Evolution of the Software Architecture of IntOR System for Compliance with the Security Requirements of Brazilian General Data Protection Law (GDPL)

• Grant number: 21/01796-0
• Support Opportunities: Scholarships in Brazil - Scientific Initiation
• Start date: June 01, 2021
• End date: May 31, 2022
• Field of knowledge: Physical Sciences and Mathematics - Computer Science - Computing Methodologies and Techniques
• Principal Investigator: Elisa Yumi Nakagawa
• Grantee: Marcelo Isaias de Moraes Junior
• Host Institution: Instituto de Ciências Matemáticas e de Computação (ICMC). Universidade de São Paulo (USP). São Carlos , SP, Brazil
• Associated research grant: 13/07375-0 - CeMEAI - Center for Mathematical Sciences Applied to Industry., AP.CEPID

Abstract

IntOR, a software system for Integrated Operating Rooms (IOR), is a System-of-Systems (SoS) that has been designed in partnership with researchers from the Department of Anesthesia at the Clinical Hospital, Faculty of Medicine, University of São Paulo (HC-FMUSP). IntOR integrates information provided by different systems, devices, and sensors that monitor the patient's vital signs (for example, blood pressure, pulse, and heart rate) during the procedures performed in the operating rooms. Additionally, this system provides subsidies for a more adequate management of the rooms of the Surgical Center of HC-FMUSP. IntOR is an intraoperative support system that assists the work of health professionals involved in the surgical procedure, above all, of the anesthesiologist's task to ensure the health and safety of the patient through the control of their vital functions. In the literature, there are several implementations of IORs systems developed abroad, which are privately owned and expensive, hindering their adoption by the surgical centers of the National Health Service (SUS), in Brazil. To contribute to the Brazilian public health system, researchers in the field of computing and health are working together to establish the IntOR's software architecture. The first version of this architecture includes mechanisms to integrate constituent systems. However, due to the large amount of patient's data and medical procedures that must be managed by IntOR, it is necessary that its architecture adequately meets the data security and privacy requirements specified by the General Data Protection Law (GDPL) that came into effect in 2020 to ensure that the software systems operating in the country aim to protect the personal data of any Brazilian citizen. Hence, the objective of this scientific initiation project is to evolve the IntOR's software architecture in view of the non-functional security requirements that respect the regulation of the new GDPL.