    paths: "AppointmentResponse.comment"
    paths: "Claim.Coverage.preAuthRef"
    paths: "ClaimResponse.Note.text"
    paths: "ClaimResponse.Coverage.preAuthRef"
    paths: "ClinicalImpression.summary"
    paths: "ClinicalImpression.prognosis"
    paths: "ClinicalImpression.Finding.cause"
    paths: "ClinicalImpression.RuledOut.reason"
    paths: "Communication.Payload.Content.string"
    paths: "CommunicationRequest.Payload.Content.string"
    paths: "Condition.notes"
    paths: "Conformance.Rest.documentation"
    paths: "Conformance.Rest.Resource.Interaction.documentation"
    paths: "Conformance.Rest.Resource.SearchParam.documentation"
    paths: "Conformance.Rest.Interaction.documentation"
    paths: "Conformance.Messaging.documentation"
    paths: "Conformance.Messaging.Event.documentation"
    paths: "Conformance.Document.documentation"
    paths: "Contract.Term.text"
    paths: "DetectedIssue.detail"
    paths: "DeviceComponent.ProductionSpecification.productionSpec"
    paths: "DeviceUseRequest.notes"
    paths: "DeviceUseStatement.notes"
    paths: "DiagnosticReport.conclusion"
    paths: "DiagnosticReport.Image.comment"
    paths: "HealthcareService.comment"
    paths: "HealthcareService.extraDetails"
    paths: "HealthcareService.eligibilityNote"
    paths: "HealthcareService.programName"
    paths: "HealthcareService.availabilityExceptions"
    paths: "List.note"
    paths: "MedicationAdministration.note"
    paths: "MedicationDispense.note"
    paths: "MedicationOrder.note"
    paths: "MedicationStatement.note"
    paths: "NutritionOrder.OralDiet.instruction"
    paths: "NutritionOrder.Supplement.instruction"
    paths: "Observation.comments"
    paths: "Observation.Value.string"
    paths: "OperationDefinition.notes"
    paths: "OperationOutcome.Issue.diagnostics"
    paths: "PaymentReconciliation.disposition"
    paths: "PaymentReconciliation.Note.text"
    paths: "ProcessResponse.Notes.text"
    paths: "Provenance.Entity.display"
    paths: "Questionnaire.Group.text"
    paths: "Questionnaire.Group.Question.text"
    paths: "QuestionnaireResponse.Group.text"
    paths: "QuestionnaireResponse.Group.Question.text"
    paths: "QuestionnaireResponse.Group.Question.Answer.Value.string"
    paths: "RiskAssessment.mitigation"
    paths: "RiskAssessment.Prediction.rationale"
    paths: "Schedule.comment"
    paths: "Slot.comment"
    paths: "Specimen.Collection.comment"
    paths: "StructureDefinition.requirements"
    paths: "StructureDefinition.Mapping.comments"
    paths: "Subscription.criteria"
    paths: "Subscription.reason"
    paths: "Subscription.error"
    paths: "Subscription.Channel.header"
    paths: "ValueSet.requirements"
    paths: "ValueSet.Expansion.Parameter.Value.string"
    paths: "VisionPrescription.Dispense.notes"
    paths: "Attachment.title"
    paths: "Reference.display"
    action: INSPECT_AND_TRANSFORM
  }
}

STU3

fhir {
  field_metadata_list {
    paths: "ActivityDefinition.publisher"
    paths: "AllergyIntolerance.Onset.string"
    paths: "Appointment.comment"
    paths: "AppointmentResponse.comment"
    paths: "AuditEvent.outcomeDesc"
    paths: "AuditEvent.Agent.altId"
    paths: "AuditEvent.Agent.Network.address"
    paths: "AuditEvent.Source.site"
    paths: "CapabilityStatement.title"
    paths: "CapabilityStatement.publisher"
    paths: "CarePlan.title"
    paths: "Claim.Insurance.businessArrangement"
    paths: "ClaimResponse.Insurance.businessArrangement"
    paths: "CodeSystem.title"
    paths: "CodeSystem.publisher"
    paths: "CompartmentDefinition.title"
    paths: "CompartmentDefinition.publisher"
    paths: "Composition.title"
    paths: "Composition.Section.title"
    paths: "ConceptMap.title"
    paths: "ConceptMap.publisher"
    paths: "Condition.Onset.string"
    paths: "Condition.Abatement.string"
    paths: "Coverage.subscriberId"
    paths: "Coverage.dependent"
    paths: "Coverage.Group.group"
    paths: "Coverage.Group.subGroup"
    paths: "Coverage.Group.plan"
    paths: "Coverage.Group.subPlan"
    paths: "Coverage.Group.class"
    paths: "Coverage.Group.subClass"
    paths: "DataElement.publisher"
    paths: "DataElement.title"
    paths: "Device.Udi.deviceIdentifier"
    paths: "Device.Udi.carrierHRF"
    paths: "EligibilityRequest.businessArrangement"
    paths: "ExpansionProfile.publisher"
    paths: "ExplanationOfBenefit.Insurance.preAuthRef"
    paths: "FamilyMemberHistory.bornDate"
    paths: "FamilyMemberHistory.Born.string"
    paths: "FamilyMemberHistory.AgeType.string"
    paths: "FamilyMemberHistory.deceasedDate"
    paths: "FamilyMemberHistory.Deceased.string"
    paths: "FamilyMemberHistory.Condition.Onset.string"
    paths: "GraphDefinition.publisher"
    paths: "ImagingStudy.Series.Instance.title"
    paths: "ImplementationGuide.publisher"
    paths: "Library.title"
    paths: "Library.publisher"
    paths: "List.title"
    paths: "Location.name"
    paths: "Location.alias"
    paths: "Measure.title"
    paths: "Measure.publisher"
    paths: "MessageDefinition.title"
    paths: "MessageDefinition.publisher"
    paths: "NamingSystem.publisher"
    paths: "NamingSystem.responsible"
    paths: "OperationDefinition.publisher"
    paths: "Organization.alias"
    paths: "Patient.birthDate"
    paths: "Patient.deceased.dateTime"
    paths: "Person.birthDate"
    paths: "PlanDefinition.title"
    paths: "PlanDefinition.publisher"
    paths: "PlanDefinition.Action.title"
    paths: "Practitioner.birthDate"
    paths: "Questionnaire.title"
    paths: "Questionnaire.publisher"
    paths: "ResearchStudy.title"
    paths: "SearchParameter.publisher"
    paths: "ServiceDefinition.title"
    paths: "ServiceDefinition.publisher"
    paths: "StructureDefinition.title"
    paths: "StructureDefinition.publisher"
    paths: "StructureMap.title"
    paths: "StructureMap.publisher"
    paths: "TestReport.tester"
    paths: "TestReport.Participant.display"
    paths: "TestReport.Setup.SetupAction.Assert.detail"
    paths: "ValueSet.title"
    paths: "ValueSet.publisher"
    paths: "Address.text"
    paths: "Address.line"
    paths: "Address.city"
    paths: "Address.district"
    paths: "Address.postalCode"
    paths: "Annotation.text"
    paths: "Annotation.Author.string"
    paths: "ContactPoint.value"
    paths: "HumanName"
    paths: "Identifier.value"
    paths: "RelatedPerson.birthDate"
    action: TRANSFORM
  }
  field_metadata_list {
    paths: "AdverseEvent.SuspectEntity.causalityProductRelatedness"
    paths: "CapabilityStatement.Rest.documentation"
    paths: "CapabilityStatement.Rest.Resource.ResourceInteraction.documentation"
    paths: "CapabilityStatement.Rest.Resource.SearchParam.documentation"
    paths: "CapabilityStatement.Rest.SystemInteraction.documentation"
    paths: "CapabilityStatement.Messaging.documentation"
    paths: "CapabilityStatement.Messaging.Event.documentation"
    paths: "CapabilityStatement.Document.documentation"
    paths: "CarePlan.Activity.Detail.statusReason"
    paths: "CarePlan.Activity.Detail.Scheduled.string"
    paths: "ChargeItem.overrideReason"
    paths: "Claim.SpecialCondition.Value.string"
    paths: "Claim.Insurance.preAuthRef"
    paths: "ClaimResponse.Note.text"
    paths: "ClaimResponse.Insurance.preAuthRef"
    paths: "ClinicalImpression.summary"
    paths: "ClinicalImpression.Finding.basis"
    paths: "Communication.Payload.Content.string"
    paths: "CommunicationRequest.Payload.Content.string"
    paths: "CompartmentDefinition.Resource.documentation"
    paths: "Contract.Term.text"
    paths: "Coverage.network"
    paths: "Coverage.Group.groupDisplay"
    paths: "Coverage.Group.subGroupDisplay"
    paths: "Coverage.Group.planDisplay"
    paths: "Coverage.Group.subPlanDisplay"
    paths: "Coverage.Group.classDisplay"
    paths: "Coverage.Group.subClassDisplay"
    paths: "DetectedIssue.detail"
    paths: "DeviceComponent.ProductionSpecification.productionSpec"
    paths: "DiagnosticReport.conclusion"
    paths: "DiagnosticReport.Image.comment"
    paths: "ExplanationOfBenefit.SupportingInformation.Value.string"
    paths: "ExplanationOfBenefit.Note.text"
    paths: "Goal.statusReason"
    paths: "HealthcareService.comment"
    paths: "HealthcareService.extraDetails"
    paths: "HealthcareService.eligibilityNote"
    paths: "HealthcareService.programName"
    paths: "HealthcareService.availabilityExceptions"
    paths: "ImplementationGuide.Page.title"
    paths: "Library.usage"
    paths: "MeasureReport.Group.Stratifier.StratifierGroup.value"
    paths: "NamingSystem.UniqueId.comment"
    paths: "NutritionOrder.OralDiet.instruction"
    paths: "NutritionOrder.Supplement.instruction"
    paths: "NutritionOrder.EnteralFormula.administrationInstruction"
    paths: "Observation.comment"
    paths: "Observation.Value.string"
    paths: "OperationDefinition.comment"
    paths: "OperationOutcome.Issue.diagnostics"
    paths: "Parameters.Parameter.Value.string"
    paths: "PaymentReconciliation.disposition"
    paths: "PaymentReconciliation.Notes.text"
    paths: "PlanDefinition.usage"
    paths: "PractitionerRole.availabilityExceptions"
    paths: "ProcessResponse.ProcessNote.text"
    paths: "Questionnaire.Item.text"
    paths: "Questionnaire.Item.Option.Value.string"
    paths: "Questionnaire.Item.Initial.string"
    paths: "QuestionnaireResponse.Item.text"
    paths: "QuestionnaireResponse.Item.Answer.Value.string"
    paths: "RequestGroup.Action.textEquivalent"
    paths: "ResearchSubject.assignedArm"
    paths: "ResearchSubject.actualArm"
    paths: "RiskAssessment.mitigation"
    paths: "RiskAssessment.comment"
    paths: "RiskAssessment.Prediction.rationale"
    paths: "Schedule.comment"
    paths: "ServiceDefinition.usage"
    paths: "Slot.comment"
    paths: "Subscription.reason"
    paths: "Subscription.criteria"
    paths: "Subscription.error"
    paths: "Subscription.Channel.header"
    paths: "Task.Parameter.Value.string"
    paths: "Task.Output.Value.string"
    paths: "ValueSet.Compose.ConceptSet.ConceptReference.Designation.value"
    paths: "Attachment.title"
    paths: "Reference.display"
    paths: "Narrative.div"
    action: INSPECT_AND_TRANSFORM
  }
}
text {
  transformations {
    replace_with_info_type_config {
    }
  }
  transformations {
    info_types: "DATE"
    date_shift_config {
    }
  }
}

fhir {
  field_metadata_list {
    paths: "ActivityDefinition.publisher"
    paths: "AllergyIntolerance.OnsetX.string"
    paths: "Appointment.comment"
    paths: "AppointmentResponse.comment"
    paths: "AuditEvent.outcomeDesc"
    paths: "AuditEvent.Agent.altId"
    paths: "AuditEvent.Agent.Network.address"
    paths: "AuditEvent.Source.site"
    paths: "CapabilityStatement.title"
    paths: "CapabilityStatement.publisher"
    paths: "CarePlan.title"
    paths: "ChargeItemDefinition.title"
    paths: "ChargeItemDefinition.publisher"
    paths: "Claim.Insurance.businessArrangement"
    paths: "ClaimResponse.Insurance.businessArrangement"
    paths: "CodeSystem.title"
    paths: "CodeSystem.publisher"
    paths: "CompartmentDefinition.publisher"
    paths: "Composition.title"
    paths: "Composition.Section.title"
    paths: "ConceptMap.title"
    paths: "ConceptMap.publisher"
    paths: "Condition.OnsetX.string"
    paths: "Condition.AbatementX.string"
    paths: "Contract.title"
    paths: "Contract.subtitle"
    paths: "Coverage.subscriberId"
    paths: "Coverage.dependent"
    paths: "Coverage.network"
    paths: "Device.distinctIdentifier"
    paths: "Device.serialNumber"
    paths: "Device.UdiCarrier.deviceIdentifier"
    paths: "Device.UdiCarrier.carrierHRF"
    paths: "DeviceDefinition.UdiDeviceIdentifier.deviceIdentifier"
    paths: "EffectEvidenceSynthesis.title"
    paths: "EffectEvidenceSynthesis.publisher"
    paths: "EventDefinition.title"
    paths: "EventDefinition.subtitle"
    paths: "EventDefinition.publisher"
    paths: "Evidence.title"
    paths: "Evidence.shortTitle"
    paths: "Evidence.subtitle"
    paths: "Evidence.publisher"
    paths: "EvidenceVariable.title"
    paths: "EvidenceVariable.shortTitle"
    paths: "EvidenceVariable.subtitle"
    paths: "EvidenceVariable.publisher"
    paths: "ExampleScenario.publisher"
    paths: "ExplanationOfBenefit.preAuthRef"
    paths: "ExplanationOfBenefit.Insurance.preAuthRef"
    paths: "FamilyMemberHistory.BornX.string"
    paths: "FamilyMemberHistory.AgeX.string"
    paths: "FamilyMemberHistory.DeceasedX.string"
    paths: "FamilyMemberHistory.Condition.OnsetX.string"
    paths: "GraphDefinition.publisher"
    paths: "ImagingStudy.Series.Instance.title"
    paths: "Immunization.OccurrenceX.string"
    paths: "ImplementationGuide.title"
    paths: "ImplementationGuide.publisher"
    paths: "ImplementationGuide.Manifest.ManifestPage.title"
    paths: "Library.title"
    paths: "Library.subtitle"
    paths: "Library.publisher"
    paths: "List.title"
    paths: "Location.alias"
    paths: "Measure.title"
    paths: "Measure.subtitle"
    paths: "Measure.publisher"
    paths: "MessageDefinition.title"
    paths: "MessageDefinition.publisher"
    paths: "NamingSystem.publisher"
    paths: "NamingSystem.responsible"
    paths: "OperationDefinition.title"
    paths: "OperationDefinition.publisher"
    paths: "Organization.alias"
    paths: "PlanDefinition.title"
    paths: "PlanDefinition.subtitle"
    paths: "PlanDefinition.publisher"
    paths: "PlanDefinition.Action.title"
    paths: "Procedure.PerformedX.string"
    paths: "Questionnaire.title"
    paths: "Questionnaire.publisher"
    paths: "ResearchDefinition.title"
    paths: "ResearchDefinition.shortTitle"
    paths: "ResearchDefinition.subtitle"
    paths: "ResearchDefinition.publisher"
    paths: "ResearchElementDefinition.title"
    paths: "ResearchElementDefinition.shortTitle"
    paths: "ResearchElementDefinition.subtitle"
    paths: "ResearchElementDefinition.publisher"
    paths: "ResearchStudy.title"
    paths: "RiskEvidenceSynthesis.title"
    paths: "RiskEvidenceSynthesis.publisher"
    paths: "SearchParameter.publisher"
    paths: "StructureDefinition.title"
    paths: "StructureDefinition.publisher"
    paths: "StructureMap.title"
    paths: "StructureMap.publisher"
    paths: "TerminologyCapabilities.title"
    paths: "TerminologyCapabilities.publisher"
    paths: "ValueSet.title"
    paths: "ValueSet.publisher"
    paths: "Address.text"
    paths: "Address.line"
    paths: "Address.city"
    paths: "Address.district"
    paths: "Address.postalCode"
    paths: "Annotation.AuthorX.string"
    paths: "ContactPoint.value"
    paths: "HumanName.text"
    paths: "HumanName.family"
    paths: "HumanName.given"
    paths: "HumanName.prefix"
    paths: "HumanName.suffix"
    paths: "Identifier.value"
    action: TRANSFORM
  }
  field_metadata_list {
    paths: "AdverseEvent.SuspectEntity.Causality.productRelatedness"
    paths: "Appointment.patientInstruction"
    paths: "AuditEvent.Entity.Detail.ValueX.string"
    paths: "CarePlan.Activity.Detail.ScheduledX.string"
    paths: "ChargeItem.overrideReason"
    paths: "Claim.SupportingInformation.ValueX.string"
    paths: "Claim.Insurance.preAuthRef"
    paths: "ClaimResponse.preAuthRef"
    paths: "ClaimResponse.Note.text"
    paths: "ClinicalImpression.summary"
    paths: "ClinicalImpression.Finding.basis"
    paths: "Communication.Payload.ContentX.string"
    paths: "CommunicationRequest.Payload.ContentX.string"
    paths: "CompartmentDefinition.Resource.documentation"
    paths: "Contract.Term.text"
    paths: "Contract.Term.ContractOffer.text"
    paths: "Contract.Term.ContractOffer.Answer.ValueX.string"
    paths: "Contract.Term.ContractAsset.condition"
    paths: "Contract.Term.ContractAsset.text"
    paths: "Contract.Term.ContractAsset.AssetContext.text"
    paths: "Contract.Term.ContractAsset.ValuedItem.payment"
    paths: "Contract.Term.Action.reason"
    paths: "CoverageEligibilityResponse.disposition"
    paths: "CoverageEligibilityResponse.preAuthRef"
    paths: "DetectedIssue.detail"
    paths: "DiagnosticReport.conclusion"
    paths: "DiagnosticReport.Media.comment"
    paths: "ExplanationOfBenefit.SupportingInformation.ValueX.string"
    paths: "ExplanationOfBenefit.Note.text"
    paths: "Goal.statusReason"
    paths: "HealthcareService.comment"
    paths: "HealthcareService.availabilityExceptions"
    paths: "ImplementationGuide.Definition.Page.title"
    paths: "Invoice.cancelledReason"
    paths: "Library.usage"
    paths: "MedicationKnowledge.AdministrationGuidelines.PatientCharacteristics.value"
    paths: "NamingSystem.UniqueId.comment"
    paths: "NutritionOrder.OralDiet.instruction"
    paths: "NutritionOrder.Supplement.instruction"
    paths: "NutritionOrder.EnteralFormula.administrationInstruction"
    paths: "Observation.ValueX.string"
    paths: "Observation.Component.ValueX.string"
    paths: "ObservationDefinition.QualifiedInterval.condition"
    paths: "OperationOutcome.Issue.diagnostics"
    paths: "Parameters.Parameter.ValueX.string"
    paths: "PaymentReconciliation.disposition"
    paths: "PaymentReconciliation.Notes.text"
    paths: "PlanDefinition.usage"
    paths: "PractitionerRole.availabilityExceptions"
    paths: "Questionnaire.Item.text"
    paths: "Questionnaire.Item.AnswerOption.ValueX.string"
    paths: "Questionnaire.Item.Initial.ValueX.string"
    paths: "QuestionnaireResponse.Item.text"
    paths: "QuestionnaireResponse.Item.Answer.ValueX.string"
    paths: "RequestGroup.Action.textEquivalent"
    paths: "ResearchDefinition.comment"
    paths: "ResearchDefinition.usage"
    paths: "ResearchElementDefinition.comment"
    paths: "ResearchElementDefinition.usage"
    paths: "ResearchElementDefinition.Characteristic.studyEffectiveDescription"
    paths: "ResearchElementDefinition.Characteristic.participantEffectiveDescription"
    paths: "ResearchSubject.assignedArm"
    paths: "ResearchSubject.actualArm"
    paths: "RiskAssessment.mitigation"
    paths: "RiskAssessment.Prediction.rationale"
    paths: "Schedule.comment"
    paths: "ServiceRequest.patientInstruction"
    paths: "Slot.comment"
    paths: "SpecimenDefinition.timeAspect"
    paths: "Subscription.reason"
    paths: "Subscription.criteria"
    paths: "Subscription.error"
    paths: "Subscription.Channel.header"
    paths: "Task.Parameter.ValueX.string"
    paths: "Task.Output.ValueX.string"
    paths: "ValueSet.Compose.ConceptSet.ConceptReference.Designation.value"
    paths: "Attachment.title"
    paths: "Reference.display"
    action: INSPECT_AND_TRANSFORM
  }
}
text {
  transformations {
    replace_with_info_type_config {
    }
  }
  transformations {
    info_types: "DATE"
    date_shift_config {
    }
  }
}

Menggunakan jalur untuk melakukan de-identifikasi resource

Contoh berikut menunjukkan cara mengonfigurasi penghapusan identitas resource Pasien dengan kriteria berikut:

Nilai HumanName (DSTU2, STU3, dan R4) untuk resource Pasien memiliki TRANSFORM (suntingan) yang otomatis diterapkan. Untuk sampel pasien, nilai HumanName adalah "family": "Smith" dan "given": [ "Darcy" ].

Tidak ada nilai lain yang diberikan dalam daftar paths di dalam fieldMetadataList, sehingga data yang tersisa tidak berubah.

Contoh berikut menunjukkan cara menghapus identitas nilai HumanName resource Pasien:

curl

curl -X POST \
    -H "Authorization: Bearer $(gcloud auth application-default print-access-token)" \
    -H "Content-Type: application/json; charset=utf-8" \
    --data "{
      'destinationDataset': 'projects/PROJECT_ID/locations/LOCATION/datasets/DESTINATION_DATASET_ID',
      'config': {
        'fhir': {
          'fieldMetadataList': [
            {
              'paths': [
                'Patient.HumanName'
              ],
              'action': 'TRANSFORM'
            }
          ]
        }
      }
    }" "https://healthcare.googleapis.com/v1/projects/PROJECT_ID/locations/LOCATION/datasets/SOURCE_DATASET_ID:deidentify"

Jika permintaan berhasil, server akan menampilkan respons dalam format JSON:

{
  "name": "projects/PROJECT_ID/locations/REGION/datasets/SOURCE_DATASET_ID/operations/OPERATION_ID"
}

Respons berisi nama operasi. Anda dapat menggunakan Metode get operasi untuk melacak status operasi:

curl -X GET \
    -H "Authorization: Bearer $(gcloud auth print-access-token)" \
    -H "Content-Type: application/json; charset=utf-8" \
    "https://healthcare.googleapis.com/v1/projects/PROJECT_ID/locations/REGION/datasets/SOURCE_DATASET_ID/operations/OPERATION_ID"

Jika permintaan berhasil, server akan menampilkan respons dalam format JSON. Setelah proses de-identifikasi selesai, respons akan berisi "done": true.

{
  "name": "projects/PROJECT_ID/locations/REGION/datasets/SOURCE_DATASET_ID/operations/OPERATION_ID",
  "metadata": {
    "@type": "type.googleapis.com/google.cloud.healthcare.v1.OperationMetadata",
    "apiMethodName": "google.cloud.healthcare.v1.dataset.DatasetService.DeidentifyDataset",
    "createTime": "CREATE_TIME",
    "endTime": "END_TIME",
    "logsUrl": "https://console.cloud.google.com/logs/viewer/CLOUD_LOGGING_URL"
  },
  "done": true,
  "response": {
    "@type": "type.googleapis.com/google.cloud.healthcare.v1.deidentify.DeidentifySummary",
    "successStoreCount": "1",
    "successResourceCount": "1"
  }
}

Selanjutnya, menggunakan ID Pasien, Anda bisa mendapatkan detail untuk resource Pasien di set data tujuan baru:

curl -X GET \
     -H "Authorization: Bearer $(gcloud auth print-access-token)" \
     -H "Content-Type: application/fhir+json; charset=utf-8" \
     "https://healthcare.googleapis.com/v1/projects/PROJECT_ID/locations/REGION/datasets/DESTINATION_DATASET_ID/fhirStores/FHIR_STORE_ID/fhir/Patient/r77433dd-dkeuc-633743nfd-383nfdsjds732"

Server menampilkan respons berikut:

{
  "address": [
    {
      "city": "Anycity",
      "district": "Anydistrict",
      "line": [
        "123 Main Street"
      ],
      "period": {
        "start": "1990-12-05"
      },
      "postalCode": "12345",
      "state": "CA",
      "text": "123 Main Street Anycity, Anydistrict, CA 12345",
      "type": "both",
      "use": "home"
    }
  ],
  "birthDate": "1980-12-05",
  "gender": "female",
  "id": "r77433dd-dkeuc-633743nfd-383nfdsjds732",
  "meta": {
    "lastUpdated": "2018-01-01T2018-01-01T00:00:00+00:00",
    "versionId": "MTU0MDU4NTcxNjI2MTUxNDAwMAA"
  },
  "name": [
    {
      "family": "",
      "given": [
        ""
      ],
      "use": "official"
    }
  ],
  "resourceType": "Patient",
  "text": {
    "div": "<div><p><b>Patient</b></p><p><b>Name</b>: Smith, Darcy</p><p><b>DateOfBirth</b>: 1980-12-05</p><p><b>Gender</b>: Female</p></div>",
    "status": "generated"
  }
}

PowerShell

$cred = gcloud auth application-default print-access-token
$headers = @{ Authorization = "Bearer $cred" }

Invoke-WebRequest `
  -Method Post `
  -Headers $headers `
  -ContentType: "application/json; charset=utf-8" `
  -Body "{
    'destinationDataset': 'projects/PROJECT_ID/locations/LOCATION/datasets/DESTINATION_DATASET_ID',
    'config': {
      'fhir': {
        'fieldMetadataList': [
          {
            'paths': [
              'Patient.HumanName'
            ],
            'action': 'TRANSFORM'
          }
        ]
      }
    }
  }" `
  -Uri "https://healthcare.googleapis.com/v1/projects/PROJECT_ID/locations/LOCATION/datasets/SOURCE_DATASET_ID:deidentify" | Select-Object -Expand Content

Jika permintaan berhasil, server akan menampilkan respons dalam format JSON:

{
  "name": "projects/PROJECT_ID/locations/REGION/datasets/SOURCE_DATASET_ID/operations/OPERATION_ID"
}

Respons berisi nama operasi. Anda dapat menggunakan Metode get operasi untuk melacak status operasi:

$cred = gcloud auth print-access-token
$headers = @{ Authorization = "Bearer $cred" }

Invoke-WebRequest `
  -Method Get `
  -Headers $headers `
  -ContentType: "application/json; charset=utf-8" `
  -Uri "https://healthcare.googleapis.com/v1/projects/PROJECT_ID/locations/REGION/datasets/SOURCE_DATASET_ID/operations/OPERATION_ID" | Select-Object -Expand Content

Jika permintaan berhasil, server akan menampilkan respons dalam format JSON. Setelah proses de-identifikasi selesai, respons akan berisi "done": true.

{
  "name": "projects/PROJECT_ID/locations/REGION/datasets/SOURCE_DATASET_ID/operations/OPERATION_NUMBER",
  "metadata": {
    "@type": "type.googleapis.com/google.cloud.healthcare.v1.OperationMetadata",
    "apiMethodName": "google.cloud.healthcare.v1.dataset.DatasetService.DeidentifyDataset",
    "createTime": "CREATE_TIME",
    "endTime": "END_TIME",
    "logsUrl": "https://console.cloud.google.com/logs/viewer/CLOUD_LOGGING_URL"
  },
  "done": true,
  "response": {
    "@type": "type.googleapis.com/google.cloud.healthcare.v1.deidentify.DeidentifySummary",
    "successStoreCount": "1",
    "successResourceCount": "1"
  }
}

Selanjutnya, menggunakan ID Pasien, Anda bisa mendapatkan detail untuk resource Pasien di set data tujuan baru:

$cred = gcloud auth print-access-token
$headers = @{ Authorization = "Bearer $cred" }

Invoke-RestMethod `
  -Method Get `
  -Headers $headers `
  -ContentType: "application/fhir+json; charset=utf-8" `
  -Uri "https://healthcare.googleapis.com/v1/projects/PROJECT_ID/locations/REGION/datasets/DESTINATION_DATASET_ID/fhirStores/FHIR_STORE_ID/fhir/Patient/r77433dd-dkeuc-633743nfd-383nfdsjds732" | ConvertTo-Json

Server menampilkan respons berikut:

{
  "address": [
    {
      "city": "Anycity",
      "district": "Anydistrict",
      "line": [
        "123 Main Street"
      ],
      "period": {
        "start": "1990-12-05"
      },
      "postalCode": "12345",
      "state": "CA",
      "text": "123 Main Street Anycity, Anydistrict, CA 12345",
      "type": "both",
      "use": "home"
    }
  ],
  "birthDate": "1980-12-05",
  "gender": "female",
  "id": "r77433dd-dkeuc-633743nfd-383nfdsjds732",
  "meta": {
    "lastUpdated": "2018-01-01T2018-01-01T00:00:00+00:00",
    "versionId": "MTU0MDU4NTcxNjI2MTUxNDAwMAA"
  },
  "name": [
    {
      "family": "",
      "given": [
        ""
      ],
      "use": "official"
    }
  ],
  "resourceType": "Patient",
  "text": {
    "div": "<div><p><b>Patient</b></p><p><b>Name</b>: Smith, Darcy</p><p><b>DateOfBirth</b>: 1980-12-05</p><p><b>Gender</b>: Female</p></div>",
    "status": "generated"
  }
}

Anda dapat melihat bahwa nilai berikut telah diubah untuk menghapus identitas resource:

Nilai di name.family telah disamarkan.
Nilai di name.given telah disamarkan.

Namun, tidak seperti sampel dalam de-identifikasi FHIR default, yang mengubah PHI umum, address pasien, birthDate, dan teks bebas di text.div tidak diubah karena tidak ditambahkan ke daftar paths di fieldMetadataList.

Menggunakan infoTypes dan transformasi primitif dengan resource FHIR

Cloud Healthcare API dapat menggunakan jenis informasi (infoTypes) untuk menentukan data yang dipindai saat melakukan de-identifikasi pada resource FHIR. infoType adalah jenis data sensitif, seperti nama pasien, alamat email, nomor telepon, nomor identifikasi, atau nomor kartu kredit. infoTypes yang digunakan dalam operasi de-identifikasi Cloud Healthcare API mencakup infoTypes yang ditemukan di Cloud Data Loss Prevention.

Transformasi dasar adalah aturan yang digunakan untuk mengubah nilai input.

infoTypes FHIR default

infoTypes default yang digunakan saat melakukan de-identifikasi data FHIR adalah:

AGE
CREDIT_CARD_NUMBER
DATE
EMAIL_ADDRESS
IP_ADDRESS
LOCATION
MAC_ADDRESS
PASSPORT
PERSON_NAME
PHONE_NUMBER
SWIFT_CODE
US_DRIVERS_LICENSE_NUMBER
US_SOCIAL_SECURITY_NUMBER
US_VEHICLE_IDENTIFICATION_NUMBER
US_INDIVIDUAL_TAXPAYER_IDENTIFICATION_NUMBER

Opsi transformasi primitif

Opsi transformasi primitif Cloud Healthcare API meliputi:

RedactConfig: Menyamarkan nilai dengan menghapusnya.
CharacterMaskConfig: Menyamarkan string sepenuhnya atau sebagian dengan mengganti karakter input dengan karakter tetap yang ditentukan.
DateShiftConfig: Menggeser tanggal dengan jumlah hari acak, dengan opsi untuk konsisten untuk konteks yang sama.
CryptoHashConfig: Menggunakan SHA-256 untuk mengganti nilai input dengan representasi yang dienkode base64 dari string output yang di-hash yang dihasilkan menggunakan kunci enkripsi data tertentu.
ReplaceWithInfoTypeConfig: Mengganti nilai input dengan nama infoType-nya.

Menentukan konfigurasi di `TextConfig`

InfoType dan transformasi dasar ditentukan dalam InfoTypeTransformation, yang merupakan objek di dalam TextConfig. Tentukan infoTypes dalam array infoTypes sebagai nilai yang dipisahkan koma.

Penentuan infoType bersifat opsional. Jika Anda tidak menentukan setidaknya satu infoType, transformasi akan berlaku untuk semua infoType bawaan dalam data.

Jika Anda menentukan infoTypes di InfoTypeTransformation, tentukan setidaknya satu transformasi primitif.

Bagian berikut menunjukkan cara menggunakan transformasi primitif yang tersedia di InfoTypeTransformation beserta infoTypes untuk menyesuaikan cara resource FHIR di-de-identifikasi.

`RedactConfig`

Menentukan redactConfig akan menyamarkan nilai tertentu dengan menghapusnya sepenuhnya. Pesan redactConfig tidak memiliki argumen; menentukannya akan mengaktifkan transformasi.

Contoh berikut menunjukkan cara menyamarkan tanggal lahir resource Pasien di kolom Patient.text.div. Tugas ini dilakukan dengan menetapkan infoType DATE dengan jalur Patient.text.div dan transformasi redactConfig.

Setelah mengirim permintaan de-identifikasi ke Cloud Healthcare API, tanggal lahir dalam nilai Patient.text.div akan disamarkan.

curl

curl -X POST \
    -H "Authorization: Bearer $(gcloud auth application-default print-access-token)" \
    -H "Content-Type: application/json; charset=utf-8" \
    --data "{
      'destinationDataset': 'projects/PROJECT_ID/locations/LOCATION/datasets/DESTINATION_DATASET_ID',
      'config': {
        'fhir': {
          'fieldMetadataList': {
            'paths': [
              'Patient.text.div'
            ],
            'action': 'INSPECT_AND_TRANSFORM'
          }
        },
        'text': {
          'transformations': [
            {
              'infoTypes': [
                'DATE'
              ],
              'redactConfig': {}
            }
          ]
        }
      }
    }" "https://healthcare.googleapis.com/v1/projects/PROJECT_ID/locations/LOCATION/datasets/SOURCE_DATASET_ID:deidentify"

Jika permintaan berhasil, server akan menampilkan respons dalam format JSON:

{
  "name": "projects/PROJECT_ID/locations/REGION/datasets/SOURCE_DATASET_ID/operations/OPERATION_ID"
}

Respons berisi nama operasi. Anda dapat menggunakan Metode get operasi untuk melacak status operasi:

curl -X GET \
    -H "Authorization: Bearer $(gcloud auth print-access-token)" \
    -H "Content-Type: application/json; charset=utf-8" \
    "https://healthcare.googleapis.com/v1/projects/PROJECT_ID/locations/REGION/datasets/SOURCE_DATASET_ID/operations/OPERATION_ID"

Jika permintaan berhasil, server akan menampilkan respons dalam format JSON. Setelah proses de-identifikasi selesai, respons akan berisi "done": true.

{
  "name": "projects/PROJECT_ID/locations/REGION/datasets/SOURCE_DATASET_ID/operations/OPERATION_ID",
  "metadata": {
    "@type": "type.googleapis.com/google.cloud.healthcare.v1.OperationMetadata",
    "apiMethodName": "google.cloud.healthcare.v1.dataset.DatasetService.DeidentifyDataset",
    "createTime": "CREATE_TIME",
    "endTime": "END_TIME",
    "logsUrl": "https://console.cloud.google.com/logs/viewer/CLOUD_LOGGING_URL"
  },
  "done": true,
  "response": {
    "@type": "type.googleapis.com/google.cloud.healthcare.v1.deidentify.DeidentifySummary",
    "successStoreCount": "1",
    "successResourceCount": "1"
  }
}

Selanjutnya, menggunakan ID Pasien, Anda bisa mendapatkan detail untuk resource Pasien di set data tujuan baru:

curl -X GET \
     -H "Authorization: Bearer $(gcloud auth print-access-token)" \
     -H "Content-Type: application/fhir+json; charset=utf-8" \
     "https://healthcare.googleapis.com/v1/projects/PROJECT_ID/locations/REGION/datasets/DESTINATION_DATASET_ID/fhirStores/FHIR_STORE_ID/fhir/Patient/r77433dd-dkeuc-633743nfd-383nfdsjds732"

Server menampilkan respons berikut:

{
  "address": [
    {
      "city": "Anycity",
      "district": "Anydistrict",
      "line": [
        "123 Main Street"
      ],
      "period": {
        "start": "1990-12-05"
      },
      "postalCode": "12345",
      "state": "CA",
      "text": "123 Main Street Anycity, Anydistrict, CA 12345",
      "type": "both",
      "use": "home"
    }
  ],
  "birthDate": "1980-12-05",
  "gender": "female",
  "id": "r77433dd-dkeuc-633743nfd-383nfdsjds732",
  "meta": {
    "lastUpdated": "2018-01-01T2018-01-01T00:00:00+00:00",
    "versionId": "MTU0MDU4NTcxNjI2MTUxNDAwMAA"
  },
  "name": [
    {
      "family": "Smith",
      "given": [
        "Darcy"
      ],
      "use": "official"
    }
  ],
  "resourceType": "Patient",
  "text": {
    "div": "<div><p><b>Patient</b></p><p><b>Name</b>: Smith, Darcy</p><p><b>DateOfBirth</b>: </p><p><b>Gender</b>: Female</p></div>",
    "status": "generated"
  }
}

PowerShell

$cred = gcloud auth application-default print-access-token
$headers = @{ Authorization = "Bearer $cred" }

Invoke-WebRequest `
  -Method Post `
  -Headers $headers `
  -ContentType: "application/json; charset=utf-8" `
  -Body "{
    'destinationDataset': 'projects/PROJECT_ID/locations/LOCATION/datasets/DESTINATION_DATASET_ID',
    'config': {
      'fhir': {
        'fieldMetadataList': {
          'paths': [
            'Patient.text.div'
          ],
          'action': 'INSPECT_AND_TRANSFORM'
        }
      },
      'text': {
        'transformations': [
          {
            'infoTypes': [
              'DATE'
            ],
            'redactConfig': {}
          }
        ]
      }
    }
  }" `
  -Uri "https://healthcare.googleapis.com/v1/projects/PROJECT_ID/locations/LOCATION/datasets/SOURCE_DATASET_ID:deidentify" | Select-Object -Expand Content

Jika permintaan berhasil, server akan menampilkan respons dalam format JSON:

{
  "name": "projects/PROJECT_ID/locations/REGION/datasets/SOURCE_DATASET_ID/operations/OPERATION_ID"
}

Respons berisi nama operasi. Anda dapat menggunakan Metode get operasi untuk melacak status operasi:

$cred = gcloud auth print-access-token
$headers = @{ Authorization = "Bearer $cred" }

Invoke-WebRequest `
  -Method Get `
  -Headers $headers `
  -ContentType: "application/json; charset=utf-8" `
  -Uri "https://healthcare.googleapis.com/v1/projects/PROJECT_ID/locations/REGION/datasets/SOURCE_DATASET_ID/operations/OPERATION_ID" | Select-Object -Expand Content

Jika permintaan berhasil, server akan menampilkan respons dalam format JSON. Setelah proses de-identifikasi selesai, respons akan berisi "done": true.

{
  "name": "projects/PROJECT_ID/locations/REGION/datasets/SOURCE_DATASET_ID/operations/OPERATION_NUMBER",
  "metadata": {
    "@type": "type.googleapis.com/google.cloud.healthcare.v1.OperationMetadata",
    "apiMethodName": "google.cloud.healthcare.v1.dataset.DatasetService.DeidentifyDataset",
    "createTime": "CREATE_TIME",
    "endTime": "END_TIME",
    "logsUrl": "https://console.cloud.google.com/logs/viewer/CLOUD_LOGGING_URL"
  },
  "done": true,
  "response": {
    "@type": "type.googleapis.com/google.cloud.healthcare.v1.deidentify.DeidentifySummary",
    "successStoreCount": "1",
    "successResourceCount": "1"
  }
}

Selanjutnya, menggunakan ID Pasien, Anda bisa mendapatkan detail untuk resource Pasien di set data tujuan baru:

$cred = gcloud auth print-access-token
$headers = @{ Authorization = "Bearer $cred" }

Invoke-RestMethod `
  -Method Get `
  -Headers $headers `
  -ContentType: "application/fhir+json; charset=utf-8" `
  -Uri "https://healthcare.googleapis.com/v1/projects/PROJECT_ID/locations/REGION/datasets/DESTINATION_DATASET_ID/fhirStores/FHIR_STORE_ID/fhir/Patient/r77433dd-dkeuc-633743nfd-383nfdsjds732" | ConvertTo-Json

Server menampilkan respons berikut:

{
  "address": [
    {
      "city": "Anycity",
      "district": "Anydistrict",
      "line": [
        "123 Main Street"
      ],
      "period": {
        "start": "1990-12-05"
      },
      "postalCode": "12345",
      "state": "CA",
      "text": "123 Main Street Anycity, Anydistrict, CA 12345",
      "type": "both",
      "use": "home"
    }
  ],
  "birthDate": "1980-12-05",
  "gender": "female",
  "id": "r77433dd-dkeuc-633743nfd-383nfdsjds732",
  "meta": {
    "lastUpdated": "2018-01-01T2018-01-01T00:00:00+00:00",
    "versionId": "MTU0MDU4NTcxNjI2MTUxNDAwMAA"
  },
  "name": [
    {
      "family": "Smith",
      "given": [
        "Darcy"
      ],
      "use": "official"
    }
  ],
  "resourceType": "Patient",
  "text": {
    "div": "<div><p><b>Patient</b></p><p><b>Name</b>: Smith, Darcy</p><p><b>DateOfBirth</b>: </p><p><b>Gender</b>: Female</p></div>",
    "status": "generated"
  }
}

Output menunjukkan bahwa nilai DateOfBirth di text.div telah dihapus. Hal ini berbeda dengan contoh di Menghapus identifikasi jalur FHIR tertentu saat nilai DateOfBirth di text.div tidak dihapus menggunakan konfigurasi default.

`CharacterMaskConfig`

Menentukan characterMaskConfig akan mengganti string yang sesuai dengan infoTypes yang diberikan dengan karakter tetap yang ditentukan. Misalnya, bukan menyamarkan nama pasien atau mengubahnya menggunakan hash kriptografis, Anda dapat mengganti nama dengan serangkaian tanda bintang (*). Tentukan karakter tetap sebagai nilai ke kolom maskingCharacter.

Contoh berikut menunjukkan cara memperluas contoh yang digunakan dalam Menghapus identifikasi jalur FHIR tertentu, tetapi sekarang contoh tersebut menyertakan penetapan infoType PERSON_NAME dengan transformasi characterMaskConfig. Tidak ada karakter tetap yang disediakan, sehingga masking secara default menggunakan tanda bintang. Setelah mengirim permintaan de-identifikasi ke Cloud Healthcare API, nilai di name.family dan name.given akan diganti dengan tanda bintang.

curl

curl -X POST \
    -H "Authorization: Bearer $(gcloud auth application-default print-access-token)" \
    -H "Content-Type: application/json; charset=utf-8" \
    --data "{
      'destinationDataset': 'projects/PROJECT_ID/locations/LOCATION/datasets/DESTINATION_DATASET_ID',
      'config': {
        'fhir': {
          'fieldMetadataList': {
            'paths': [
              'Patient.HumanName'
            ],
            'action': 'TRANSFORM'
          }
        },
        'text': {
          'transformations': [
            {
              'infoTypes': [
                'PERSON_NAME'
              ],
              'characterMaskConfig': {
                'maskingCharacter': ''
              }
            }
          ]
        }
      }
    }" "https://healthcare.googleapis.com/v1/projects/PROJECT_ID/locations/LOCATION/datasets/SOURCE_DATASET_ID:deidentify"

Jika permintaan berhasil, server akan menampilkan respons dalam format JSON:

{
  "name": "projects/PROJECT_ID/locations/REGION/datasets/SOURCE_DATASET_ID/operations/OPERATION_ID"
}

Respons berisi nama operasi. Anda dapat menggunakan Metode get operasi untuk melacak status operasi:

curl -X GET \
    -H "Authorization: Bearer $(gcloud auth print-access-token)" \
    -H "Content-Type: application/json; charset=utf-8" \
    "https://healthcare.googleapis.com/v1/projects/PROJECT_ID/locations/REGION/datasets/SOURCE_DATASET_ID/operations/OPERATION_ID"

Jika permintaan berhasil, server akan menampilkan respons dalam format JSON. Setelah proses de-identifikasi selesai, respons akan berisi "done": true.

{
  "name": "projects/PROJECT_ID/locations/REGION/datasets/SOURCE_DATASET_ID/operations/OPERATION_ID",
  "metadata": {
    "@type": "type.googleapis.com/google.cloud.healthcare.v1.OperationMetadata",
    "apiMethodName": "google.cloud.healthcare.v1.dataset.DatasetService.DeidentifyDataset",
    "createTime": "CREATE_TIME",
    "endTime": "END_TIME",
    "logsUrl": "https://console.cloud.google.com/logs/viewer/CLOUD_LOGGING_URL"
  },
  "done": true,
  "response": {
    "@type": "type.googleapis.com/google.cloud.healthcare.v1.deidentify.DeidentifySummary",
    "successStoreCount": "1",
    "successResourceCount": "1"
  }
}

Selanjutnya, menggunakan ID Pasien, Anda bisa mendapatkan detail untuk resource Pasien di set data tujuan baru:

curl -X GET \
     -H "Authorization: Bearer $(gcloud auth print-access-token)" \
     -H "Content-Type: application/fhir+json; charset=utf-8" \
     "https://healthcare.googleapis.com/v1/projects/PROJECT_ID/locations/REGION/datasets/DESTINATION_DATASET_ID/fhirStores/FHIR_STORE_ID/fhir/Patient/r77433dd-dkeuc-633743nfd-383nfdsjds732"

Server menampilkan respons berikut:

{
  "address": [
    {
      "city": "Anycity",
      "district": "Anydistrict",
      "line": [
        "123 Main Street"
      ],
      "period": {
        "start": "1990-12-05"
      },
      "postalCode": "12345",
      "state": "CA",
      "text": "123 Main Street Anycity, Anydistrict, CA 12345",
      "type": "both",
      "use": "home"
    }
  ],
  "birthDate": "1980-12-05",
  "gender": "female",
  "id": "r77433dd-dkeuc-633743nfd-383nfdsjds732",
  "meta": {
    "lastUpdated": "2018-01-01T2018-01-01T00:00:00+00:00",
    "versionId": "MTU0MDU4NTcxNjI2MTUxNDAwMAA"
  },
  "name": [
    {
      "family": "*****",
      "given": [
        "*****"
      ],
      "use": "official"
    }
  ],
  "resourceType": "Patient",
  "text": {
    "div": "<div><p><b>Patient</b></p><p><b>Name</b>: Smith, Darcy</p><p><b>DateOfBirth</b>: 1980-12-05</p><p><b>Gender</b>: Female</p></div>",
    "status": "generated"
  }
}

PowerShell

$cred = gcloud auth application-default print-access-token
$headers = @{ Authorization = "Bearer $cred" }

Invoke-WebRequest `
  -Method Post `
  -Headers $headers `
  -ContentType: "application/json; charset=utf-8" `
  -Body "{
    'destinationDataset': 'projects/PROJECT_ID/locations/LOCATION/datasets/DESTINATION_DATASET_ID',
    'config': {
      'fhir': {
        'fieldMetadataList': {
          'paths': [
            'Patient.HumanName'
          ],
          'action': 'TRANSFORM'
        }
      },
      'text': {
        'transformations': [
          {
            'infoTypes': [
              'PERSON_NAME'
            ],
            'characterMaskConfig': {
              'maskingCharacter': ''
            }
          }
        ]
      }
    }
  }" `
  -Uri "https://healthcare.googleapis.com/v1/projects/PROJECT_ID/locations/LOCATION/datasets/SOURCE_DATASET_ID:deidentify" | Select-Object -Expand Content

Jika permintaan berhasil, server akan menampilkan respons dalam format JSON:

{
  "name": "projects/PROJECT_ID/locations/REGION/datasets/SOURCE_DATASET_ID/operations/OPERATION_ID"
}

Respons berisi nama operasi. Anda dapat menggunakan Metode get operasi untuk melacak status operasi:

$cred = gcloud auth print-access-token
$headers = @{ Authorization = "Bearer $cred" }

Invoke-WebRequest `
  -Method Get `
  -Headers $headers `
  -ContentType: "application/json; charset=utf-8" `
  -Uri "https://healthcare.googleapis.com/v1/projects/PROJECT_ID/locations/REGION/datasets/SOURCE_DATASET_ID/operations/OPERATION_ID" | Select-Object -Expand Content

Jika permintaan berhasil, server akan menampilkan respons dalam format JSON. Setelah proses de-identifikasi selesai, respons akan berisi "done": true.

{
  "name": "projects/PROJECT_ID/locations/REGION/datasets/SOURCE_DATASET_ID/operations/OPERATION_NUMBER",
  "metadata": {
    "@type": "type.googleapis.com/google.cloud.healthcare.v1.OperationMetadata",
    "apiMethodName": "google.cloud.healthcare.v1.dataset.DatasetService.DeidentifyDataset",
    "createTime": "CREATE_TIME",
    "endTime": "END_TIME",
    "logsUrl": "https://console.cloud.google.com/logs/viewer/CLOUD_LOGGING_URL"
  },
  "done": true,
  "response": {
    "@type": "type.googleapis.com/google.cloud.healthcare.v1.deidentify.DeidentifySummary",
    "successStoreCount": "1",
    "successResourceCount": "1"
  }
}

Selanjutnya, menggunakan ID Pasien, Anda bisa mendapatkan detail untuk resource Pasien di set data tujuan baru:

$cred = gcloud auth print-access-token
$headers = @{ Authorization = "Bearer $cred" }

Invoke-RestMethod `
  -Method Get `
  -Headers $headers `
  -ContentType: "application/fhir+json; charset=utf-8" `
  -Uri "https://healthcare.googleapis.com/v1/projects/PROJECT_ID/locations/REGION/datasets/DESTINATION_DATASET_ID/fhirStores/FHIR_STORE_ID/fhir/Patient/r77433dd-dkeuc-633743nfd-383nfdsjds732" | ConvertTo-Json

Server menampilkan respons berikut:

{
  "address": [
    {
      "city": "Anycity",
      "district": "Anydistrict",
      "line": [
        "123 Main Street"
      ],
      "period": {
        "start": "1990-12-05"
      },
      "postalCode": "12345",
      "state": "CA",
      "text": "123 Main Street Anycity, Anydistrict, CA 12345",
      "type": "both",
      "use": "home"
    }
  ],
  "birthDate": "1980-12-05",
  "gender": "female",
  "id": "r77433dd-dkeuc-633743nfd-383nfdsjds732",
  "meta": {
    "lastUpdated": "2018-01-01T2018-01-01T00:00:00+00:00",
    "versionId": "MTU0MDU4NTcxNjI2MTUxNDAwMAA"
  },
  "name": [
    {
      "family": "*****",
      "given": [
        "*****"
      ],
      "use": "official"
    }
  ],
  "resourceType": "Patient",
  "text": {
    "div": "<div><p><b>Patient</b></p><p><b>Name</b>: Smith, Darcy</p><p><b>DateOfBirth</b>: 1980-12-05</p><p><b>Gender</b>: Female</p></div>",
    "status": "generated"
  }
}

Output menunjukkan bahwa nilai di name.family dan name.given telah diganti dengan tanda bintang. Hal ini berbeda dengan contoh di Menghapus identifikasi jalur FHIR tertentu tempat nilai di name.family dan name.given disamarkan.

`DateShiftConfig`

Cloud Healthcare API dapat mengubah tanggal dengan menggesernya dalam rentang preset. Agar transformasi tanggal tetap konsisten di seluruh proses de-identifikasi, gunakan DateShiftConfig dengan salah satu dari hal berikut:

(Tidak digunakan lagi): Kunci AES 128/192/256-bit mentah yang dienkode base 64.
(Direkomendasikan): Kunci yang digabungkan Cloud Key Management Service (Cloud KMS). Lihat Melakukan de-identifikasi dan identifikasi ulang teks sensitif untuk mengetahui contoh cara menggunakan kunci gabungan Cloud KMS.

Anda harus memberikan peran dengan izin cloudkms.cryptoKeyVersions.useToDecrypt ke akun layanan Agen Layanan Cloud Healthcare untuk mendekripsi kunci yang digabungkan Cloud KMS. Sebaiknya gunakan peran Cloud KMS CryptoKey Decrypter (roles/cloudkms.cryptoKeyDecrypter). Jika Anda menggunakan Cloud KMS untuk operasi kriptografis, biaya akan berlaku. Lihat Harga Cloud Key Management Service untuk mengetahui informasi selengkapnya.

Cloud Healthcare API menggunakan kunci ini untuk menghitung jumlah tanggal, seperti tanggal lahir pasien, yang digeser dalam diferensial 100 hari.

Jika Anda tidak memberikan kunci, Cloud Healthcare API akan membuat kuncinya sendiri setiap kali operasi de-identifikasi berjalan pada nilai tanggal. Hal ini dapat menyebabkan output tanggal antar-operasi berjalan tidak konsisten.

Contoh berikut menunjukkan cara menetapkan infoType DATE dengan transformasi DateShiftConfig di jalur Patient.birthDate dan Patient.text.div. Setelah mengirimkan permintaan de-identifikasi ke Cloud Healthcare API, nilai birthDate dan tanggal lahir di Patient.text.div akan bergeser dalam plus atau minus 100 hari dari tanggal lahir asli, 1980-12-05.

Kunci kripto yang diberikan dalam contoh, U2FsdGVkX19bS2oZsdbK9X5zi2utBn22uY+I2Vo0zOU=, adalah kunci mentah berenkode base64 yang dienkripsi AES 256-bit yang dibuat menggunakan perintah berikut. Saat diminta, berikan sandi pilihan Anda ke perintah:

echo -n "test" | openssl enc -e -aes-256-ofb -a -salt

curl

curl -X POST \
    -H "Authorization: Bearer $(gcloud auth application-default print-access-token)" \
    -H "Content-Type: application/json; charset=utf-8" \
    --data "{
      'destinationDataset': 'projects/PROJECT_ID/locations/LOCATION/datasets/DESTINATION_DATASET_ID',
      'config': {
        'fhir': {
          'fieldMetadataList': {
            'paths': [
              'Patient.birthDate',
              'Patient.text.div'
            ],
            'action': 'INSPECT_AND_TRANSFORM'
          }
        },
        'text': {
          'transformations': {
            'infoTypes': [
              'DATE'
            ],
            'dateShiftConfig': {
              'cryptoKey': 'U2FsdGVkX19bS2oZsdbK9X5zi2utBn22uY+I2Vo0zOU='
            }
          }
        }
      }
    }" "https://healthcare.googleapis.com/v1/projects/PROJECT_ID/locations/LOCATION/datasets/SOURCE_DATASET_ID:deidentify"

Jika permintaan berhasil, server akan menampilkan respons dalam format JSON:

{
  "name": "projects/PROJECT_ID/locations/REGION/datasets/SOURCE_DATASET_ID/operations/OPERATION_ID"
}

Respons berisi nama operasi. Anda dapat menggunakan Metode get operasi untuk melacak status operasi:

curl -X GET \
    -H "Authorization: Bearer $(gcloud auth print-access-token)" \
    -H "Content-Type: application/json; charset=utf-8" \
    "https://healthcare.googleapis.com/v1/projects/PROJECT_ID/locations/REGION/datasets/SOURCE_DATASET_ID/operations/OPERATION_ID"

Jika permintaan berhasil, server akan menampilkan respons dalam format JSON. Setelah proses de-identifikasi selesai, respons akan berisi "done": true.

{
  "name": "projects/PROJECT_ID/locations/REGION/datasets/SOURCE_DATASET_ID/operations/OPERATION_ID",
  "metadata": {
    "@type": "type.googleapis.com/google.cloud.healthcare.v1.OperationMetadata",
    "apiMethodName": "google.cloud.healthcare.v1.dataset.DatasetService.DeidentifyDataset",
    "createTime": "CREATE_TIME",
    "endTime": "END_TIME",
    "logsUrl": "https://console.cloud.google.com/logs/viewer/CLOUD_LOGGING_URL"
  },
  "done": true,
  "response": {
    "@type": "type.googleapis.com/google.cloud.healthcare.v1.deidentify.DeidentifySummary",
    "successStoreCount": "1",
    "successResourceCount": "1"
  }
}

Selanjutnya, menggunakan ID Pasien, Anda bisa mendapatkan detail untuk resource Pasien di set data tujuan baru:

curl -X GET \
     -H "Authorization: Bearer $(gcloud auth print-access-token)" \
     -H "Content-Type: application/fhir+json; charset=utf-8" \
     "https://healthcare.googleapis.com/v1/projects/PROJECT_ID/locations/REGION/datasets/DESTINATION_DATASET_ID/fhirStores/FHIR_STORE_ID/fhir/Patient/r77433dd-dkeuc-633743nfd-383nfdsjds732"

Server menampilkan respons berikut:

{
  "address": [
    {
      "city": "Anycity",
      "district": "Anydistrict",
      "line": [
        "123 Main Street"
      ],
      "period": {
        "start": "1990-12-05"
      },
      "postalCode": "12345",
      "state": "",
      "text": "123 Main Street Anycity, Anydistrict, CA 12345",
      "type": "both",
      "use": "home"
    }
  ],
  "birthDate": "1981-02-19",
  "gender": "female",
  "id": "r77433dd-dkeuc-633743nfd-383nfdsjds732",
  "meta": {
    "lastUpdated": "2018-01-01T2018-01-01T00:00:00+00:00",
    "versionId": "MTU0MDU4NTcxNjI2MTUxNDAwMAA"
  },
  "name": [
    {
      "family": "Smith",
      "given": [
        "Darcy"
      ],
      "use": "official"
    }
  ],
  "resourceType": "Patient",
  "text": {
    "div": "<div><p><b>Patient</b></p><p><b>Name</b>: Smith, Darcy</p><p><b>DateOfBirth</b>: 1981-02-19</p><p><b>Gender</b>: Female</p></div>",
    "status": "generated"
  }
}

PowerShell

$cred = gcloud auth application-default print-access-token
$headers = @{ Authorization = "Bearer $cred" }

Invoke-WebRequest `
  -Method Post `
  -Headers $headers `
  -ContentType: "application/json; charset=utf-8" `
  -Body "{
    'destinationDataset': 'projects/PROJECT_ID/locations/LOCATION/datasets/DESTINATION_DATASET_ID',
    'config': {
      'fhir': {
        'fieldMetadataList': {
          'paths': [
            'Patient.HumanName',
            'Patient.text.div'
          ],
          'action': 'INSPECT_AND_TRANSFORM'
        }
      },
      'text': {
        'transformations': {
          'infoTypes': [
            'DATE'
          ],
          'dateShiftConfig': {
            'cryptoKey': 'U2FsdGVkX19bS2oZsdbK9X5zi2utBn22uY+I2Vo0zOU='
          }
        }
      }
    }
  }" `
  -Uri "https://healthcare.googleapis.com/v1/projects/PROJECT_ID/locations/LOCATION/datasets/SOURCE_DATASET_ID:deidentify" | Select-Object -Expand Content

Jika permintaan berhasil, server akan menampilkan respons dalam format JSON:

{
  "name": "projects/PROJECT_ID/locations/REGION/datasets/SOURCE_DATASET_ID/operations/OPERATION_ID"
}

Respons berisi nama operasi. Anda dapat menggunakan Metode get operasi untuk melacak status operasi:

$cred = gcloud auth print-access-token
$headers = @{ Authorization = "Bearer $cred" }

Invoke-WebRequest `
  -Method Get `
  -Headers $headers `
  -ContentType: "application/json; charset=utf-8" `
  -Uri "https://healthcare.googleapis.com/v1/projects/PROJECT_ID/locations/REGION/datasets/SOURCE_DATASET_ID/operations/OPERATION_ID" | Select-Object -Expand Content

Jika permintaan berhasil, server akan menampilkan respons dalam format JSON. Setelah proses de-identifikasi selesai, respons akan berisi "done": true.

{
  "name": "projects/PROJECT_ID/locations/REGION/datasets/SOURCE_DATASET_ID/operations/OPERATION_NUMBER",
  "metadata": {
    "@type": "type.googleapis.com/google.cloud.healthcare.v1.OperationMetadata",
    "apiMethodName": "google.cloud.healthcare.v1.dataset.DatasetService.DeidentifyDataset",
    "createTime": "CREATE_TIME",
    "endTime": "END_TIME",
    "logsUrl": "https://console.cloud.google.com/logs/viewer/CLOUD_LOGGING_URL"
  },
  "done": true,
  "response": {
    "@type": "type.googleapis.com/google.cloud.healthcare.v1.deidentify.DeidentifySummary",
    "successStoreCount": "1",
    "successResourceCount": "1"
  }
}

Selanjutnya, menggunakan ID Pasien, Anda bisa mendapatkan detail untuk resource Pasien di set data tujuan baru:

$cred = gcloud auth print-access-token
$headers = @{ Authorization = "Bearer $cred" }

Invoke-RestMethod `
  -Method Get `
  -Headers $headers `
  -ContentType: "application/fhir+json; charset=utf-8" `
  -Uri "https://healthcare.googleapis.com/v1/projects/PROJECT_ID/locations/REGION/datasets/DESTINATION_DATASET_ID/fhirStores/FHIR_STORE_ID/fhir/Patient/r77433dd-dkeuc-633743nfd-383nfdsjds732" | ConvertTo-Json

Server menampilkan respons berikut:

{
  "address": [
    {
      "city": "Anycity",
      "district": "Anydistrict",
      "line": [
        "123 Main Street"
      ],
      "period": {
        "start": "1990-12-05"
      },
      "postalCode": "12345",
      "state": "",
      "text": "123 Main Street Anycity, Anydistrict, CA 12345",
      "type": "both",
      "use": "home"
    }
  ],
  "birthDate": "1981-02-19",
  "gender": "female",
  "id": "r77433dd-dkeuc-633743nfd-383nfdsjds732",
  "meta": {
    "lastUpdated": "2018-01-01T2018-01-01T00:00:00+00:00",
    "versionId": "MTU0MDU4NTcxNjI2MTUxNDAwMAA"
  },
  "name": [
    {
      "family": "Smith",
      "given": [
        "Darcy"
      ],
      "use": "official"
    }
  ],
  "resourceType": "Patient",
  "text": {
    "div": "<div><p><b>Patient</b></p><p><b>Name</b>: Smith, Darcy</p><p><b>DateOfBirth</b>: 1981-02-19</p><p><b>Gender</b>: Female</p></div>",
    "status": "generated"
  }
}

Output menunjukkan bahwa nilai di birthDate dan tanggal lahir di Patient.text.div telah diubah menjadi nilai baru 1981-02-19. Transformasi ini terjadi sebagai hasil dari penggabungan diferensial 100 hari dengan ID Pasien dan nilai cryptoKey yang diberikan. Nilai baru untuk birthDate dan tanggal lahir di Patient.text.div konsisten untuk Pasien ini di antara proses penghapusan identitas selama cryptoKey yang sama diberikan.

`CryptoHashConfig`

Cloud Healthcare API dapat mengubah data dengan mengganti nilai dengan hash kriptografis (juga disebut nilai pengganti). Untuk melakukannya, tentukan pesan cryptoHashConfig.

Anda dapat mengosongkan cryptoHashConfig, atau Anda dapat mengisinya dengan:

(Tidak digunakan lagi): Kunci AES 128/192/256-bit mentah yang dienkode base 64.
(Direkomendasikan): Kunci yang digabungkan Cloud Key Management Service (Cloud KMS). Lihat Melakukan de-identifikasi dan identifikasi ulang teks sensitif untuk mengetahui contoh cara menggunakan kunci gabungan Cloud KMS.

Menyediakan kunci yang konsisten akan menghasilkan nilai pengganti yang konsisten di antara eksekusi de-identifikasi. Jika Anda tidak memberikan kunci, Cloud Healthcare API akan membuat kunci baru setiap kali operasi berjalan. Menggunakan kunci yang berbeda akan menghasilkan nilai pengganti yang berbeda.

Contoh berikut memperluas contoh yang digunakan dalam Menghapus identifikasi jalur FHIR tertentu, tetapi sekarang menyertakan penetapan infoType PERSON_NAME dengan transformasi cryptoKey di jalur Patient.HumanName. Setelah mengirim permintaan de-identifikasi ke Cloud Healthcare API, nilai name.family dan name.given akan diganti dengan nilai pengganti.

echo -n "test" | openssl enc -e -aes-256-ofb -a -salt

curl

curl -X POST \
    -H "Authorization: Bearer $(gcloud auth application-default print-access-token)" \
    -H "Content-Type: application/json; charset=utf-8" \
    --data "{
      'destinationDataset': 'projects/PROJECT_ID/locations/LOCATION/datasets/DESTINATION_DATASET_ID',
      'config': {
        'fhir': {
          'fieldMetadataList': {
            'paths': [
              'Patient.HumanName'
            ],
            'action': 'INSPECT_AND_TRANSFORM'
          }
        },
        'text': {
          'transformations': {
            'infoTypes': [
              'PERSON_NAME'
            ],
            'cryptoHashConfig': {
              'cryptoKey': 'U2FsdGVkX19bS2oZsdbK9X5zi2utBn22uY+I2Vo0zOU='
            }
          }
        }
      }
    }" "https://healthcare.googleapis.com/v1/projects/PROJECT_ID/locations/LOCATION/datasets/SOURCE_DATASET_ID:deidentify"

Jika permintaan berhasil, server akan menampilkan respons dalam format JSON:

{
  "name": "projects/PROJECT_ID/locations/REGION/datasets/SOURCE_DATASET_ID/operations/OPERATION_ID"
}

Respons berisi nama operasi. Anda dapat menggunakan Metode get operasi untuk melacak status operasi:

curl -X GET \
    -H "Authorization: Bearer $(gcloud auth print-access-token)" \
    -H "Content-Type: application/json; charset=utf-8" \
    "https://healthcare.googleapis.com/v1/projects/PROJECT_ID/locations/REGION/datasets/SOURCE_DATASET_ID/operations/OPERATION_ID"

Jika permintaan berhasil, server akan menampilkan respons dalam format JSON. Setelah proses de-identifikasi selesai, respons akan berisi "done": true.

{
  "name": "projects/PROJECT_ID/locations/REGION/datasets/SOURCE_DATASET_ID/operations/OPERATION_ID",
  "metadata": {
    "@type": "type.googleapis.com/google.cloud.healthcare.v1.OperationMetadata",
    "apiMethodName": "google.cloud.healthcare.v1.dataset.DatasetService.DeidentifyDataset",
    "createTime": "CREATE_TIME",
    "endTime": "END_TIME",
    "logsUrl": "https://console.cloud.google.com/logs/viewer/CLOUD_LOGGING_URL"
  },
  "done": true,
  "response": {
    "@type": "type.googleapis.com/google.cloud.healthcare.v1.deidentify.DeidentifySummary",
    "successStoreCount": "1",
    "successResourceCount": "1"
  }
}

Selanjutnya, menggunakan ID Pasien, Anda bisa mendapatkan detail untuk resource Pasien di set data tujuan baru:

curl -X GET \
     -H "Authorization: Bearer $(gcloud auth print-access-token)" \
     -H "Content-Type: application/fhir+json; charset=utf-8" \
     "https://healthcare.googleapis.com/v1/projects/PROJECT_ID/locations/REGION/datasets/DESTINATION_DATASET_ID/fhirStores/FHIR_STORE_ID/fhir/Patient/r77433dd-dkeuc-633743nfd-383nfdsjds732"

Server menampilkan respons berikut:

{
  "address": [
    {
      "city": "Anycity",
      "district": "Anydistrict",
      "line": [
        "123 Main Street"
      ],
      "period": {
        "start": "1990-12-05"
      },
      "postalCode": "12345",
      "state": "CA",
      "text": "123 Main Street Anycity, Anydistrict, CA 12345",
      "type": "both",
      "use": "home"
    }
  ],
  "birthDate": "1980-12-05",
  "gender": "female",
  "id": "r77433dd-dkeuc-633743nfd-383nfdsjds732",
  "meta": {
    "lastUpdated": "2018-01-01T2018-01-01T00:00:00+00:00",
    "versionId": "MTU0MDU4NTcxNjI2MTUxNDAwMAA"
  },
  "name": [
    {
      "family": "NlVBV12Hhb5DD8WNqlTpXboFxzlUSlqAmYDet/jIViQ=",
      "given": [
        "FSH4D/IGb80a1rS0L0kqfC3DCDt6//17VPhIkOzH2pk="
      ],
      "use": "official"
    }
  ],
  "resourceType": "Patient",
  "text": {
    "div": "<div><p><b>Patient</b></p><p><b>Name</b>: Smith, Darcy</p><p><b>DateOfBirth</b>: 1980-12-05</p><p><b>Gender</b>: Female</p></div>",
    "status": "generated"
  }
}

PowerShell

$cred = gcloud auth application-default print-access-token
$headers = @{ Authorization = "Bearer $cred" }

Invoke-WebRequest `
  -Method Post `
  -Headers $headers `
  -ContentType: "application/json; charset=utf-8" `
  -Body "{
    'destinationDataset': 'projects/PROJECT_ID/locations/LOCATION/datasets/DESTINATION_DATASET_ID',
    'config': {
      'fhir': {
        'fieldMetadataList': {
          'paths': [
            'Patient.HumanName'
          ],
          'action': 'TRANSFORM'
        }
      },
      'text': {
        'transformations': {
          'infoTypes': [
            'PERSON_NAME'
          ],
          'cryptoHashConfig': {
            'cryptoKey': 'U2FsdGVkX19bS2oZsdbK9X5zi2utBn22uY+I2Vo0zOU='
          }
        }
      }
    }
  }" `
  -Uri "https://healthcare.googleapis.com/v1/projects/PROJECT_ID/locations/LOCATION/datasets/SOURCE_DATASET_ID:deidentify" | Select-Object -Expand Content

Jika permintaan berhasil, server akan menampilkan respons dalam format JSON:

{
  "name": "projects/PROJECT_ID/locations/REGION/datasets/SOURCE_DATASET_ID/operations/OPERATION_ID"
}

Respons berisi nama operasi. Anda dapat menggunakan Metode get operasi untuk melacak status operasi:

$cred = gcloud auth print-access-token
$headers = @{ Authorization = "Bearer $cred" }

Invoke-WebRequest `
  -Method Get `
  -Headers $headers `
  -ContentType: "application/json; charset=utf-8" `
  -Uri "https://healthcare.googleapis.com/v1/projects/PROJECT_ID/locations/REGION/datasets/SOURCE_DATASET_ID/operations/OPERATION_ID" | Select-Object -Expand Content

Jika permintaan berhasil, server akan menampilkan respons dalam format JSON. Setelah proses de-identifikasi selesai, respons akan berisi "done": true.

{
  "name": "projects/PROJECT_ID/locations/REGION/datasets/SOURCE_DATASET_ID/operations/OPERATION_NUMBER",
  "metadata": {
    "@type": "type.googleapis.com/google.cloud.healthcare.v1.OperationMetadata",
    "apiMethodName": "google.cloud.healthcare.v1.dataset.DatasetService.DeidentifyDataset",
    "createTime": "CREATE_TIME",
    "endTime": "END_TIME",
    "logsUrl": "https://console.cloud.google.com/logs/viewer/CLOUD_LOGGING_URL"
  },
  "done": true,
  "response": {
    "@type": "type.googleapis.com/google.cloud.healthcare.v1.deidentify.DeidentifySummary",
    "successStoreCount": "1",
    "successResourceCount": "1"
  }
}

Selanjutnya, menggunakan ID Pasien, Anda bisa mendapatkan detail untuk resource Pasien di set data tujuan baru:

$cred = gcloud auth print-access-token
$headers = @{ Authorization = "Bearer $cred" }

Invoke-RestMethod `
  -Method Get `
  -Headers $headers `
  -ContentType: "application/fhir+json; charset=utf-8" `
  -Uri "https://healthcare.googleapis.com/v1/projects/PROJECT_ID/locations/REGION/datasets/DESTINATION_DATASET_ID/fhirStores/FHIR_STORE_ID/fhir/Patient/r77433dd-dkeuc-633743nfd-383nfdsjds732" | ConvertTo-Json

Server menampilkan respons berikut:

{
  "address": [
    {
      "city": "Anycity",
      "district": "Anydistrict",
      "line": [
        "123 Main Street"
      ],
      "period": {
        "start": "1990-12-05"
      },
      "postalCode": "12345",
      "state": "CA",
      "text": "123 Main Street Anycity, Anydistrict, CA 12345",
      "type": "both",
      "use": "home"
    }
  ],
  "birthDate": "1980-12-05",
  "gender": "female",
  "id": "r77433dd-dkeuc-633743nfd-383nfdsjds732",
  "meta": {
    "lastUpdated": "2018-01-01T2018-01-01T00:00:00+00:00",
    "versionId": "MTU0MDU4NTcxNjI2MTUxNDAwMAA"
  },
  "name": [
    {
      "family": "NlVBV12Hhb5DD8WNqlTpXboFxzlUSlqAmYDet/jIViQ=",
      "given": [
        "FSH4D/IGb80a1rS0L0kqfC3DCDt6//17VPhIkOzH2pk="
      ],
      "use": "official"
    }
  ],
  "resourceType": "Patient",
  "text": {
    "div": "<div><p><b>Patient</b></p><p><b>Name</b>: Smith, Darcy</p><p><b>DateOfBirth</b>: 1980-12-05</p><p><b>Gender</b>: Female</p></div>",
    "status": "generated"
  }
}

Output menunjukkan bahwa nilai untuk name.family dan name.given telah ditransformasikan menggunakan hashing kriptografis. Transformasi ini terjadi akibat penggabungan ID Pasien dan nilai cryptoKey yang diberikan. Nilai name.family dan name.given baru konsisten untuk Pasien ini antara de-identifikasi yang berjalan selama cryptoKey yang sama diberikan.

`ReplaceWithInfoTypeConfig`

Cloud Healthcare API dapat mengubah data dengan mengganti nilai dengan nama infoType nilai. Anda dapat melakukannya dengan menentukan pesan replaceWithInfoTypeConfig.

Contoh berikut memperluas contoh yang digunakan dalam Melakukan de-identifikasi jalur FHIR tertentu, tetapi menentukan transformasi replaceWithInfoType pada PERSON_NAME dan jalur fieldMetadataList yang ditetapkan ke Patient.HumanName. Setelah mengirim permintaan de-identifikasi ke Cloud Healthcare API, nilai name.family dan name.given akan diganti dengan infoType nilai.

curl

curl -X POST \
    -H "Authorization: Bearer $(gcloud auth application-default print-access-token)" \
    -H "Content-Type: application/json; charset=utf-8" \
    --data "{
      'destinationDataset': 'projects/PROJECT_ID/locations/LOCATION/datasets/DESTINATION_DATASET_ID',
      'config': {
        'fhir': {
          'fieldMetadataList': {
            'paths': [
              'Patient.HumanName'
            ],
            'action': 'INSPECT_AND_TRANSFORM'
          }
        },
        'text': {
          'transformations': {
            'infoTypes': [
              'PERSON_NAME'
            ],
            'replaceWithInfoType': {}
          }
        }
      }
    }" "https://healthcare.googleapis.com/v1/projects/PROJECT_ID/locations/LOCATION/datasets/SOURCE_DATASET_ID:deidentify"

Jika permintaan berhasil, server akan menampilkan respons dalam format JSON:

{
  "name": "projects/PROJECT_ID/locations/REGION/datasets/SOURCE_DATASET_ID/operations/OPERATION_ID"
}

Respons berisi nama operasi. Anda dapat menggunakan Metode get operasi untuk melacak status operasi:

curl -X GET \
    -H "Authorization: Bearer $(gcloud auth print-access-token)" \
    -H "Content-Type: application/json; charset=utf-8" \
    "https://healthcare.googleapis.com/v1/projects/PROJECT_ID/locations/REGION/datasets/SOURCE_DATASET_ID/operations/OPERATION_ID"

Jika permintaan berhasil, server akan menampilkan respons dalam format JSON. Setelah proses de-identifikasi selesai, respons akan berisi "done": true.

{
  "name": "projects/PROJECT_ID/locations/REGION/datasets/SOURCE_DATASET_ID/operations/OPERATION_ID",
  "metadata": {
    "@type": "type.googleapis.com/google.cloud.healthcare.v1.OperationMetadata",
    "apiMethodName": "google.cloud.healthcare.v1.dataset.DatasetService.DeidentifyDataset",
    "createTime": "CREATE_TIME",
    "endTime": "END_TIME",
    "logsUrl": "https://console.cloud.google.com/logs/viewer/CLOUD_LOGGING_URL"
  },
  "done": true,
  "response": {
    "@type": "type.googleapis.com/google.cloud.healthcare.v1.deidentify.DeidentifySummary",
    "successStoreCount": "1",
    "successResourceCount": "1"
  }
}

Selanjutnya, menggunakan ID Pasien, Anda bisa mendapatkan detail untuk resource Pasien di set data tujuan baru:

curl -X GET \
     -H "Authorization: Bearer $(gcloud auth print-access-token)" \
     -H "Content-Type: application/fhir+json; charset=utf-8" \
     "https://healthcare.googleapis.com/v1/projects/PROJECT_ID/locations/REGION/datasets/DESTINATION_DATASET_ID/fhirStores/FHIR_STORE_ID/fhir/Patient/r77433dd-dkeuc-633743nfd-383nfdsjds732"

Server menampilkan respons berikut:

{
  "address": [
    {
      "city": "Anycity",
      "district": "Anydistrict",
      "line": [
        "123 Main Street"
      ],
      "period": {
        "start": "1990-12-05"
      },
      "postalCode": "12345",
      "state": "CA",
      "text": "123 Main Street Anycity, Anydistrict, CA 12345",
      "type": "both",
      "use": "home"
    }
  ],
  "birthDate": "1980-12-05",
  "gender": "female",
  "id": "r77433dd-dkeuc-633743nfd-383nfdsjds732",
  "meta": {
    "lastUpdated": "2018-01-01T2018-01-01T00:00:00+00:00",
    "versionId": "MTU0MDU4NTcxNjI2MTUxNDAwMAA"
  },
  "name": [
    {
      "family": "[PERSON_NAME]",
      "given": [
        "[PERSON_NAME]"
      ],
      "use": "official"
    }
  ],
  "resourceType": "Patient",
  "text": {
    "div": "<div><p><b>Patient</b></p><p><b>Name</b>: Smith, Darcy</p><p><b>DateOfBirth</b>: 1980-12-05</p><p><b>Gender</b>: Female</p></div>",
    "status": "generated"
  }
}

PowerShell

$cred = gcloud auth application-default print-access-token
$headers = @{ Authorization = "Bearer $cred" }

Invoke-WebRequest `
  -Method Post `
  -Headers $headers `
  -ContentType: "application/json; charset=utf-8" `
  -Body "{
    'destinationDataset': 'projects/PROJECT_ID/locations/LOCATION/datasets/DESTINATION_DATASET_ID',
    'config': {
      'fhir': {
        'fieldMetadataList': {
          'paths': [
            'Patient.HumanName'
          ],
          'action': 'TRANSFORM'
        }
      },
      'text': {
        'transformations': {
          'infoTypes': [
            'PERSON_NAME'
          ],
          'replaceWithInfoTypeConfig': {}
        }
      }
    }
  }" `
  -Uri "https://healthcare.googleapis.com/v1/projects/PROJECT_ID/locations/LOCATION/datasets/SOURCE_DATASET_ID:deidentify" | Select-Object -Expand Content

Jika permintaan berhasil, server akan menampilkan respons dalam format JSON:

{
  "name": "projects/PROJECT_ID/locations/REGION/datasets/SOURCE_DATASET_ID/operations/OPERATION_ID"
}

Respons berisi nama operasi. Anda dapat menggunakan Metode get operasi untuk melacak status operasi:

$cred = gcloud auth print-access-token
$headers = @{ Authorization = "Bearer $cred" }

Invoke-WebRequest `
  -Method Get `
  -Headers $headers `
  -ContentType: "application/json; charset=utf-8" `
  -Uri "https://healthcare.googleapis.com/v1/projects/PROJECT_ID/locations/REGION/datasets/SOURCE_DATASET_ID/operations/OPERATION_ID" | Select-Object -Expand Content

Jika permintaan berhasil, server akan menampilkan respons dalam format JSON. Setelah proses de-identifikasi selesai, respons akan berisi "done": true.

{
  "name": "projects/PROJECT_ID/locations/REGION/datasets/SOURCE_DATASET_ID/operations/OPERATION_NUMBER",
  "metadata": {
    "@type": "type.googleapis.com/google.cloud.healthcare.v1.OperationMetadata",
    "apiMethodName": "google.cloud.healthcare.v1.dataset.DatasetService.DeidentifyDataset",
    "createTime": "CREATE_TIME",
    "endTime": "END_TIME",
    "logsUrl": "https://console.cloud.google.com/logs/viewer/CLOUD_LOGGING_URL"
  },
  "done": true,
  "response": {
    "@type": "type.googleapis.com/google.cloud.healthcare.v1.deidentify.DeidentifySummary",
    "successStoreCount": "1",
    "successResourceCount": "1"
  }
}

Selanjutnya, menggunakan ID Pasien, Anda bisa mendapatkan detail untuk resource Pasien di set data tujuan baru:

$cred = gcloud auth print-access-token
$headers = @{ Authorization = "Bearer $cred" }

Invoke-RestMethod `
  -Method Get `
  -Headers $headers `
  -ContentType: "application/fhir+json; charset=utf-8" `
  -Uri "https://healthcare.googleapis.com/v1/projects/PROJECT_ID/locations/REGION/datasets/DESTINATION_DATASET_ID/fhirStores/FHIR_STORE_ID/fhir/Patient/r77433dd-dkeuc-633743nfd-383nfdsjds732" | ConvertTo-Json

Server menampilkan respons berikut:

{
  "address": [
    {
      "city": "Anycity",
      "district": "Anydistrict",
      "line": [
        "123 Main Street"
      ],
      "period": {
        "start": "1990-12-05"
      },
      "postalCode": "12345",
      "state": "CA",
      "text": "123 Main Street Anycity, Anydistrict, CA 12345",
      "type": "both",
      "use": "home"
    }
  ],
  "birthDate": "1980-12-05",
  "gender": "female",
  "id": "r77433dd-dkeuc-633743nfd-383nfdsjds732",
  "meta": {
    "lastUpdated": "2018-01-01T2018-01-01T00:00:00+00:00",
    "versionId": "MTU0MDU4NTcxNjI2MTUxNDAwMAA"
  },
  "name": [
    {
      "family": "[PERSON_NAME]",
      "given": [
        "[PERSON_NAME]"
      ],
      "use": "official"
    }
  ],
  "resourceType": "Patient",
  "text": {
    "div": "<div><p><b>Patient</b></p><p><b>Name</b>: Smith, Darcy</p><p><b>DateOfBirth</b>: 1980-12-05</p><p><b>Gender</b>: Female</p></div>",
    "status": "generated"
  }
}

Output menunjukkan bahwa nilai untuk name.family dan name.given telah diganti dengan infoType nilai.

Melakukan de-identifikasi data di tingkat penyimpanan FHIR

Contoh sebelumnya menunjukkan cara melakukan de-identifikasi data FHIR di tingkat set data. Untuk mengubah permintaan de-identifikasi set data menjadi permintaan de-identifikasi penyimpanan FHIR, lakukan perubahan berikut:

Ubah destinationDataset dalam isi permintaan menjadi destinationStore
Tambahkan fhirStores/DESTINATION_FHIR_STORE_ID di akhir nilai di destinationStore
Tambahkan fhirStores/SOURCE_FHIR_STORE_ID saat menentukan lokasi data sumber.

Contoh:

De-identifikasi tingkat set data:

'destinationDataset': 'projects/PROJECT_ID/locations/LOCATION/datasets/DESTINATION_DATASET_ID'
…
"https://healthcare.googleapis.com/v1/projects/PROJECT_ID/locations/LOCATION/datasets/SOURCE_DATASET_ID:deidentify"

De-identifikasi tingkat FHIR store:

'destinationStore': 'projects/PROJECT_ID/locations/LOCATION/datasets/DESTINATION_DATASET_ID/fhirStores/DESTINATION_FHIR_STORE_ID'
…
"https://healthcare.googleapis.com/v1/projects/PROJECT_ID/locations/LOCATION/datasets/SOURCE_DATASET_ID/fhirStores/SOURCE_FHIR_STORE_ID:deidentify"

Contoh berikut memperluas Melakukan de-identifikasi jalur FHIR tertentu, tetapi de-identifikasi terjadi di satu penyimpanan FHIR dan data yang dide-identifikasi disalin ke penyimpanan FHIR baru. Perhatikan bahwa FHIR store yang dirujuk oleh DESTINATION_FHIR_STORE_ID harus sudah ada.

curl

curl -X POST \
    -H "Authorization: Bearer $(gcloud auth application-default print-access-token)" \
    -H "Content-Type: application/json; charset=utf-8" \
    --data "{
      'destinationStore': 'projects/PROJECT_ID/locations/LOCATION/datasets/DESTINATION_DATASET_ID/fhirStores/DESTINATION_FHIR_STORE_ID',
     'config': {
        'fhir': {
          'fieldMetadataList': [
            {
              'paths': [
                'Patient.HumanName'
              ],
              'action': 'TRANSFORM'
            }
          ]
        }
      }
    }" "https://healthcare.googleapis.com/v1/projects/PROJECT_ID/locations/LOCATION/datasets/SOURCE_DATASET_ID/fhirStores/SOURCE_FHIR_STORE_ID:deidentify"

Jika permintaan berhasil, server akan menampilkan respons dalam format JSON:

{
  "name": "projects/PROJECT_ID/locations/LOCATION/datasets/SOURCE_DATASET_ID/operations/OPERATION_ID"
}

Respons berisi nama operasi. Anda dapat menggunakan Metode get operasi untuk melacak status operasi:

curl -X GET \
    -H "Authorization: Bearer $(gcloud auth application-default print-access-token)" \
    -H "Content-Type: application/json; charset=utf-8" \
    "https://healthcare.googleapis.com/v1/projects/PROJECT_ID/locations/LOCATION/datasets/SOURCE_DATASET_ID/operations/OPERATION_ID"

Jika permintaan berhasil, server akan menampilkan respons dalam format JSON. Setelah proses de-identifikasi selesai, respons akan berisi "done": true.

{
  "name": "projects/PROJECT_ID/locations/LOCATION/datasets/SOURCE_DATASET_ID/operations/OPERATION_ID",
  "metadata": {
    "@type": "type.googleapis.com/google.cloud.healthcare.v1.OperationMetadata",
    "apiMethodName": "google.cloud.healthcare.v1.deidentify.DeidentifyService.DeidentifyFhirStore",
    "createTime": "CREATE_TIME",
    "endTime": "END_TIME",
    "logsUrl": "https://console.cloud.google.com/logs/query/CLOUD_LOGGING_URL",
    "counter": {
      "success": "SUCCESS_COUNT"
    }
  },
  "done": true,
  "response": {
    "@type": "type.googleapis.com/google.cloud.healthcare.v1.deidentify.DeidentifyFhirStoreSummary"
  }
}

PowerShell

$cred = gcloud auth application-default print-access-token
$headers = @{ Authorization = "Bearer $cred" }

Invoke-WebRequest `
  -Method Post `
  -Headers $headers `
  -ContentType: "application/json; charset=utf-8" `
  -Body "{
    'destinationStore': 'projects/PROJECT_ID/locations/LOCATION/datasets/DESTINATION_DATASET_ID/fhirStores/DESTINATION_FHIR_STORE_ID',
    'config': {
      'fhir': {
        'fieldMetadataList': [
          {
            'paths': [
              'Patient.HumanName'
            ],
            'action': 'TRANSFORM'
          }
        ]
      }
    }
  }" `
  -Uri "https://healthcare.googleapis.com/v1/projects/PROJECT_ID/locations/LOCATION/datasets/SOURCE_DATASET_ID/fhirStores/SOURCE_FHIR_STORE_ID:deidentify" | Select-Object -Expand Content

Jika permintaan berhasil, server akan menampilkan respons dalam format JSON:

{
  "name": "projects/PROJECT_ID/locations/LOCATION/datasets/SOURCE_DATASET_ID/operations/OPERATION_ID"
}

Respons berisi ID operasi. Anda dapat menggunakan Metode get operasi untuk melacak status operasi:

$cred = gcloud auth application-default print-access-token
$headers = @{ Authorization = "Bearer $cred" }

Invoke-WebRequest `
  -Method Get `
  -Headers $headers `
  -ContentType: "application/json; charset=utf-8" `
  -Uri "https://healthcare.googleapis.com/v1/projects/PROJECT_ID/locations/LOCATION/datasets/SOURCE_DATASET_ID/operations/OPERATION_ID" | Select-Object -Expand Content

Jika permintaan berhasil, server akan menampilkan respons dalam format JSON. Setelah proses de-identifikasi selesai, respons akan berisi "done": true.

{
  "name": "projects/PROJECT_ID/locations/LOCATION/datasets/SOURCE_DATASET_ID/operations/OPERATION_ID",
  "metadata": {
    "@type": "type.googleapis.com/google.cloud.healthcare.v1.OperationMetadata",
    "apiMethodName": "google.cloud.healthcare.v1.deidentify.DeidentifyService.DeidentifyFhirStore",
    "createTime": "CREATE_TIME",
    "endTime": "END_TIME",
    "logsUrl": "https://console.cloud.google.com/logs/query/CLOUD_LOGGING_URL",
    "counter": {
      "success": "SUCCESS_COUNT"
    }
  },
  "done": true,
  "response": {
    "@type": "type.googleapis.com/google.cloud.healthcare.v1.deidentify.DeidentifyFhirStoreSummary"
  }
}

Melakukan de-identifikasi pada subset penyimpanan FHIR

Saat melakukan de-identifikasi data FHIR di tingkat penyimpanan FHIR, Anda dapat melakukan de-identifikasi subkumpulan data dengan menentukan filter.

Filter berbentuk daftar ID resource FHIR. Anda menentukan ID dalam objek Resources di dalam objek FhirFilter.

Contoh berikut memperluas De-identifikasi data di tingkat penyimpanan FHIR, tetapi daftar dua ID resource FHIR (satu untuk Pasien dan satu untuk Pengamatan) disediakan yang menentukan resource mana yang dide-identifikasi.

curl

curl -X POST \
    -H "Authorization: Bearer $(gcloud auth application-default print-access-token)" \
    -H "Content-Type: application/json; charset=utf-8" \
    --data "{
      'destinationStore': 'projects/PROJECT_ID/locations/LOCATION/datasets/DESTINATION_DATASET_ID/fhirStores/DESTINATION_FHIR_STORE_ID',
      'config': {
        'fhir': {
          'fieldMetadataList': [
            {
              'action': 'TRANSFORM',
              'paths': [
                'Patient.HumanName'
              ]
            }
          ]
        }
      },
      'resourceFilter': {
        'resources': {
          'resources': [
            'Patient/PATIENT_ID',
            'Observation/OBSERVATION_ID'
          ]
        }
      }
    }" "https://healthcare.googleapis.com/v1/projects/PROJECT_ID/locations/LOCATION/datasets/SOURCE_DATASET_ID/fhirStores/SOURCE_FHIR_STORE_ID:deidentify"

Jika permintaan berhasil, server akan menampilkan respons dalam format JSON:

{
  "name": "projects/PROJECT_ID/locations/LOCATION/datasets/SOURCE_DATASET_ID/operations/OPERATION_ID"
}

Respons berisi nama operasi. Anda dapat menggunakan Metode get operasi untuk melacak status operasi:

curl -X GET \
    -H "Authorization: Bearer $(gcloud auth application-default print-access-token)" \
    -H "Content-Type: application/json; charset=utf-8" \
    "https://healthcare.googleapis.com/v1/projects/PROJECT_ID/locations/LOCATION/datasets/SOURCE_DATASET_ID/operations/OPERATION_ID"

Jika permintaan berhasil, server akan menampilkan respons dalam format JSON. Setelah proses de-identifikasi selesai, respons akan berisi "done": true.

{
  "name": "projects/PROJECT_ID/locations/LOCATION/datasets/SOURCE_DATASET_ID/operations/OPERATION_ID",
  "metadata": {
    "@type": "type.googleapis.com/google.cloud.healthcare.v1.OperationMetadata",
    "apiMethodName": "google.cloud.healthcare.v1.deidentify.DeidentifyService.DeidentifyFhirStore",
    "createTime": "CREATE_TIME",
    "endTime": "END_TIME",
    "logsUrl": "https://console.cloud.google.com/logs/query/CLOUD_LOGGING_URL",
    "counter": {
      "success": "SUCCESS_COUNT"
    }
  },
  "done": true,
  "response": {
    "@type": "type.googleapis.com/google.cloud.healthcare.v1.deidentify.DeidentifyFhirStoreSummary"
  }
}

PowerShell

$cred = gcloud auth application-default print-access-token
$headers = @{ Authorization = "Bearer $cred" }

Invoke-WebRequest `
  -Method Post `
  -Headers $headers `
  -ContentType: "application/json; charset=utf-8" `
  -Body "{
    'destinationStore': 'projects/PROJECT_ID/locations/LOCATION/datasets/DESTINATION_DATASET_ID/fhirStores/DESTINATION_FHIR_STORE_ID',
    'resourceFilter': {
      'resources': {
        'resources': [
          'Patient/PATIENT_ID',
          'Observation/OBSERVATION_ID'
        ]
      }
    },
    'config': {
      'fhir': {
        'fieldMetadataList': [
          {
            'paths': [
              'Patient.HumanName'
            ],
            'action': 'TRANSFORM'
          }
        ]
      }
    }
  }" `
  -Uri "https://healthcare.googleapis.com/v1/projects/PROJECT_ID/locations/LOCATION/datasets/SOURCE_DATASET_ID/fhirStores/SOURCE_FHIR_STORE_ID:deidentify" | Select-Object -Expand Content

Jika permintaan berhasil, server akan menampilkan respons dalam format JSON:

{
  "name": "projects/PROJECT_ID/locations/LOCATION/datasets/SOURCE_DATASET_ID/operations/OPERATION_ID"
}

Respons berisi ID operasi. Anda dapat menggunakan Metode get operasi untuk melacak status operasi:

$cred = gcloud auth application-default print-access-token
$headers = @{ Authorization = "Bearer $cred" }

Invoke-WebRequest `
  -Method Get `
  -Headers $headers `
  -ContentType: "application/json; charset=utf-8" `
  -Uri "https://healthcare.googleapis.com/v1/projects/PROJECT_ID/locations/LOCATION/datasets/SOURCE_DATASET_ID/operations/OPERATION_ID" | Select-Object -Expand Content

Jika permintaan berhasil, server akan menampilkan respons dalam format JSON. Setelah proses de-identifikasi selesai, respons akan berisi "done": true.

{
  "name": "projects/PROJECT_ID/locations/LOCATION/datasets/SOURCE_DATASET_ID/operations/OPERATION_ID",
  "metadata": {
    "@type": "type.googleapis.com/google.cloud.healthcare.v1.OperationMetadata",
    "apiMethodName": "google.cloud.healthcare.v1.deidentify.DeidentifyService.DeidentifyFhirStore",
    "createTime": "CREATE_TIME",
    "endTime": "END_TIME",
    "logsUrl": "https://console.cloud.google.com/logs/query/CLOUD_LOGGING_URL",
    "counter": {
      "success": "SUCCESS_COUNT"
    }
  },
  "done": true,
  "response": {
    "@type": "type.googleapis.com/google.cloud.healthcare.v1.deidentify.DeidentifyFhirStoreSummary"
  }
}

Melakukan de-identifikasi data di konsol Google Cloud

Anda dapat melakukan de-identifikasi data di konsol Google Cloud untuk set data atau penyimpanan FHIR. Konfigurasi de-identifikasi FHIR default digunakan untuk melakukan de-identifikasi set data dan penyimpanan FHIR. Untuk informasi selengkapnya, lihat De-identifikasi data FHIR default.

Melakukan de-identifikasi data untuk set data

Untuk menghapus identitas data untuk set data, selesaikan langkah-langkah berikut:

Di konsol Google Cloud, buka halaman Datasets.

Buka Set Data
Pilih Hapus identifikasi dari daftar Tindakan untuk set data yang Anda hapus identifikasinya.

Halaman De-identify Dataset akan ditampilkan.
Pilih Set destination dataset dan masukkan nama untuk set data baru guna menyimpan data yang dide-identifikasi.
Klik De-identify untuk melakukan de-identifikasi data dalam set data.

Melakukan de-identifikasi data di penyimpanan FHIR

Untuk melakukan de-identifikasi data di penyimpanan FHIR, selesaikan langkah-langkah berikut:

Di konsol Google Cloud, buka halaman Datasets.

Buka Set Data
Klik set data yang datanya ingin Anda de-identifikasi.
Dalam daftar penyimpanan FHIR, pilih De-identify dari daftar Actions untuk penyimpanan FHIR yang Anda de-identifikasi.

Halaman De-identify FHIR Store akan ditampilkan.
Pilih Set destination data store, lalu pilih set data dan penyimpanan FHIR tempat data yang dide-identifikasi disimpan.

Catatan: Jika ingin menyimpan data yang dide-identifikasi di penyimpanan FHIR baru, Anda harus membuat penyimpanan baru terlebih dahulu, lalu memilihnya sebagai penyimpanan FHIR tujuan.
Klik De-identify untuk melakukan de-identifikasi data di penyimpanan FHIR.

Memecahkan masalah operasi de-identifikasi FHIR

Jika terjadi error selama operasi de-identifikasi FHIR, error tersebut akan dicatat ke Cloud Logging. Untuk mengetahui informasi selengkapnya, lihat artikel Melihat log error di Cloud Logging.

Jika seluruh operasi menampilkan error, lihat Memecahkan masalah operasi yang berjalan lama.

Melakukan de-identifikasi data FHIR

Ringkasan de-identifikasi

De-identifikasi tingkat set data

De-identifikasi tingkat penyimpanan FHIR

Filter

Contoh resource FHIR yang digunakan dalam panduan ini

De-identifikasi data FHIR default

curl

PowerShell

Melakukan de-identifikasi jalur FHIR tertentu

Profil de-identifikasi FHIR default

Menggunakan jalur untuk melakukan de-identifikasi resource

curl

PowerShell

Menggunakan infoTypes dan transformasi primitif dengan resource FHIR

infoTypes FHIR default

Opsi transformasi primitif

Menentukan konfigurasi di TextConfig

RedactConfig

curl

PowerShell

CharacterMaskConfig

curl

PowerShell

DateShiftConfig

curl

PowerShell

CryptoHashConfig

curl

PowerShell

ReplaceWithInfoTypeConfig

curl

PowerShell

Melakukan de-identifikasi data di tingkat penyimpanan FHIR

curl

PowerShell

Melakukan de-identifikasi pada subset penyimpanan FHIR

curl

PowerShell

Melakukan de-identifikasi data di konsol Google Cloud

Melakukan de-identifikasi data untuk set data

Melakukan de-identifikasi data di penyimpanan FHIR

Memecahkan masalah operasi de-identifikasi FHIR

Menentukan konfigurasi di `TextConfig`

`RedactConfig`

`CharacterMaskConfig`

`DateShiftConfig`

`CryptoHashConfig`

`ReplaceWithInfoTypeConfig`