| CPC H04L 67/1089 (2013.01) [H04L 41/0813 (2013.01); H04L 63/102 (2013.01); H04L 63/105 (2013.01); H04L 63/20 (2013.01); H04L 67/01 (2022.05); H04L 67/535 (2022.05)] | 16 Claims |

|
1. A method performed by one or more computers of a server system, the method comprising:
providing, by the server system, a multi-tenant data sharing platform configured to facilitate sharing of stored research data for clinical research studies, wherein the stored research data comprises multiple types of research data, wherein the server system stores policy data indicating multiple policies for a research organization, and wherein the multiple policies respectively specify different conditions on access to at least some of the different types of research data;
receiving, by the server system, one or more requests over a communication network to obtain or use stored research data of the research organization from one or more research studies, wherein at least one of the one or more requests involves access to a first type of research data and at least one of the one or more requests involves access to a second type of research data;
in response to receiving the one or more requests, identifying, by the server system, (i) a first policy, from among the multiple policies for the research organization, that indicates one or more first conditions on access to the stored research data of the first type of research data and (ii) a second policy, from among the multiple policies, that indicates one or more second conditions on access to the stored research data of the second type of research data, wherein the one or more first conditions are different from the one or more second conditions;
generating, by the server system, one or more responses to the one or more requests, wherein generating the one or more responses comprises (i) selectively using the stored research data of the first type of research data to generate a response based on whether the one or more first conditions indicated by the first policy are satisfied and (ii) selectively using the stored research data of the second type of research data to generate a response based on whether the one or more second conditions indicated by the second policy are satisfied; and
providing, by the server system, the generated one or more responses over the communication network in response to the one or more requests.
|