本頁面由 Cloud Translation API 翻譯而成。

將 FHIR 資料去識別化

本頁面說明如何在下列層級使用 Cloud Healthcare API，將 FHIR 資源中的機密資料去識別化：

在資料集層級使用 datasets.deidentify
在 FHIR 儲存庫層級使用 fhirStores.deidentify

本頁面也會說明如何在 FHIR 存放區層級去識別資料時套用篩選器。

去識別化總覽

資料集層級去識別化

如要在資料集層級將 FHIR 資料去識別化，請呼叫 datasets.deidentify 作業。去識別化 API 呼叫包含下列元件：

來源資料集：包含 FHIR 儲存庫的資料集，其中包含含有機密資料的一或多個資源。
目的地資料集：去識別化不會影響原始資料集或其資料。而是將原始資料的去識別化副本寫入新資料集 (稱為「目的地資料集」)。
要去識別的內容：指定資料集處理方式的設定參數。您可以透過以下方式設定這些參數：在 FhirConfig 和/或 DeidentifyConfig 物件內的 TextConfig 中指定參數，然後透過以下方式傳遞：
- 設定要求主體的 config 欄位
- 以 JSON 格式儲存在 Cloud Storage 中，並使用請求主體的 gcsConfigUri 欄位指定檔案在值區中的所在位置

本指南中的大部分範例都說明如何在資料集層級去識別 FHIR 資料。

FHIR 儲存庫層級去識別化

您可以在 FHIR 儲存庫層級將 FHIR 資料去識別化，進一步控管要去識別哪些 FHIR 資料。

如要將 FHIR 儲存庫中的 FHIR 資料去識別，請呼叫 fhirStores.deidentify 方法。去識別化 API 呼叫包含下列元件：

來源 FHIR 儲存庫：FHIR 儲存庫，其中包含一或多個含有機密資料的資源。
目的地 FHIR 儲存庫：去識別化不會影響原始 FHIR 儲存庫或其資料。而是將原始資料的去識別化副本寫入目的地 FHIR 儲存庫。目的地 FHIR 儲存庫必須已存在。
要去識別的內容：指定 FHIR 儲存庫處理方式的設定參數。您可以透過以下方式設定這些參數：在 FhirConfig 和/或 DeidentifyConfig 物件內的 TextConfig 中指定參數，然後透過以下方式傳遞：
- 設定要求主體的 config 欄位
- 以 JSON 格式儲存在 Cloud Storage 中，並使用請求主體的 gcsConfigUri 欄位指定檔案在值區中的所在位置

如需 FHIR 儲存庫層級 FHIR 資料去識別化方法的範例，請參閱「在 FHIR 儲存庫層級去識別化資料」。

篩選器

您可以在 fhirStores.deidentify 要求中指定 FHIR 資源 ID 清單，藉此在 FHIR 儲存庫中去識別部分資料。如需範例，請參閱「去識別化 FHIR 儲存庫的子集」。

本指南中使用的 FHIR 資源範例

本指南中的範例會使用 FHIR 儲存庫中的病患 (DSTU2、STU3 和 R4) 資源。Patient 具有下列範例所示的屬性。id 值是由伺服器產生。如果您在自己的 FHIR 儲存庫中建立 Patient 資源，傳回的 id 值會與範例 Patient 中顯示的值不同。

{
  "address": [
    {
      "city": "Anycity",
      "district": "Anydistrict",
      "line": [
        "123 Main Street"
      ],
      "period": {
        "start": "1990-12-05"
      },
      "postalCode": "12345",
      "state": "CA",
      "text": "123 Main Street Anycity, Anydistrict, CA 12345",
      "type": "both",
      "use": "home"
    }
  ],
  "birthDate": "1980-12-05",
  "gender": "female",
  "id": "r77433dd-dkeuc-633743nfd-383nfdsjds732",
  "name": [
    {
      "family": "Smith",
      "given": [
        "Darcy"
      ],
      "use": "official"
    }
  ],
  "resourceType": "Patient",
  "text": {
    "status": "generated",
    "div": "<div><p><b>Patient</b></p><p><b>Name</b>: Smith, Darcy</p><p><b>DateOfBirth</b>: 1980-12-05</p><p><b>Gender</b>: Female</p></div>"
  }
}

預設的 FHIR 資料去識別化

您可以使用「預設」方法，在 FHIR 儲存庫中的資源中遮蓋常見的受保護健康資訊 (PHI)，藉此去除 FHIR 資料的個人識別資訊。預設方法會遮蓋下列資訊：

預設 FHIR infoType 中指定的 infoType
預設 FHIR 去識別化設定檔中指定的路徑

下列範例說明如何使用 FHIR 預設方法去識別病患資源。使用預設方法時，請在 DeidentifyConfig 物件中使用空白的 FhirConfig。

curl

curl -X POST \
    -H "Authorization: Bearer $(gcloud auth application-default print-access-token)" \
    -H "Content-Type: application/json; charset=utf-8" \
    --data "{
      'destinationDataset': 'projects/PROJECT_ID/locations/LOCATION/datasets/DESTINATION_DATASET_ID',
      'config': {
        'fhir': {}
      }
    }" "https://healthcare.googleapis.com/v1/projects/PROJECT_ID/locations/LOCATION/datasets/SOURCE_DATASET_ID:deidentify"

如果要求成功，伺服器會以 JSON 格式傳回：

{
  "name": "projects/PROJECT_ID/locations/REGION/datasets/SOURCE_DATASET_ID/operations/OPERATION_ID"
}

回應會包含作業名稱。您可以使用 Operation get 方法追蹤作業狀態：

curl -X GET \
    -H "Authorization: Bearer $(gcloud auth print-access-token)" \
    -H "Content-Type: application/json; charset=utf-8" \
    "https://healthcare.googleapis.com/v1/projects/PROJECT_ID/locations/REGION/datasets/SOURCE_DATASET_ID/operations/OPERATION_ID"

如果要求成功，伺服器會以 JSON 格式傳回回應。去識別化程序完成後，回應會包含 "done": true。

{
  "name": "projects/PROJECT_ID/locations/REGION/datasets/SOURCE_DATASET_ID/operations/OPERATION_ID",
  "metadata": {
    "@type": "type.googleapis.com/google.cloud.healthcare.v1.OperationMetadata",
    "apiMethodName": "google.cloud.healthcare.v1.dataset.DatasetService.DeidentifyDataset",
    "createTime": "CREATE_TIME",
    "endTime": "END_TIME",
    "logsUrl": "https://console.cloud.google.com/logs/viewer/CLOUD_LOGGING_URL"
  },
  "done": true,
  "response": {
    "@type": "type.googleapis.com/google.cloud.healthcare.v1.deidentify.DeidentifySummary",
    "successStoreCount": "1",
    "successResourceCount": "1"
  }
}

接下來，您可以使用病患 ID，在新的目的地資料集中取得病患資源的詳細資料：

curl -X GET \
     -H "Authorization: Bearer $(gcloud auth print-access-token)" \
     -H "Content-Type: application/fhir+json; charset=utf-8" \
     "https://healthcare.googleapis.com/v1/projects/PROJECT_ID/locations/REGION/datasets/DESTINATION_DATASET_ID/fhirStores/FHIR_STORE_ID/fhir/Patient/r77433dd-dkeuc-633743nfd-383nfdsjds732"

伺服器會傳回以下回應：

{
  "address": [
    {
      "city": "",
      "district": "",
      "line": [
        ""
      ],
      "period": {
        "start": "1990-12-05"
      },
      "postalCode": "",
      "state": "CA",
      "text": "",
      "type": "both",
      "use": "home"
    }
  ],
  "birthDate": "1981-02-24",
  "gender": "female",
  "id": "r77433dd-dkeuc-633743nfd-383nfdsjds732",
  "meta": {
    "lastUpdated": "2018-01-01T2018-01-01T00:00:00+00:00",
    "versionId": "MTU0MDU4NTcxNjI2MTUxNDAwMA"
  },
  "name": [
    {
      "family": "",
      "given": [
        ""
      ],
      "use": "official"
    }
  ],
  "resourceType": "Patient",
  "text": {
    "div": "<div><p><b>Patient</b></p><p><b>Name</b>: [PERSON_NAME][PERSON_NAME][PERSON_NAME]</p><p><b>DateOfBirth</b>: 1981-02-24</p><p><b>Gender</b>: Female</p></div>",
    "status": "generated"
  }
}

PowerShell

$cred = gcloud auth application-default print-access-token
$headers = @{ Authorization = "Bearer $cred" }

Invoke-WebRequest `
  -Method Post `
  -Headers $headers `
  -ContentType: "application/json; charset=utf-8" `
  -Body "{
    'destinationDataset': 'projects/PROJECT_ID/locations/LOCATION/datasets/DESTINATION_DATASET_ID',
    'config': {
      'fhir': {}
    }
  }" `
  -Uri "https://healthcare.googleapis.com/v1/projects/PROJECT_ID/locations/LOCATION/datasets/SOURCE_DATASET_ID:deidentify" | Select-Object -Expand Content

如果要求成功，伺服器會以 JSON 格式傳回：

{
  "name": "projects/PROJECT_ID/locations/REGION/datasets/SOURCE_DATASET_ID/operations/OPERATION_ID"
}

回應會包含作業名稱。您可以使用 Operation get 方法追蹤作業狀態：

$cred = gcloud auth print-access-token
$headers = @{ Authorization = "Bearer $cred" }

Invoke-WebRequest `
  -Method Get `
  -Headers $headers `
  -ContentType: "application/json; charset=utf-8" `
  -Uri "https://healthcare.googleapis.com/v1/projects/PROJECT_ID/locations/REGION/datasets/SOURCE_DATASET_ID/operations/OPERATION_ID" | Select-Object -Expand Content

如果要求成功，伺服器會以 JSON 格式傳回回應。去識別化程序完成後，回應會包含 "done": true。

{
  "name": "projects/PROJECT_ID/locations/REGION/datasets/SOURCE_DATASET_ID/operations/OPERATION_NUMBER",
  "metadata": {
    "@type": "type.googleapis.com/google.cloud.healthcare.v1.OperationMetadata",
    "apiMethodName": "google.cloud.healthcare.v1.dataset.DatasetService.DeidentifyDataset",
    "createTime": "CREATE_TIME",
    "endTime": "END_TIME",
    "logsUrl": "https://console.cloud.google.com/logs/viewer/CLOUD_LOGGING_URL"
  },
  "done": true,
  "response": {
    "@type": "type.googleapis.com/google.cloud.healthcare.v1.deidentify.DeidentifySummary",
    "successStoreCount": "1",
    "successResourceCount": "1"
  }
}

接下來，您可以使用病患 ID，在新的目的地資料集中取得病患資源的詳細資料：

$cred = gcloud auth print-access-token
$headers = @{ Authorization = "Bearer $cred" }

Invoke-RestMethod `
  -Method Get `
  -Headers $headers `
  -ContentType: "application/fhir+json; charset=utf-8" `
  -Uri "https://healthcare.googleapis.com/v1/projects/PROJECT_ID/locations/REGION/datasets/DESTINATION_DATASET_ID/fhirStores/FHIR_STORE_ID/fhir/Patient/r77433dd-dkeuc-633743nfd-383nfdsjds732" | ConvertTo-Json

伺服器會傳回以下回應：

{
  "address": [
    {
      "city": "",
      "district": "",
      "line": [
        ""
      ],
      "period": {
        "start": "1990-12-05"
      },
      "postalCode": "",
      "state": "CA",
      "text": "",
      "type": "both",
      "use": "home"
    }
  ],
  "birthDate": "1981-02-24",
  "gender": "female",
  "id": "r77433dd-dkeuc-633743nfd-383nfdsjds732",
  "meta": {
    "lastUpdated": "2018-01-01T2018-01-01T00:00:00+00:00",
    "versionId": "MTU0MDU4NTcxNjI2MTUxNDAwMA"
  },
  "name": [
    {
      "family": "",
      "given": [
        ""
      ],
      "use": "official"
    }
  ],
  "resourceType": "Patient",
  "text": {
    "div": "<div><p><b>Patient</b></p><p><b>Name</b>: [PERSON_NAME][PERSON_NAME][PERSON_NAME]</p><p><b>DateOfBirth</b>: 1981-02-24</p><p><b>Gender</b>: Female</p></div>",
    "status": "generated"
  }
}

您可以看到下列值已轉換為去識別資源的值：

使用日期移轉技巧，在 birthDate 欄位中提供新的值，差異為 100 天。
address.city 中的值已被遮蓋。
address.district 中的值已被遮蓋。
address.line 中的值已被遮蓋。
address.postalCode 中的值已被遮蓋。
address.text 中的值已被遮蓋。
name.family 中的值已被遮蓋。
name.given 中的值已被遮蓋。
text.div 欄位中的自由文字已修改，以便將病患名稱替換為其 infoType [PERSON_NAME]。患者的出生日期值會以與 birthDate 欄位相同的方式轉換。

將特定 FHIR 路徑去識別化

如要指定要去識別哪些 FHIR 路徑，以及如何轉換這些路徑，請在 FhirConfig 物件中設定 fieldMetadataList。

在 fieldMetadataList 中，您可以在 paths 清單中指定以逗號分隔的欄位名稱清單或 FHIR 資源類型名稱。接下來，您可以指定要套用至 paths 中所有項目的 Action 值。如要查看可能的值，請參閱 Action 說明文件。

如要瞭解如何在 Cloud Healthcare API 中設定 paths 欄位，請參閱 paths。paths 中值的格式會根據 FHIRPath 而定。

預設的 FHIR 去識別化設定檔

根據預設，如果您未在 fieldMetadataList 中指定任何 FHIR 路徑，Cloud Healthcare API 會套用下列去識別化設定檔，選取及轉換 FHIR 路徑。所套用的設定檔取決於您使用的 FHIR 版本。您可以展開下列章節，查看所用版本的設定檔。您也可以下載設定檔 (DSTU2、STU3 和 R4)。

DSTU2

fhir {
  field_metadata_list {
    paths: "AuditEvent.Event.outcomeDesc"
    paths: "AuditEvent.Participant.altId"
    paths: "AuditEvent.Participant.Network.address"
    paths: "AuditEvent.Source.site"
    paths: "CarePlan.Activity.Detail.Scheduled.string"
    paths: "Claim.school"
    paths: "Claim.Coverage.businessArrangement"
    paths: "ClaimResponse.Coverage.businessArrangement"
    paths: "Composition.title"
    paths: "Composition.Section.title"
    paths: "ConceptMap.publisher"
    paths: "ConceptMap.copyright"
    paths: "Condition.Onset.string"
    paths: "Condition.Abatement.string"
    paths: "Conformance.publisher"
    paths: "Conformance.copyright"
    paths: "Contract.Signer.signature"
    paths: "Coverage.group"
    paths: "Coverage.plan"
    paths: "Coverage.subPlan"
    paths: "DataElement.publisher"
    paths: "DataElement.copyright"
    paths: "Device.udi"
    paths: "FamilyMemberHistory.Born.string"
    paths: "FamilyMemberHistory.Deceased.string"
    paths: "FamilyMemberHistory.Condition.Onset.string"
    paths: "HealthcareService.serviceName"
    paths: "HealthcareService.publicKey"
    paths: "ImagingStudy.Series.Instance.title"
    paths: "ImplementationGuide.publisher"
    paths: "ImplementationGuide.copyright"
    paths: "List.title"
    paths: "NamingSystem.publisher"
    paths: "NamingSystem.responsible"
    paths: "OperationDefinition.publisher"
    paths: "Questionnaire.publisher"
    paths: "Questionnaire.Group.linkId"
    paths: "SearchParameter.publisher"
    paths: "StructureDefinition.publisher"
    paths: "StructureDefinition.copyright"
    paths: "ValueSet.publisher"
    paths: "ValueSet.copyright"
    paths: "Address.text"
    paths: "Address.line"
    paths: "Address.city"
    paths: "Address.district"
    paths: "Address.postalCode"
    paths: "Annotation.text"
    paths: "Annotation.Author.string"
    paths: "ContactPoint.value"
    paths: "HumanName"
    paths: "Identifier.value"
    action: TRANSFORM
  }
  field_metadata_list {
    paths: "Appointment.comment"
    paths: "AppointmentResponse.comment"
    paths: "Claim.Coverage.preAuthRef"
    paths: "ClaimResponse.Note.text"
    paths: "ClaimResponse.Coverage.preAuthRef"
    paths: "ClinicalImpression.summary"
    paths: "ClinicalImpression.prognosis"
    paths: "ClinicalImpression.Finding.cause"
    paths: "ClinicalImpression.RuledOut.reason"
    paths: "Communication.Payload.Content.string"
    paths: "CommunicationRequest.Payload.Content.string"
    paths: "Condition.notes"
    paths: "Conformance.Rest.documentation"
    paths: "Conformance.Rest.Resource.Interaction.documentation"
    paths: "Conformance.Rest.Resource.SearchParam.documentation"
    paths: "Conformance.Rest.Interaction.documentation"
    paths: "Conformance.Messaging.documentation"
    paths: "Conformance.Messaging.Event.documentation"
    paths: "Conformance.Document.documentation"
    paths: "Contract.Term.text"
    paths: "DetectedIssue.detail"
    paths: "DeviceComponent.ProductionSpecification.productionSpec"
    paths: "DeviceUseRequest.notes"
    paths: "DeviceUseStatement.notes"
    paths: "DiagnosticReport.conclusion"
    paths: "DiagnosticReport.Image.comment"
    paths: "HealthcareService.comment"
    paths: "HealthcareService.extraDetails"
    paths: "HealthcareService.eligibilityNote"
    paths: "HealthcareService.programName"
    paths: "HealthcareService.availabilityExceptions"
    paths: "List.note"
    paths: "MedicationAdministration.note"
    paths: "MedicationDispense.note"
    paths: "MedicationOrder.note"
    paths: "MedicationStatement.note"
    paths: "NutritionOrder.OralDiet.instruction"
    paths: "NutritionOrder.Supplement.instruction"
    paths: "Observation.comments"
    paths: "Observation.Value.string"
    paths: "OperationDefinition.notes"
    paths: "OperationOutcome.Issue.diagnostics"
    paths: "PaymentReconciliation.disposition"
    paths: "PaymentReconciliation.Note.text"
    paths: "ProcessResponse.Notes.text"
    paths: "Provenance.Entity.display"
    paths: "Questionnaire.Group.text"
    paths: "Questionnaire.Group.Question.text"
    paths: "QuestionnaireResponse.Group.text"
    paths: "QuestionnaireResponse.Group.Question.text"
    paths: "QuestionnaireResponse.Group.Question.Answer.Value.string"
    paths: "RiskAssessment.mitigation"
    paths: "RiskAssessment.Prediction.rationale"
    paths: "Schedule.comment"
    paths: "Slot.comment"
    paths: "Specimen.Collection.comment"
    paths: "StructureDefinition.requirements"
    paths: "StructureDefinition.Mapping.comments"
    paths: "Subscription.criteria"
    paths: "Subscription.reason"
    paths: "Subscription.error"
    paths: "Subscription.Channel.header"
    paths: "ValueSet.requirements"
    paths: "ValueSet.Expansion.Parameter.Value.string"
    paths: "VisionPrescription.Dispense.notes"
    paths: "Attachment.title"
    paths: "Reference.display"
    action: INSPECT_AND_TRANSFORM
  }
}

STU3

fhir {
  field_metadata_list {
    paths: "ActivityDefinition.publisher"
    paths: "AllergyIntolerance.Onset.string"
    paths: "Appointment.comment"
    paths: "AppointmentResponse.comment"
    paths: "AuditEvent.outcomeDesc"
    paths: "AuditEvent.Agent.altId"
    paths: "AuditEvent.Agent.Network.address"
    paths: "AuditEvent.Source.site"
    paths: "CapabilityStatement.title"
    paths: "CapabilityStatement.publisher"
    paths: "CarePlan.title"
    paths: "Claim.Insurance.businessArrangement"
    paths: "ClaimResponse.Insurance.businessArrangement"
    paths: "CodeSystem.title"
    paths: "CodeSystem.publisher"
    paths: "CompartmentDefinition.title"
    paths: "CompartmentDefinition.publisher"
    paths: "Composition.title"
    paths: "Composition.Section.title"
    paths: "ConceptMap.title"
    paths: "ConceptMap.publisher"
    paths: "Condition.Onset.string"
    paths: "Condition.Abatement.string"
    paths: "Coverage.subscriberId"
    paths: "Coverage.dependent"
    paths: "Coverage.Group.group"
    paths: "Coverage.Group.subGroup"
    paths: "Coverage.Group.plan"
    paths: "Coverage.Group.subPlan"
    paths: "Coverage.Group.class"
    paths: "Coverage.Group.subClass"
    paths: "DataElement.publisher"
    paths: "DataElement.title"
    paths: "Device.Udi.deviceIdentifier"
    paths: "Device.Udi.carrierHRF"
    paths: "EligibilityRequest.businessArrangement"
    paths: "ExpansionProfile.publisher"
    paths: "ExplanationOfBenefit.Insurance.preAuthRef"
    paths: "FamilyMemberHistory.bornDate"
    paths: "FamilyMemberHistory.Born.string"
    paths: "FamilyMemberHistory.AgeType.string"
    paths: "FamilyMemberHistory.deceasedDate"
    paths: "FamilyMemberHistory.Deceased.string"
    paths: "FamilyMemberHistory.Condition.Onset.string"
    paths: "GraphDefinition.publisher"
    paths: "ImagingStudy.Series.Instance.title"
    paths: "ImplementationGuide.publisher"
    paths: "Library.title"
    paths: "Library.publisher"
    paths: "List.title"
    paths: "Location.name"
    paths: "Location.alias"
    paths: "Measure.title"
    paths: "Measure.publisher"
    paths: "MessageDefinition.title"
    paths: "MessageDefinition.publisher"
    paths: "NamingSystem.publisher"
    paths: "NamingSystem.responsible"
    paths: "OperationDefinition.publisher"
    paths: "Organization.alias"
    paths: "Patient.birthDate"
    paths: "Patient.deceased.dateTime"
    paths: "Person.birthDate"
    paths: "PlanDefinition.title"
    paths: "PlanDefinition.publisher"
    paths: "PlanDefinition.Action.title"
    paths: "Practitioner.birthDate"
    paths: "Questionnaire.title"
    paths: "Questionnaire.publisher"
    paths: "ResearchStudy.title"
    paths: "SearchParameter.publisher"
    paths: "ServiceDefinition.title"
    paths: "ServiceDefinition.publisher"
    paths: "StructureDefinition.title"
    paths: "StructureDefinition.publisher"
    paths: "StructureMap.title"
    paths: "StructureMap.publisher"
    paths: "TestReport.tester"
    paths: "TestReport.Participant.display"
    paths: "TestReport.Setup.SetupAction.Assert.detail"
    paths: "ValueSet.title"
    paths: "ValueSet.publisher"
    paths: "Address.text"
    paths: "Address.line"
    paths: "Address.city"
    paths: "Address.district"
    paths: "Address.postalCode"
    paths: "Annotation.text"
    paths: "Annotation.Author.string"
    paths: "ContactPoint.value"
    paths: "HumanName"
    paths: "Identifier.value"
    paths: "RelatedPerson.birthDate"
    action: TRANSFORM
  }
  field_metadata_list {
    paths: "AdverseEvent.SuspectEntity.causalityProductRelatedness"
    paths: "CapabilityStatement.Rest.documentation"
    paths: "CapabilityStatement.Rest.Resource.ResourceInteraction.documentation"
    paths: "CapabilityStatement.Rest.Resource.SearchParam.documentation"
    paths: "CapabilityStatement.Rest.SystemInteraction.documentation"
    paths: "CapabilityStatement.Messaging.documentation"
    paths: "CapabilityStatement.Messaging.Event.documentation"
    paths: "CapabilityStatement.Document.documentation"
    paths: "CarePlan.Activity.Detail.statusReason"
    paths: "CarePlan.Activity.Detail.Scheduled.string"
    paths: "ChargeItem.overrideReason"
    paths: "Claim.SpecialCondition.Value.string"
    paths: "Claim.Insurance.preAuthRef"
    paths: "ClaimResponse.Note.text"
    paths: "ClaimResponse.Insurance.preAuthRef"
    paths: "ClinicalImpression.summary"
    paths: "ClinicalImpression.Finding.basis"
    paths: "Communication.Payload.Content.string"
    paths: "CommunicationRequest.Payload.Content.string"
    paths: "CompartmentDefinition.Resource.documentation"
    paths: "Contract.Term.text"
    paths: "Coverage.network"
    paths: "Coverage.Group.groupDisplay"
    paths: "Coverage.Group.subGroupDisplay"
    paths: "Coverage.Group.planDisplay"
    paths: "Coverage.Group.subPlanDisplay"
    paths: "Coverage.Group.classDisplay"
    paths: "Coverage.Group.subClassDisplay"
    paths: "DetectedIssue.detail"
    paths: "DeviceComponent.ProductionSpecification.productionSpec"
    paths: "DiagnosticReport.conclusion"
    paths: "DiagnosticReport.Image.comment"
    paths: "ExplanationOfBenefit.SupportingInformation.Value.string"
    paths: "ExplanationOfBenefit.Note.text"
    paths: "Goal.statusReason"
    paths: "HealthcareService.comment"
    paths: "HealthcareService.extraDetails"
    paths: "HealthcareService.eligibilityNote"
    paths: "HealthcareService.programName"
    paths: "HealthcareService.availabilityExceptions"
    paths: "ImplementationGuide.Page.title"
    paths: "Library.usage"
    paths: "MeasureReport.Group.Stratifier.StratifierGroup.value"
    paths: "NamingSystem.UniqueId.comment"
    paths: "NutritionOrder.OralDiet.instruction"
    paths: "NutritionOrder.Supplement.instruction"
    paths: "NutritionOrder.EnteralFormula.administrationInstruction"
    paths: "Observation.comment"
    paths: "Observation.Value.string"
    paths: "OperationDefinition.comment"
    paths: "OperationOutcome.Issue.diagnostics"
    paths: "Parameters.Parameter.Value.string"
    paths: "PaymentReconciliation.disposition"
    paths: "PaymentReconciliation.Notes.text"
    paths: "PlanDefinition.usage"
    paths: "PractitionerRole.availabilityExceptions"
    paths: "ProcessResponse.ProcessNote.text"
    paths: "Questionnaire.Item.text"
    paths: "Questionnaire.Item.Option.Value.string"
    paths: "Questionnaire.Item.Initial.string"
    paths: "QuestionnaireResponse.Item.text"
    paths: "QuestionnaireResponse.Item.Answer.Value.string"
    paths: "RequestGroup.Action.textEquivalent"
    paths: "ResearchSubject.assignedArm"
    paths: "ResearchSubject.actualArm"
    paths: "RiskAssessment.mitigation"
    paths: "RiskAssessment.comment"
    paths: "RiskAssessment.Prediction.rationale"
    paths: "Schedule.comment"
    paths: "ServiceDefinition.usage"
    paths: "Slot.comment"
    paths: "Subscription.reason"
    paths: "Subscription.criteria"
    paths: "Subscription.error"
    paths: "Subscription.Channel.header"
    paths: "Task.Parameter.Value.string"
    paths: "Task.Output.Value.string"
    paths: "ValueSet.Compose.ConceptSet.ConceptReference.Designation.value"
    paths: "Attachment.title"
    paths: "Reference.display"
    paths: "Narrative.div"
    action: INSPECT_AND_TRANSFORM
  }
}
text {
  transformations {
    replace_with_info_type_config {
    }
  }
  transformations {
    info_types: "DATE"
    date_shift_config {
    }
  }
}

fhir {
  field_metadata_list {
    paths: "ActivityDefinition.publisher"
    paths: "AllergyIntolerance.OnsetX.string"
    paths: "Appointment.comment"
    paths: "AppointmentResponse.comment"
    paths: "AuditEvent.outcomeDesc"
    paths: "AuditEvent.Agent.altId"
    paths: "AuditEvent.Agent.Network.address"
    paths: "AuditEvent.Source.site"
    paths: "CapabilityStatement.title"
    paths: "CapabilityStatement.publisher"
    paths: "CarePlan.title"
    paths: "ChargeItemDefinition.title"
    paths: "ChargeItemDefinition.publisher"
    paths: "Claim.Insurance.businessArrangement"
    paths: "ClaimResponse.Insurance.businessArrangement"
    paths: "CodeSystem.title"
    paths: "CodeSystem.publisher"
    paths: "CompartmentDefinition.publisher"
    paths: "Composition.title"
    paths: "Composition.Section.title"
    paths: "ConceptMap.title"
    paths: "ConceptMap.publisher"
    paths: "Condition.OnsetX.string"
    paths: "Condition.AbatementX.string"
    paths: "Contract.title"
    paths: "Contract.subtitle"
    paths: "Coverage.subscriberId"
    paths: "Coverage.dependent"
    paths: "Coverage.network"
    paths: "Device.distinctIdentifier"
    paths: "Device.serialNumber"
    paths: "Device.UdiCarrier.deviceIdentifier"
    paths: "Device.UdiCarrier.carrierHRF"
    paths: "DeviceDefinition.UdiDeviceIdentifier.deviceIdentifier"
    paths: "EffectEvidenceSynthesis.title"
    paths: "EffectEvidenceSynthesis.publisher"
    paths: "EventDefinition.title"
    paths: "EventDefinition.subtitle"
    paths: "EventDefinition.publisher"
    paths: "Evidence.title"
    paths: "Evidence.shortTitle"
    paths: "Evidence.subtitle"
    paths: "Evidence.publisher"
    paths: "EvidenceVariable.title"
    paths: "EvidenceVariable.shortTitle"
    paths: "EvidenceVariable.subtitle"
    paths: "EvidenceVariable.publisher"
    paths: "ExampleScenario.publisher"
    paths: "ExplanationOfBenefit.preAuthRef"
    paths: "ExplanationOfBenefit.Insurance.preAuthRef"
    paths: "FamilyMemberHistory.BornX.string"
    paths: "FamilyMemberHistory.AgeX.string"
    paths: "FamilyMemberHistory.DeceasedX.string"
    paths: "FamilyMemberHistory.Condition.OnsetX.string"
    paths: "GraphDefinition.publisher"
    paths: "ImagingStudy.Series.Instance.title"
    paths: "Immunization.OccurrenceX.string"
    paths: "ImplementationGuide.title"
    paths: "ImplementationGuide.publisher"
    paths: "ImplementationGuide.Manifest.ManifestPage.title"
    paths: "Library.title"
    paths: "Library.subtitle"
    paths: "Library.publisher"
    paths: "List.title"
    paths: "Location.alias"
    paths: "Measure.title"
    paths: "Measure.subtitle"
    paths: "Measure.publisher"
    paths: "MessageDefinition.title"
    paths: "MessageDefinition.publisher"
    paths: "NamingSystem.publisher"
    paths: "NamingSystem.responsible"
    paths: "OperationDefinition.title"
    paths: "OperationDefinition.publisher"
    paths: "Organization.alias"
    paths: "PlanDefinition.title"
    paths: "PlanDefinition.subtitle"
    paths: "PlanDefinition.publisher"
    paths: "PlanDefinition.Action.title"
    paths: "Procedure.PerformedX.string"
    paths: "Questionnaire.title"
    paths: "Questionnaire.publisher"
    paths: "ResearchDefinition.title"
    paths: "ResearchDefinition.shortTitle"
    paths: "ResearchDefinition.subtitle"
    paths: "ResearchDefinition.publisher"
    paths: "ResearchElementDefinition.title"
    paths: "ResearchElementDefinition.shortTitle"
    paths: "ResearchElementDefinition.subtitle"
    paths: "ResearchElementDefinition.publisher"
    paths: "ResearchStudy.title"
    paths: "RiskEvidenceSynthesis.title"
    paths: "RiskEvidenceSynthesis.publisher"
    paths: "SearchParameter.publisher"
    paths: "StructureDefinition.title"
    paths: "StructureDefinition.publisher"
    paths: "StructureMap.title"
    paths: "StructureMap.publisher"
    paths: "TerminologyCapabilities.title"
    paths: "TerminologyCapabilities.publisher"
    paths: "ValueSet.title"
    paths: "ValueSet.publisher"
    paths: "Address.text"
    paths: "Address.line"
    paths: "Address.city"
    paths: "Address.district"
    paths: "Address.postalCode"
    paths: "Annotation.AuthorX.string"
    paths: "ContactPoint.value"
    paths: "HumanName.text"
    paths: "HumanName.family"
    paths: "HumanName.given"
    paths: "HumanName.prefix"
    paths: "HumanName.suffix"
    paths: "Identifier.value"
    action: TRANSFORM
  }
  field_metadata_list {
    paths: "AdverseEvent.SuspectEntity.Causality.productRelatedness"
    paths: "Appointment.patientInstruction"
    paths: "AuditEvent.Entity.Detail.ValueX.string"
    paths: "CarePlan.Activity.Detail.ScheduledX.string"
    paths: "ChargeItem.overrideReason"
    paths: "Claim.SupportingInformation.ValueX.string"
    paths: "Claim.Insurance.preAuthRef"
    paths: "ClaimResponse.preAuthRef"
    paths: "ClaimResponse.Note.text"
    paths: "ClinicalImpression.summary"
    paths: "ClinicalImpression.Finding.basis"
    paths: "Communication.Payload.ContentX.string"
    paths: "CommunicationRequest.Payload.ContentX.string"
    paths: "CompartmentDefinition.Resource.documentation"
    paths: "Contract.Term.text"
    paths: "Contract.Term.ContractOffer.text"
    paths: "Contract.Term.ContractOffer.Answer.ValueX.string"
    paths: "Contract.Term.ContractAsset.condition"
    paths: "Contract.Term.ContractAsset.text"
    paths: "Contract.Term.ContractAsset.AssetContext.text"
    paths: "Contract.Term.ContractAsset.ValuedItem.payment"
    paths: "Contract.Term.Action.reason"
    paths: "CoverageEligibilityResponse.disposition"
    paths: "CoverageEligibilityResponse.preAuthRef"
    paths: "DetectedIssue.detail"
    paths: "DiagnosticReport.conclusion"
    paths: "DiagnosticReport.Media.comment"
    paths: "ExplanationOfBenefit.SupportingInformation.ValueX.string"
    paths: "ExplanationOfBenefit.Note.text"
    paths: "Goal.statusReason"
    paths: "HealthcareService.comment"
    paths: "HealthcareService.availabilityExceptions"
    paths: "ImplementationGuide.Definition.Page.title"
    paths: "Invoice.cancelledReason"
    paths: "Library.usage"
    paths: "MedicationKnowledge.AdministrationGuidelines.PatientCharacteristics.value"
    paths: "NamingSystem.UniqueId.comment"
    paths: "NutritionOrder.OralDiet.instruction"
    paths: "NutritionOrder.Supplement.instruction"
    paths: "NutritionOrder.EnteralFormula.administrationInstruction"
    paths: "Observation.ValueX.string"
    paths: "Observation.Component.ValueX.string"
    paths: "ObservationDefinition.QualifiedInterval.condition"
    paths: "OperationOutcome.Issue.diagnostics"
    paths: "Parameters.Parameter.ValueX.string"
    paths: "PaymentReconciliation.disposition"
    paths: "PaymentReconciliation.Notes.text"
    paths: "PlanDefinition.usage"
    paths: "PractitionerRole.availabilityExceptions"
    paths: "Questionnaire.Item.text"
    paths: "Questionnaire.Item.AnswerOption.ValueX.string"
    paths: "Questionnaire.Item.Initial.ValueX.string"
    paths: "QuestionnaireResponse.Item.text"
    paths: "QuestionnaireResponse.Item.Answer.ValueX.string"
    paths: "RequestGroup.Action.textEquivalent"
    paths: "ResearchDefinition.comment"
    paths: "ResearchDefinition.usage"
    paths: "ResearchElementDefinition.comment"
    paths: "ResearchElementDefinition.usage"
    paths: "ResearchElementDefinition.Characteristic.studyEffectiveDescription"
    paths: "ResearchElementDefinition.Characteristic.participantEffectiveDescription"
    paths: "ResearchSubject.assignedArm"
    paths: "ResearchSubject.actualArm"
    paths: "RiskAssessment.mitigation"
    paths: "RiskAssessment.Prediction.rationale"
    paths: "Schedule.comment"
    paths: "ServiceRequest.patientInstruction"
    paths: "Slot.comment"
    paths: "SpecimenDefinition.timeAspect"
    paths: "Subscription.reason"
    paths: "Subscription.criteria"
    paths: "Subscription.error"
    paths: "Subscription.Channel.header"
    paths: "Task.Parameter.ValueX.string"
    paths: "Task.Output.ValueX.string"
    paths: "ValueSet.Compose.ConceptSet.ConceptReference.Designation.value"
    paths: "Attachment.title"
    paths: "Reference.display"
    action: INSPECT_AND_TRANSFORM
  }
}
text {
  transformations {
    replace_with_info_type_config {
    }
  }
  transformations {
    info_types: "DATE"
    date_shift_config {
    }
  }
}

使用路徑去識別資源

以下範例說明如何根據下列條件設定 Patient 資源去識別化：

患者資源的 HumanName (DSTU2、STU3 和 R4) 值會自動套用 TRANSFORM (redaction)。對於示例患者，HumanName 值為 "family": "Smith" 和 "given": [ "Darcy" ]。

fieldMetadataList 內的 paths 清單中沒有提供其他值，因此其餘資料不會變更。

下列範例說明如何去識別「Patient」資源的「HumanName」值：

curl

curl -X POST \
    -H "Authorization: Bearer $(gcloud auth application-default print-access-token)" \
    -H "Content-Type: application/json; charset=utf-8" \
    --data "{
      'destinationDataset': 'projects/PROJECT_ID/locations/LOCATION/datasets/DESTINATION_DATASET_ID',
      'config': {
        'fhir': {
          'fieldMetadataList': [
            {
              'paths': [
                'Patient.HumanName'
              ],
              'action': 'TRANSFORM'
            }
          ]
        }
      }
    }" "https://healthcare.googleapis.com/v1/projects/PROJECT_ID/locations/LOCATION/datasets/SOURCE_DATASET_ID:deidentify"

如果要求成功，伺服器會以 JSON 格式傳回：

{
  "name": "projects/PROJECT_ID/locations/REGION/datasets/SOURCE_DATASET_ID/operations/OPERATION_ID"
}

回應會包含作業名稱。您可以使用 Operation get 方法追蹤作業狀態：

curl -X GET \
    -H "Authorization: Bearer $(gcloud auth print-access-token)" \
    -H "Content-Type: application/json; charset=utf-8" \
    "https://healthcare.googleapis.com/v1/projects/PROJECT_ID/locations/REGION/datasets/SOURCE_DATASET_ID/operations/OPERATION_ID"

如果要求成功，伺服器會以 JSON 格式傳回回應。去識別化程序完成後，回應會包含 "done": true。

{
  "name": "projects/PROJECT_ID/locations/REGION/datasets/SOURCE_DATASET_ID/operations/OPERATION_ID",
  "metadata": {
    "@type": "type.googleapis.com/google.cloud.healthcare.v1.OperationMetadata",
    "apiMethodName": "google.cloud.healthcare.v1.dataset.DatasetService.DeidentifyDataset",
    "createTime": "CREATE_TIME",
    "endTime": "END_TIME",
    "logsUrl": "https://console.cloud.google.com/logs/viewer/CLOUD_LOGGING_URL"
  },
  "done": true,
  "response": {
    "@type": "type.googleapis.com/google.cloud.healthcare.v1.deidentify.DeidentifySummary",
    "successStoreCount": "1",
    "successResourceCount": "1"
  }
}

接下來，您可以使用病患 ID，在新的目的地資料集中取得病患資源的詳細資料：

curl -X GET \
     -H "Authorization: Bearer $(gcloud auth print-access-token)" \
     -H "Content-Type: application/fhir+json; charset=utf-8" \
     "https://healthcare.googleapis.com/v1/projects/PROJECT_ID/locations/REGION/datasets/DESTINATION_DATASET_ID/fhirStores/FHIR_STORE_ID/fhir/Patient/r77433dd-dkeuc-633743nfd-383nfdsjds732"

伺服器會傳回以下回應：

{
  "address": [
    {
      "city": "Anycity",
      "district": "Anydistrict",
      "line": [
        "123 Main Street"
      ],
      "period": {
        "start": "1990-12-05"
      },
      "postalCode": "12345",
      "state": "CA",
      "text": "123 Main Street Anycity, Anydistrict, CA 12345",
      "type": "both",
      "use": "home"
    }
  ],
  "birthDate": "1980-12-05",
  "gender": "female",
  "id": "r77433dd-dkeuc-633743nfd-383nfdsjds732",
  "meta": {
    "lastUpdated": "2018-01-01T2018-01-01T00:00:00+00:00",
    "versionId": "MTU0MDU4NTcxNjI2MTUxNDAwMAA"
  },
  "name": [
    {
      "family": "",
      "given": [
        ""
      ],
      "use": "official"
    }
  ],
  "resourceType": "Patient",
  "text": {
    "div": "<div><p><b>Patient</b></p><p><b>Name</b>: Smith, Darcy</p><p><b>DateOfBirth</b>: 1980-12-05</p><p><b>Gender</b>: Female</p></div>",
    "status": "generated"
  }
}

PowerShell

$cred = gcloud auth application-default print-access-token
$headers = @{ Authorization = "Bearer $cred" }

Invoke-WebRequest `
  -Method Post `
  -Headers $headers `
  -ContentType: "application/json; charset=utf-8" `
  -Body "{
    'destinationDataset': 'projects/PROJECT_ID/locations/LOCATION/datasets/DESTINATION_DATASET_ID',
    'config': {
      'fhir': {
        'fieldMetadataList': [
          {
            'paths': [
              'Patient.HumanName'
            ],
            'action': 'TRANSFORM'
          }
        ]
      }
    }
  }" `
  -Uri "https://healthcare.googleapis.com/v1/projects/PROJECT_ID/locations/LOCATION/datasets/SOURCE_DATASET_ID:deidentify" | Select-Object -Expand Content

如果要求成功，伺服器會以 JSON 格式傳回：

{
  "name": "projects/PROJECT_ID/locations/REGION/datasets/SOURCE_DATASET_ID/operations/OPERATION_ID"
}

回應會包含作業名稱。您可以使用 Operation get 方法追蹤作業狀態：

$cred = gcloud auth print-access-token
$headers = @{ Authorization = "Bearer $cred" }

Invoke-WebRequest `
  -Method Get `
  -Headers $headers `
  -ContentType: "application/json; charset=utf-8" `
  -Uri "https://healthcare.googleapis.com/v1/projects/PROJECT_ID/locations/REGION/datasets/SOURCE_DATASET_ID/operations/OPERATION_ID" | Select-Object -Expand Content

如果要求成功，伺服器會以 JSON 格式傳回回應。去識別化程序完成後，回應會包含 "done": true。

{
  "name": "projects/PROJECT_ID/locations/REGION/datasets/SOURCE_DATASET_ID/operations/OPERATION_NUMBER",
  "metadata": {
    "@type": "type.googleapis.com/google.cloud.healthcare.v1.OperationMetadata",
    "apiMethodName": "google.cloud.healthcare.v1.dataset.DatasetService.DeidentifyDataset",
    "createTime": "CREATE_TIME",
    "endTime": "END_TIME",
    "logsUrl": "https://console.cloud.google.com/logs/viewer/CLOUD_LOGGING_URL"
  },
  "done": true,
  "response": {
    "@type": "type.googleapis.com/google.cloud.healthcare.v1.deidentify.DeidentifySummary",
    "successStoreCount": "1",
    "successResourceCount": "1"
  }
}

接下來，您可以使用病患 ID，在新的目的地資料集中取得病患資源的詳細資料：

$cred = gcloud auth print-access-token
$headers = @{ Authorization = "Bearer $cred" }

Invoke-RestMethod `
  -Method Get `
  -Headers $headers `
  -ContentType: "application/fhir+json; charset=utf-8" `
  -Uri "https://healthcare.googleapis.com/v1/projects/PROJECT_ID/locations/REGION/datasets/DESTINATION_DATASET_ID/fhirStores/FHIR_STORE_ID/fhir/Patient/r77433dd-dkeuc-633743nfd-383nfdsjds732" | ConvertTo-Json

伺服器會傳回以下回應：

{
  "address": [
    {
      "city": "Anycity",
      "district": "Anydistrict",
      "line": [
        "123 Main Street"
      ],
      "period": {
        "start": "1990-12-05"
      },
      "postalCode": "12345",
      "state": "CA",
      "text": "123 Main Street Anycity, Anydistrict, CA 12345",
      "type": "both",
      "use": "home"
    }
  ],
  "birthDate": "1980-12-05",
  "gender": "female",
  "id": "r77433dd-dkeuc-633743nfd-383nfdsjds732",
  "meta": {
    "lastUpdated": "2018-01-01T2018-01-01T00:00:00+00:00",
    "versionId": "MTU0MDU4NTcxNjI2MTUxNDAwMAA"
  },
  "name": [
    {
      "family": "",
      "given": [
        ""
      ],
      "use": "official"
    }
  ],
  "resourceType": "Patient",
  "text": {
    "div": "<div><p><b>Patient</b></p><p><b>Name</b>: Smith, Darcy</p><p><b>DateOfBirth</b>: 1980-12-05</p><p><b>Gender</b>: Female</p></div>",
    "status": "generated"
  }
}

您可以看到下列值已轉換為去識別資源的值：

name.family 中的值已被遮蓋。
name.given 中的值已被遮蓋。

不過，與預設 FHIR 去識別化中的範例不同，患者的 address、birthDate 和 text.div 中的自由文字並未轉換，因為這些項目並未新增至 fieldMetadataList 中的 paths 清單。

使用 infoType 和原始轉換功能搭配 FHIR 資源

Cloud Healthcare API 可使用資訊類型 (infoTypes) 定義在 FHIR 資源上執行去識別化作業時掃描的資料。infoType 是一種機密資料，例如病患姓名、電子郵件地址、電話號碼、身分證號或信用卡號碼。Cloud Healthcare API 去識別化作業中使用的 infoType 包括 Cloud Data Loss Prevention 中的 infoType。

原始轉換是用於轉換輸入值的規則。

預設的 FHIR infoType

將 FHIR 資料去識別化時，系統會使用以下預設的 infoType：

AGE
CREDIT_CARD_NUMBER
DATE
EMAIL_ADDRESS
IP_ADDRESS
LOCATION
MAC_ADDRESS
PASSPORT
PERSON_NAME
PHONE_NUMBER
SWIFT_CODE
US_DRIVERS_LICENSE_NUMBER
US_SOCIAL_SECURITY_NUMBER
US_VEHICLE_IDENTIFICATION_NUMBER
US_INDIVIDUAL_TAXPAYER_IDENTIFICATION_NUMBER

原始轉換選項

Cloud Healthcare API 原始轉換選項包括：

RedactConfig：透過移除的方式刪減值。
CharacterMaskConfig：將輸入字元替換為指定的固定字元，以完全或局部遮蔽字串。
DateShiftConfig：按隨機天數轉移日期，並提供讓相同背景資訊保持一致的選項。
CryptoHashConfig：使用 SHA-256 將輸入值替換為以 Base64 編碼表示的雜湊輸出字串，該字串是使用指定的資料加密金鑰產生。
ReplaceWithInfoTypeConfig：將輸入值替換為其 infoType 名稱。

在 `TextConfig` 中指定設定

InfoType 和原始轉換會在 InfoTypeTransformation 中指定，這是 TextConfig 中的物件。使用半形逗號分隔的值，指定 infoTypes 陣列中的 infoType。

您可以選擇是否指定 infoType。如果您未指定至少一個 infoType，轉換作業就會套用至資料中的所有內建 infoType。

如果您在 InfoTypeTransformation 中指定任何 infoType，請指定至少一個原始轉換。

以下各節將說明如何使用 InfoTypeTransformation 提供的原始轉換功能，搭配 infoTypes 自訂 FHIR 資源的去識別化方式。

`RedactConfig`

指定 redactConfig 會透過將值徹底移除的方式遮蓋指定值。redactConfig 訊息沒有引數；指定這個物件會啟用轉換。

下列範例說明如何在 Patient.text.div 欄位中遮蓋病患資源的出生日期。您可以使用 Patient.text.div 路徑和 redactConfig 轉換，設定 DATE infoType，藉此完成這項工作。

將去識別化要求傳送至 Cloud Healthcare API 後，Patient.text.div 值中的出生日期會被遮蓋。

curl

curl -X POST \
    -H "Authorization: Bearer $(gcloud auth application-default print-access-token)" \
    -H "Content-Type: application/json; charset=utf-8" \
    --data "{
      'destinationDataset': 'projects/PROJECT_ID/locations/LOCATION/datasets/DESTINATION_DATASET_ID',
      'config': {
        'fhir': {
          'fieldMetadataList': {
            'paths': [
              'Patient.text.div'
            ],
            'action': 'INSPECT_AND_TRANSFORM'
          }
        },
        'text': {
          'transformations': [
            {
              'infoTypes': [
                'DATE'
              ],
              'redactConfig': {}
            }
          ]
        }
      }
    }" "https://healthcare.googleapis.com/v1/projects/PROJECT_ID/locations/LOCATION/datasets/SOURCE_DATASET_ID:deidentify"

如果要求成功，伺服器會以 JSON 格式傳回：

{
  "name": "projects/PROJECT_ID/locations/REGION/datasets/SOURCE_DATASET_ID/operations/OPERATION_ID"
}

回應會包含作業名稱。您可以使用 Operation get 方法追蹤作業狀態：

curl -X GET \
    -H "Authorization: Bearer $(gcloud auth print-access-token)" \
    -H "Content-Type: application/json; charset=utf-8" \
    "https://healthcare.googleapis.com/v1/projects/PROJECT_ID/locations/REGION/datasets/SOURCE_DATASET_ID/operations/OPERATION_ID"

如果要求成功，伺服器會以 JSON 格式傳回回應。去識別化程序完成後，回應會包含 "done": true。

{
  "name": "projects/PROJECT_ID/locations/REGION/datasets/SOURCE_DATASET_ID/operations/OPERATION_ID",
  "metadata": {
    "@type": "type.googleapis.com/google.cloud.healthcare.v1.OperationMetadata",
    "apiMethodName": "google.cloud.healthcare.v1.dataset.DatasetService.DeidentifyDataset",
    "createTime": "CREATE_TIME",
    "endTime": "END_TIME",
    "logsUrl": "https://console.cloud.google.com/logs/viewer/CLOUD_LOGGING_URL"
  },
  "done": true,
  "response": {
    "@type": "type.googleapis.com/google.cloud.healthcare.v1.deidentify.DeidentifySummary",
    "successStoreCount": "1",
    "successResourceCount": "1"
  }
}

接下來，您可以使用病患 ID，在新的目的地資料集中取得病患資源的詳細資料：

curl -X GET \
     -H "Authorization: Bearer $(gcloud auth print-access-token)" \
     -H "Content-Type: application/fhir+json; charset=utf-8" \
     "https://healthcare.googleapis.com/v1/projects/PROJECT_ID/locations/REGION/datasets/DESTINATION_DATASET_ID/fhirStores/FHIR_STORE_ID/fhir/Patient/r77433dd-dkeuc-633743nfd-383nfdsjds732"

伺服器會傳回以下回應：

{
  "address": [
    {
      "city": "Anycity",
      "district": "Anydistrict",
      "line": [
        "123 Main Street"
      ],
      "period": {
        "start": "1990-12-05"
      },
      "postalCode": "12345",
      "state": "CA",
      "text": "123 Main Street Anycity, Anydistrict, CA 12345",
      "type": "both",
      "use": "home"
    }
  ],
  "birthDate": "1980-12-05",
  "gender": "female",
  "id": "r77433dd-dkeuc-633743nfd-383nfdsjds732",
  "meta": {
    "lastUpdated": "2018-01-01T2018-01-01T00:00:00+00:00",
    "versionId": "MTU0MDU4NTcxNjI2MTUxNDAwMAA"
  },
  "name": [
    {
      "family": "Smith",
      "given": [
        "Darcy"
      ],
      "use": "official"
    }
  ],
  "resourceType": "Patient",
  "text": {
    "div": "<div><p><b>Patient</b></p><p><b>Name</b>: Smith, Darcy</p><p><b>DateOfBirth</b>: </p><p><b>Gender</b>: Female</p></div>",
    "status": "generated"
  }
}

PowerShell

$cred = gcloud auth application-default print-access-token
$headers = @{ Authorization = "Bearer $cred" }

Invoke-WebRequest `
  -Method Post `
  -Headers $headers `
  -ContentType: "application/json; charset=utf-8" `
  -Body "{
    'destinationDataset': 'projects/PROJECT_ID/locations/LOCATION/datasets/DESTINATION_DATASET_ID',
    'config': {
      'fhir': {
        'fieldMetadataList': {
          'paths': [
            'Patient.text.div'
          ],
          'action': 'INSPECT_AND_TRANSFORM'
        }
      },
      'text': {
        'transformations': [
          {
            'infoTypes': [
              'DATE'
            ],
            'redactConfig': {}
          }
        ]
      }
    }
  }" `
  -Uri "https://healthcare.googleapis.com/v1/projects/PROJECT_ID/locations/LOCATION/datasets/SOURCE_DATASET_ID:deidentify" | Select-Object -Expand Content

如果要求成功，伺服器會以 JSON 格式傳回：

{
  "name": "projects/PROJECT_ID/locations/REGION/datasets/SOURCE_DATASET_ID/operations/OPERATION_ID"
}

回應會包含作業名稱。您可以使用 Operation get 方法追蹤作業狀態：

$cred = gcloud auth print-access-token
$headers = @{ Authorization = "Bearer $cred" }

Invoke-WebRequest `
  -Method Get `
  -Headers $headers `
  -ContentType: "application/json; charset=utf-8" `
  -Uri "https://healthcare.googleapis.com/v1/projects/PROJECT_ID/locations/REGION/datasets/SOURCE_DATASET_ID/operations/OPERATION_ID" | Select-Object -Expand Content

如果要求成功，伺服器會以 JSON 格式傳回回應。去識別化程序完成後，回應會包含 "done": true。

{
  "name": "projects/PROJECT_ID/locations/REGION/datasets/SOURCE_DATASET_ID/operations/OPERATION_NUMBER",
  "metadata": {
    "@type": "type.googleapis.com/google.cloud.healthcare.v1.OperationMetadata",
    "apiMethodName": "google.cloud.healthcare.v1.dataset.DatasetService.DeidentifyDataset",
    "createTime": "CREATE_TIME",
    "endTime": "END_TIME",
    "logsUrl": "https://console.cloud.google.com/logs/viewer/CLOUD_LOGGING_URL"
  },
  "done": true,
  "response": {
    "@type": "type.googleapis.com/google.cloud.healthcare.v1.deidentify.DeidentifySummary",
    "successStoreCount": "1",
    "successResourceCount": "1"
  }
}

接下來，您可以使用病患 ID，在新的目的地資料集中取得病患資源的詳細資料：

$cred = gcloud auth print-access-token
$headers = @{ Authorization = "Bearer $cred" }

Invoke-RestMethod `
  -Method Get `
  -Headers $headers `
  -ContentType: "application/fhir+json; charset=utf-8" `
  -Uri "https://healthcare.googleapis.com/v1/projects/PROJECT_ID/locations/REGION/datasets/DESTINATION_DATASET_ID/fhirStores/FHIR_STORE_ID/fhir/Patient/r77433dd-dkeuc-633743nfd-383nfdsjds732" | ConvertTo-Json

伺服器會傳回以下回應：

{
  "address": [
    {
      "city": "Anycity",
      "district": "Anydistrict",
      "line": [
        "123 Main Street"
      ],
      "period": {
        "start": "1990-12-05"
      },
      "postalCode": "12345",
      "state": "CA",
      "text": "123 Main Street Anycity, Anydistrict, CA 12345",
      "type": "both",
      "use": "home"
    }
  ],
  "birthDate": "1980-12-05",
  "gender": "female",
  "id": "r77433dd-dkeuc-633743nfd-383nfdsjds732",
  "meta": {
    "lastUpdated": "2018-01-01T2018-01-01T00:00:00+00:00",
    "versionId": "MTU0MDU4NTcxNjI2MTUxNDAwMAA"
  },
  "name": [
    {
      "family": "Smith",
      "given": [
        "Darcy"
      ],
      "use": "official"
    }
  ],
  "resourceType": "Patient",
  "text": {
    "div": "<div><p><b>Patient</b></p><p><b>Name</b>: Smith, Darcy</p><p><b>DateOfBirth</b>: </p><p><b>Gender</b>: Female</p></div>",
    "status": "generated"
  }
}

輸出結果顯示 text.div 中的 DateOfBirth 值已遭移除。這與「去識別特定 FHIR 路徑」中的範例相反，因為在該範例中，系統並未使用預設設定移除 text.div 中的 DateOfBirth 值。

`CharacterMaskConfig`

指定 characterMaskConfig 會將對應給定 infoType 的字串替換為指定的固定字元。舉例來說，您可以將病患姓名替換為一系列星號 (*)，而非遮蓋姓名或使用加密雜湊法進行轉換。請將固定字元指定為 maskingCharacter 欄位的值。

以下範例說明如何擴充在去識別特定 FHIR 路徑中使用的範例，但現在還包括使用 characterMaskConfig 轉換來設定 PERSON_NAME infoType。系統不會提供固定字元，因此遮蔽作業預設會使用星號。將去識別化要求傳送至 Cloud Healthcare API 後，name.family 和 name.given 中的值會替換為星號。

curl

curl -X POST \
    -H "Authorization: Bearer $(gcloud auth application-default print-access-token)" \
    -H "Content-Type: application/json; charset=utf-8" \
    --data "{
      'destinationDataset': 'projects/PROJECT_ID/locations/LOCATION/datasets/DESTINATION_DATASET_ID',
      'config': {
        'fhir': {
          'fieldMetadataList': {
            'paths': [
              'Patient.HumanName'
            ],
            'action': 'TRANSFORM'
          }
        },
        'text': {
          'transformations': [
            {
              'infoTypes': [
                'PERSON_NAME'
              ],
              'characterMaskConfig': {
                'maskingCharacter': ''
              }
            }
          ]
        }
      }
    }" "https://healthcare.googleapis.com/v1/projects/PROJECT_ID/locations/LOCATION/datasets/SOURCE_DATASET_ID:deidentify"

如果要求成功，伺服器會以 JSON 格式傳回：

{
  "name": "projects/PROJECT_ID/locations/REGION/datasets/SOURCE_DATASET_ID/operations/OPERATION_ID"
}

回應會包含作業名稱。您可以使用 Operation get 方法追蹤作業狀態：

curl -X GET \
    -H "Authorization: Bearer $(gcloud auth print-access-token)" \
    -H "Content-Type: application/json; charset=utf-8" \
    "https://healthcare.googleapis.com/v1/projects/PROJECT_ID/locations/REGION/datasets/SOURCE_DATASET_ID/operations/OPERATION_ID"

如果要求成功，伺服器會以 JSON 格式傳回回應。去識別化程序完成後，回應會包含 "done": true。

{
  "name": "projects/PROJECT_ID/locations/REGION/datasets/SOURCE_DATASET_ID/operations/OPERATION_ID",
  "metadata": {
    "@type": "type.googleapis.com/google.cloud.healthcare.v1.OperationMetadata",
    "apiMethodName": "google.cloud.healthcare.v1.dataset.DatasetService.DeidentifyDataset",
    "createTime": "CREATE_TIME",
    "endTime": "END_TIME",
    "logsUrl": "https://console.cloud.google.com/logs/viewer/CLOUD_LOGGING_URL"
  },
  "done": true,
  "response": {
    "@type": "type.googleapis.com/google.cloud.healthcare.v1.deidentify.DeidentifySummary",
    "successStoreCount": "1",
    "successResourceCount": "1"
  }
}

接下來，您可以使用病患 ID，在新的目的地資料集中取得病患資源的詳細資料：

curl -X GET \
     -H "Authorization: Bearer $(gcloud auth print-access-token)" \
     -H "Content-Type: application/fhir+json; charset=utf-8" \
     "https://healthcare.googleapis.com/v1/projects/PROJECT_ID/locations/REGION/datasets/DESTINATION_DATASET_ID/fhirStores/FHIR_STORE_ID/fhir/Patient/r77433dd-dkeuc-633743nfd-383nfdsjds732"

伺服器會傳回以下回應：

{
  "address": [
    {
      "city": "Anycity",
      "district": "Anydistrict",
      "line": [
        "123 Main Street"
      ],
      "period": {
        "start": "1990-12-05"
      },
      "postalCode": "12345",
      "state": "CA",
      "text": "123 Main Street Anycity, Anydistrict, CA 12345",
      "type": "both",
      "use": "home"
    }
  ],
  "birthDate": "1980-12-05",
  "gender": "female",
  "id": "r77433dd-dkeuc-633743nfd-383nfdsjds732",
  "meta": {
    "lastUpdated": "2018-01-01T2018-01-01T00:00:00+00:00",
    "versionId": "MTU0MDU4NTcxNjI2MTUxNDAwMAA"
  },
  "name": [
    {
      "family": "*****",
      "given": [
        "*****"
      ],
      "use": "official"
    }
  ],
  "resourceType": "Patient",
  "text": {
    "div": "<div><p><b>Patient</b></p><p><b>Name</b>: Smith, Darcy</p><p><b>DateOfBirth</b>: 1980-12-05</p><p><b>Gender</b>: Female</p></div>",
    "status": "generated"
  }
}

PowerShell

$cred = gcloud auth application-default print-access-token
$headers = @{ Authorization = "Bearer $cred" }

Invoke-WebRequest `
  -Method Post `
  -Headers $headers `
  -ContentType: "application/json; charset=utf-8" `
  -Body "{
    'destinationDataset': 'projects/PROJECT_ID/locations/LOCATION/datasets/DESTINATION_DATASET_ID',
    'config': {
      'fhir': {
        'fieldMetadataList': {
          'paths': [
            'Patient.HumanName'
          ],
          'action': 'TRANSFORM'
        }
      },
      'text': {
        'transformations': [
          {
            'infoTypes': [
              'PERSON_NAME'
            ],
            'characterMaskConfig': {
              'maskingCharacter': ''
            }
          }
        ]
      }
    }
  }" `
  -Uri "https://healthcare.googleapis.com/v1/projects/PROJECT_ID/locations/LOCATION/datasets/SOURCE_DATASET_ID:deidentify" | Select-Object -Expand Content

如果要求成功，伺服器會以 JSON 格式傳回：

{
  "name": "projects/PROJECT_ID/locations/REGION/datasets/SOURCE_DATASET_ID/operations/OPERATION_ID"
}

回應會包含作業名稱。您可以使用 Operation get 方法追蹤作業狀態：

$cred = gcloud auth print-access-token
$headers = @{ Authorization = "Bearer $cred" }

Invoke-WebRequest `
  -Method Get `
  -Headers $headers `
  -ContentType: "application/json; charset=utf-8" `
  -Uri "https://healthcare.googleapis.com/v1/projects/PROJECT_ID/locations/REGION/datasets/SOURCE_DATASET_ID/operations/OPERATION_ID" | Select-Object -Expand Content

如果要求成功，伺服器會以 JSON 格式傳回回應。去識別化程序完成後，回應會包含 "done": true。

{
  "name": "projects/PROJECT_ID/locations/REGION/datasets/SOURCE_DATASET_ID/operations/OPERATION_NUMBER",
  "metadata": {
    "@type": "type.googleapis.com/google.cloud.healthcare.v1.OperationMetadata",
    "apiMethodName": "google.cloud.healthcare.v1.dataset.DatasetService.DeidentifyDataset",
    "createTime": "CREATE_TIME",
    "endTime": "END_TIME",
    "logsUrl": "https://console.cloud.google.com/logs/viewer/CLOUD_LOGGING_URL"
  },
  "done": true,
  "response": {
    "@type": "type.googleapis.com/google.cloud.healthcare.v1.deidentify.DeidentifySummary",
    "successStoreCount": "1",
    "successResourceCount": "1"
  }
}

接下來，您可以使用病患 ID，在新的目的地資料集中取得病患資源的詳細資料：

$cred = gcloud auth print-access-token
$headers = @{ Authorization = "Bearer $cred" }

Invoke-RestMethod `
  -Method Get `
  -Headers $headers `
  -ContentType: "application/fhir+json; charset=utf-8" `
  -Uri "https://healthcare.googleapis.com/v1/projects/PROJECT_ID/locations/REGION/datasets/DESTINATION_DATASET_ID/fhirStores/FHIR_STORE_ID/fhir/Patient/r77433dd-dkeuc-633743nfd-383nfdsjds732" | ConvertTo-Json

伺服器會傳回以下回應：

{
  "address": [
    {
      "city": "Anycity",
      "district": "Anydistrict",
      "line": [
        "123 Main Street"
      ],
      "period": {
        "start": "1990-12-05"
      },
      "postalCode": "12345",
      "state": "CA",
      "text": "123 Main Street Anycity, Anydistrict, CA 12345",
      "type": "both",
      "use": "home"
    }
  ],
  "birthDate": "1980-12-05",
  "gender": "female",
  "id": "r77433dd-dkeuc-633743nfd-383nfdsjds732",
  "meta": {
    "lastUpdated": "2018-01-01T2018-01-01T00:00:00+00:00",
    "versionId": "MTU0MDU4NTcxNjI2MTUxNDAwMAA"
  },
  "name": [
    {
      "family": "*****",
      "given": [
        "*****"
      ],
      "use": "official"
    }
  ],
  "resourceType": "Patient",
  "text": {
    "div": "<div><p><b>Patient</b></p><p><b>Name</b>: Smith, Darcy</p><p><b>DateOfBirth</b>: 1980-12-05</p><p><b>Gender</b>: Female</p></div>",
    "status": "generated"
  }
}

輸出結果顯示 name.family 和 name.given 中的值已替換為星號。這與「移除特定 FHIR 路徑的識別資訊」中的範例相反，後者會將 name.family 和 name.given 中的值塗銷。

`DateShiftConfig`

Cloud Healthcare API 可在預先設定的範圍內轉換日期。為確保在執行去識別化作業時，日期轉換作業保持一致，請使用 DateShiftConfig 搭配下列任一項：

(已淘汰)：原始 AES 128/192/256 位元 base 64 編碼金鑰。
(建議)：Cloud Key Management Service (Cloud KMS) 包裝金鑰。如需使用 Cloud KMS 包裝金鑰的範例，請參閱「將機密文字去識別化及重新識別化」。

您必須將具有 cloudkms.cryptoKeyVersions.useToDecrypt 權限的角色授予 Cloud Healthcare Service Agent 服務帳戶，才能解密 Cloud KMS 包裝金鑰。建議您使用 Cloud KMS CryptoKey 解密者角色 (roles/cloudkms.cryptoKeyDecrypter)。如果您使用 Cloud KMS 進行密碼運算，將會產生費用。詳情請參閱 Cloud Key Management Service 定價。

Cloud Healthcare API 會使用這個鍵來計算日期 (例如病患的出生日期) 在 100 天差異內轉移的金額。

如果您未提供索引鍵，Cloud Healthcare API 會在每次對日期值執行去識別化作業時產生自己的索引鍵。這可能會導致執行作業之間的日期輸出不一致。

以下範例說明如何在 Patient.birthDate 和 Patient.text.div 路徑上，使用 DateShiftConfig 轉換設定 DATE infoType。將去識別化要求傳送至 Cloud Healthcare API 後，birthDate 值和 Patient.text.div 中的出生日期會在原始出生日期 1980-12-05 的正負 100 天內轉移。

範例中提供的加密金鑰 U2FsdGVkX19bS2oZsdbK9X5zi2utBn22uY+I2Vo0zOU= 是使用下列指令產生的原始 AES 加密 256 位元 base64 編碼金鑰。在系統提示時，請為指令提供所選密碼：

echo -n "test" | openssl enc -e -aes-256-ofb -a -salt

curl

curl -X POST \
    -H "Authorization: Bearer $(gcloud auth application-default print-access-token)" \
    -H "Content-Type: application/json; charset=utf-8" \
    --data "{
      'destinationDataset': 'projects/PROJECT_ID/locations/LOCATION/datasets/DESTINATION_DATASET_ID',
      'config': {
        'fhir': {
          'fieldMetadataList': {
            'paths': [
              'Patient.birthDate',
              'Patient.text.div'
            ],
            'action': 'INSPECT_AND_TRANSFORM'
          }
        },
        'text': {
          'transformations': {
            'infoTypes': [
              'DATE'
            ],
            'dateShiftConfig': {
              'cryptoKey': 'U2FsdGVkX19bS2oZsdbK9X5zi2utBn22uY+I2Vo0zOU='
            }
          }
        }
      }
    }" "https://healthcare.googleapis.com/v1/projects/PROJECT_ID/locations/LOCATION/datasets/SOURCE_DATASET_ID:deidentify"

如果要求成功，伺服器會以 JSON 格式傳回：

{
  "name": "projects/PROJECT_ID/locations/REGION/datasets/SOURCE_DATASET_ID/operations/OPERATION_ID"
}

回應會包含作業名稱。您可以使用 Operation get 方法追蹤作業狀態：

curl -X GET \
    -H "Authorization: Bearer $(gcloud auth print-access-token)" \
    -H "Content-Type: application/json; charset=utf-8" \
    "https://healthcare.googleapis.com/v1/projects/PROJECT_ID/locations/REGION/datasets/SOURCE_DATASET_ID/operations/OPERATION_ID"

如果要求成功，伺服器會以 JSON 格式傳回回應。去識別化程序完成後，回應會包含 "done": true。

{
  "name": "projects/PROJECT_ID/locations/REGION/datasets/SOURCE_DATASET_ID/operations/OPERATION_ID",
  "metadata": {
    "@type": "type.googleapis.com/google.cloud.healthcare.v1.OperationMetadata",
    "apiMethodName": "google.cloud.healthcare.v1.dataset.DatasetService.DeidentifyDataset",
    "createTime": "CREATE_TIME",
    "endTime": "END_TIME",
    "logsUrl": "https://console.cloud.google.com/logs/viewer/CLOUD_LOGGING_URL"
  },
  "done": true,
  "response": {
    "@type": "type.googleapis.com/google.cloud.healthcare.v1.deidentify.DeidentifySummary",
    "successStoreCount": "1",
    "successResourceCount": "1"
  }
}

接下來，您可以使用病患 ID，在新的目的地資料集中取得病患資源的詳細資料：

curl -X GET \
     -H "Authorization: Bearer $(gcloud auth print-access-token)" \
     -H "Content-Type: application/fhir+json; charset=utf-8" \
     "https://healthcare.googleapis.com/v1/projects/PROJECT_ID/locations/REGION/datasets/DESTINATION_DATASET_ID/fhirStores/FHIR_STORE_ID/fhir/Patient/r77433dd-dkeuc-633743nfd-383nfdsjds732"

伺服器會傳回以下回應：

{
  "address": [
    {
      "city": "Anycity",
      "district": "Anydistrict",
      "line": [
        "123 Main Street"
      ],
      "period": {
        "start": "1990-12-05"
      },
      "postalCode": "12345",
      "state": "",
      "text": "123 Main Street Anycity, Anydistrict, CA 12345",
      "type": "both",
      "use": "home"
    }
  ],
  "birthDate": "1981-02-19",
  "gender": "female",
  "id": "r77433dd-dkeuc-633743nfd-383nfdsjds732",
  "meta": {
    "lastUpdated": "2018-01-01T2018-01-01T00:00:00+00:00",
    "versionId": "MTU0MDU4NTcxNjI2MTUxNDAwMAA"
  },
  "name": [
    {
      "family": "Smith",
      "given": [
        "Darcy"
      ],
      "use": "official"
    }
  ],
  "resourceType": "Patient",
  "text": {
    "div": "<div><p><b>Patient</b></p><p><b>Name</b>: Smith, Darcy</p><p><b>DateOfBirth</b>: 1981-02-19</p><p><b>Gender</b>: Female</p></div>",
    "status": "generated"
  }
}

PowerShell

$cred = gcloud auth application-default print-access-token
$headers = @{ Authorization = "Bearer $cred" }

Invoke-WebRequest `
  -Method Post `
  -Headers $headers `
  -ContentType: "application/json; charset=utf-8" `
  -Body "{
    'destinationDataset': 'projects/PROJECT_ID/locations/LOCATION/datasets/DESTINATION_DATASET_ID',
    'config': {
      'fhir': {
        'fieldMetadataList': {
          'paths': [
            'Patient.HumanName',
            'Patient.text.div'
          ],
          'action': 'INSPECT_AND_TRANSFORM'
        }
      },
      'text': {
        'transformations': {
          'infoTypes': [
            'DATE'
          ],
          'dateShiftConfig': {
            'cryptoKey': 'U2FsdGVkX19bS2oZsdbK9X5zi2utBn22uY+I2Vo0zOU='
          }
        }
      }
    }
  }" `
  -Uri "https://healthcare.googleapis.com/v1/projects/PROJECT_ID/locations/LOCATION/datasets/SOURCE_DATASET_ID:deidentify" | Select-Object -Expand Content

如果要求成功，伺服器會以 JSON 格式傳回：

{
  "name": "projects/PROJECT_ID/locations/REGION/datasets/SOURCE_DATASET_ID/operations/OPERATION_ID"
}

回應會包含作業名稱。您可以使用 Operation get 方法追蹤作業狀態：

$cred = gcloud auth print-access-token
$headers = @{ Authorization = "Bearer $cred" }

Invoke-WebRequest `
  -Method Get `
  -Headers $headers `
  -ContentType: "application/json; charset=utf-8" `
  -Uri "https://healthcare.googleapis.com/v1/projects/PROJECT_ID/locations/REGION/datasets/SOURCE_DATASET_ID/operations/OPERATION_ID" | Select-Object -Expand Content

如果要求成功，伺服器會以 JSON 格式傳回回應。去識別化程序完成後，回應會包含 "done": true。

{
  "name": "projects/PROJECT_ID/locations/REGION/datasets/SOURCE_DATASET_ID/operations/OPERATION_NUMBER",
  "metadata": {
    "@type": "type.googleapis.com/google.cloud.healthcare.v1.OperationMetadata",
    "apiMethodName": "google.cloud.healthcare.v1.dataset.DatasetService.DeidentifyDataset",
    "createTime": "CREATE_TIME",
    "endTime": "END_TIME",
    "logsUrl": "https://console.cloud.google.com/logs/viewer/CLOUD_LOGGING_URL"
  },
  "done": true,
  "response": {
    "@type": "type.googleapis.com/google.cloud.healthcare.v1.deidentify.DeidentifySummary",
    "successStoreCount": "1",
    "successResourceCount": "1"
  }
}

接下來，您可以使用病患 ID，在新的目的地資料集中取得病患資源的詳細資料：

$cred = gcloud auth print-access-token
$headers = @{ Authorization = "Bearer $cred" }

Invoke-RestMethod `
  -Method Get `
  -Headers $headers `
  -ContentType: "application/fhir+json; charset=utf-8" `
  -Uri "https://healthcare.googleapis.com/v1/projects/PROJECT_ID/locations/REGION/datasets/DESTINATION_DATASET_ID/fhirStores/FHIR_STORE_ID/fhir/Patient/r77433dd-dkeuc-633743nfd-383nfdsjds732" | ConvertTo-Json

伺服器會傳回以下回應：

{
  "address": [
    {
      "city": "Anycity",
      "district": "Anydistrict",
      "line": [
        "123 Main Street"
      ],
      "period": {
        "start": "1990-12-05"
      },
      "postalCode": "12345",
      "state": "",
      "text": "123 Main Street Anycity, Anydistrict, CA 12345",
      "type": "both",
      "use": "home"
    }
  ],
  "birthDate": "1981-02-19",
  "gender": "female",
  "id": "r77433dd-dkeuc-633743nfd-383nfdsjds732",
  "meta": {
    "lastUpdated": "2018-01-01T2018-01-01T00:00:00+00:00",
    "versionId": "MTU0MDU4NTcxNjI2MTUxNDAwMAA"
  },
  "name": [
    {
      "family": "Smith",
      "given": [
        "Darcy"
      ],
      "use": "official"
    }
  ],
  "resourceType": "Patient",
  "text": {
    "div": "<div><p><b>Patient</b></p><p><b>Name</b>: Smith, Darcy</p><p><b>DateOfBirth</b>: 1981-02-19</p><p><b>Gender</b>: Female</p></div>",
    "status": "generated"
  }
}

輸出結果顯示 birthDate 中的值和 Patient.text.div 中的出生日期已轉換為新的 1981-02-19 值。這是因為將 100 天的差異值與病患 ID 和提供的 cryptoKey 值結合，才會發生這項轉換。只要提供相同的 cryptoKey，birthDate 和 Patient.text.div 中的出生日期新值在為此病患執行去識別化作業時，就會保持一致。

`CryptoHashConfig`

Cloud Healthcare API 可將值替換為加密編譯雜湊 (又稱為代替值)，藉此轉換資料。如要這麼做，請指定 cryptoHashConfig 訊息。

您可以將 cryptoHashConfig 留空，也可以提供下列其中一種資訊：

(已淘汰)：原始 AES 128/192/256 位元 base 64 編碼金鑰。
(建議)：Cloud Key Management Service (Cloud KMS) 包裝金鑰。如需使用 Cloud KMS 包裝金鑰的範例，請參閱「將機密文字去識別化及重新識別化」。

提供一致的鍵會產生在去識別化執行期間一致的代理值。如果您未提供金鑰，Cloud Healthcare API 會在每次執行作業時產生新的金鑰。使用其他鍵會產生不同的替代值。

以下範例是擴充「De-identifying specific FHIR paths」一文中使用的範例，但現在會在 Patient.HumanName 路徑上使用 cryptoKey 轉換來設定 PERSON_NAME infoType。將去識別化要求傳送至 Cloud Healthcare API 後，name.family 和 name.given 值會替換為代理值。

echo -n "test" | openssl enc -e -aes-256-ofb -a -salt

curl

curl -X POST \
    -H "Authorization: Bearer $(gcloud auth application-default print-access-token)" \
    -H "Content-Type: application/json; charset=utf-8" \
    --data "{
      'destinationDataset': 'projects/PROJECT_ID/locations/LOCATION/datasets/DESTINATION_DATASET_ID',
      'config': {
        'fhir': {
          'fieldMetadataList': {
            'paths': [
              'Patient.HumanName'
            ],
            'action': 'INSPECT_AND_TRANSFORM'
          }
        },
        'text': {
          'transformations': {
            'infoTypes': [
              'PERSON_NAME'
            ],
            'cryptoHashConfig': {
              'cryptoKey': 'U2FsdGVkX19bS2oZsdbK9X5zi2utBn22uY+I2Vo0zOU='
            }
          }
        }
      }
    }" "https://healthcare.googleapis.com/v1/projects/PROJECT_ID/locations/LOCATION/datasets/SOURCE_DATASET_ID:deidentify"

如果要求成功，伺服器會以 JSON 格式傳回：

{
  "name": "projects/PROJECT_ID/locations/REGION/datasets/SOURCE_DATASET_ID/operations/OPERATION_ID"
}

回應會包含作業名稱。您可以使用 Operation get 方法追蹤作業狀態：

curl -X GET \
    -H "Authorization: Bearer $(gcloud auth print-access-token)" \
    -H "Content-Type: application/json; charset=utf-8" \
    "https://healthcare.googleapis.com/v1/projects/PROJECT_ID/locations/REGION/datasets/SOURCE_DATASET_ID/operations/OPERATION_ID"

如果要求成功，伺服器會以 JSON 格式傳回回應。去識別化程序完成後，回應會包含 "done": true。

{
  "name": "projects/PROJECT_ID/locations/REGION/datasets/SOURCE_DATASET_ID/operations/OPERATION_ID",
  "metadata": {
    "@type": "type.googleapis.com/google.cloud.healthcare.v1.OperationMetadata",
    "apiMethodName": "google.cloud.healthcare.v1.dataset.DatasetService.DeidentifyDataset",
    "createTime": "CREATE_TIME",
    "endTime": "END_TIME",
    "logsUrl": "https://console.cloud.google.com/logs/viewer/CLOUD_LOGGING_URL"
  },
  "done": true,
  "response": {
    "@type": "type.googleapis.com/google.cloud.healthcare.v1.deidentify.DeidentifySummary",
    "successStoreCount": "1",
    "successResourceCount": "1"
  }
}

接下來，您可以使用病患 ID，在新的目的地資料集中取得病患資源的詳細資料：

curl -X GET \
     -H "Authorization: Bearer $(gcloud auth print-access-token)" \
     -H "Content-Type: application/fhir+json; charset=utf-8" \
     "https://healthcare.googleapis.com/v1/projects/PROJECT_ID/locations/REGION/datasets/DESTINATION_DATASET_ID/fhirStores/FHIR_STORE_ID/fhir/Patient/r77433dd-dkeuc-633743nfd-383nfdsjds732"

伺服器會傳回以下回應：

{
  "address": [
    {
      "city": "Anycity",
      "district": "Anydistrict",
      "line": [
        "123 Main Street"
      ],
      "period": {
        "start": "1990-12-05"
      },
      "postalCode": "12345",
      "state": "CA",
      "text": "123 Main Street Anycity, Anydistrict, CA 12345",
      "type": "both",
      "use": "home"
    }
  ],
  "birthDate": "1980-12-05",
  "gender": "female",
  "id": "r77433dd-dkeuc-633743nfd-383nfdsjds732",
  "meta": {
    "lastUpdated": "2018-01-01T2018-01-01T00:00:00+00:00",
    "versionId": "MTU0MDU4NTcxNjI2MTUxNDAwMAA"
  },
  "name": [
    {
      "family": "NlVBV12Hhb5DD8WNqlTpXboFxzlUSlqAmYDet/jIViQ=",
      "given": [
        "FSH4D/IGb80a1rS0L0kqfC3DCDt6//17VPhIkOzH2pk="
      ],
      "use": "official"
    }
  ],
  "resourceType": "Patient",
  "text": {
    "div": "<div><p><b>Patient</b></p><p><b>Name</b>: Smith, Darcy</p><p><b>DateOfBirth</b>: 1980-12-05</p><p><b>Gender</b>: Female</p></div>",
    "status": "generated"
  }
}

PowerShell

$cred = gcloud auth application-default print-access-token
$headers = @{ Authorization = "Bearer $cred" }

Invoke-WebRequest `
  -Method Post `
  -Headers $headers `
  -ContentType: "application/json; charset=utf-8" `
  -Body "{
    'destinationDataset': 'projects/PROJECT_ID/locations/LOCATION/datasets/DESTINATION_DATASET_ID',
    'config': {
      'fhir': {
        'fieldMetadataList': {
          'paths': [
            'Patient.HumanName'
          ],
          'action': 'TRANSFORM'
        }
      },
      'text': {
        'transformations': {
          'infoTypes': [
            'PERSON_NAME'
          ],
          'cryptoHashConfig': {
            'cryptoKey': 'U2FsdGVkX19bS2oZsdbK9X5zi2utBn22uY+I2Vo0zOU='
          }
        }
      }
    }
  }" `
  -Uri "https://healthcare.googleapis.com/v1/projects/PROJECT_ID/locations/LOCATION/datasets/SOURCE_DATASET_ID:deidentify" | Select-Object -Expand Content

如果要求成功，伺服器會以 JSON 格式傳回：

{
  "name": "projects/PROJECT_ID/locations/REGION/datasets/SOURCE_DATASET_ID/operations/OPERATION_ID"
}

回應會包含作業名稱。您可以使用 Operation get 方法追蹤作業狀態：

$cred = gcloud auth print-access-token
$headers = @{ Authorization = "Bearer $cred" }

Invoke-WebRequest `
  -Method Get `
  -Headers $headers `
  -ContentType: "application/json; charset=utf-8" `
  -Uri "https://healthcare.googleapis.com/v1/projects/PROJECT_ID/locations/REGION/datasets/SOURCE_DATASET_ID/operations/OPERATION_ID" | Select-Object -Expand Content

如果要求成功，伺服器會以 JSON 格式傳回回應。去識別化程序完成後，回應會包含 "done": true。

{
  "name": "projects/PROJECT_ID/locations/REGION/datasets/SOURCE_DATASET_ID/operations/OPERATION_NUMBER",
  "metadata": {
    "@type": "type.googleapis.com/google.cloud.healthcare.v1.OperationMetadata",
    "apiMethodName": "google.cloud.healthcare.v1.dataset.DatasetService.DeidentifyDataset",
    "createTime": "CREATE_TIME",
    "endTime": "END_TIME",
    "logsUrl": "https://console.cloud.google.com/logs/viewer/CLOUD_LOGGING_URL"
  },
  "done": true,
  "response": {
    "@type": "type.googleapis.com/google.cloud.healthcare.v1.deidentify.DeidentifySummary",
    "successStoreCount": "1",
    "successResourceCount": "1"
  }
}

接下來，您可以使用病患 ID，在新的目的地資料集中取得病患資源的詳細資料：

$cred = gcloud auth print-access-token
$headers = @{ Authorization = "Bearer $cred" }

Invoke-RestMethod `
  -Method Get `
  -Headers $headers `
  -ContentType: "application/fhir+json; charset=utf-8" `
  -Uri "https://healthcare.googleapis.com/v1/projects/PROJECT_ID/locations/REGION/datasets/DESTINATION_DATASET_ID/fhirStores/FHIR_STORE_ID/fhir/Patient/r77433dd-dkeuc-633743nfd-383nfdsjds732" | ConvertTo-Json

伺服器會傳回以下回應：

{
  "address": [
    {
      "city": "Anycity",
      "district": "Anydistrict",
      "line": [
        "123 Main Street"
      ],
      "period": {
        "start": "1990-12-05"
      },
      "postalCode": "12345",
      "state": "CA",
      "text": "123 Main Street Anycity, Anydistrict, CA 12345",
      "type": "both",
      "use": "home"
    }
  ],
  "birthDate": "1980-12-05",
  "gender": "female",
  "id": "r77433dd-dkeuc-633743nfd-383nfdsjds732",
  "meta": {
    "lastUpdated": "2018-01-01T2018-01-01T00:00:00+00:00",
    "versionId": "MTU0MDU4NTcxNjI2MTUxNDAwMAA"
  },
  "name": [
    {
      "family": "NlVBV12Hhb5DD8WNqlTpXboFxzlUSlqAmYDet/jIViQ=",
      "given": [
        "FSH4D/IGb80a1rS0L0kqfC3DCDt6//17VPhIkOzH2pk="
      ],
      "use": "official"
    }
  ],
  "resourceType": "Patient",
  "text": {
    "div": "<div><p><b>Patient</b></p><p><b>Name</b>: Smith, Darcy</p><p><b>DateOfBirth</b>: 1980-12-05</p><p><b>Gender</b>: Female</p></div>",
    "status": "generated"
  }
}

輸出結果顯示，name.family 和 name.given 的值已使用加密雜湊法轉換。這是因為系統結合了病患 ID 和提供的 cryptoKey 值，只要提供相同的 cryptoKey，這個患者在兩次去識別作業之間，新 name.family 和 name.given 值都會一致。

`ReplaceWithInfoTypeConfig`

Cloud Healthcare API 可將值替換為值的 infoType 名稱，藉此轉換資料。您可以指定 replaceWithInfoTypeConfig 訊息來執行此操作。

下列範例會擴充在去識別特定 FHIR 路徑中使用的範例，但會在 PERSON_NAME 上定義 replaceWithInfoType 轉換，並將 fieldMetadataList 路徑設為 Patient.HumanName。將去識別化要求傳送至 Cloud Healthcare API 後，name.family 和 name.given 值會替換為值的 infoType。

curl

curl -X POST \
    -H "Authorization: Bearer $(gcloud auth application-default print-access-token)" \
    -H "Content-Type: application/json; charset=utf-8" \
    --data "{
      'destinationDataset': 'projects/PROJECT_ID/locations/LOCATION/datasets/DESTINATION_DATASET_ID',
      'config': {
        'fhir': {
          'fieldMetadataList': {
            'paths': [
              'Patient.HumanName'
            ],
            'action': 'INSPECT_AND_TRANSFORM'
          }
        },
        'text': {
          'transformations': {
            'infoTypes': [
              'PERSON_NAME'
            ],
            'replaceWithInfoType': {}
          }
        }
      }
    }" "https://healthcare.googleapis.com/v1/projects/PROJECT_ID/locations/LOCATION/datasets/SOURCE_DATASET_ID:deidentify"

如果要求成功，伺服器會以 JSON 格式傳回：

{
  "name": "projects/PROJECT_ID/locations/REGION/datasets/SOURCE_DATASET_ID/operations/OPERATION_ID"
}

回應會包含作業名稱。您可以使用 Operation get 方法追蹤作業狀態：

curl -X GET \
    -H "Authorization: Bearer $(gcloud auth print-access-token)" \
    -H "Content-Type: application/json; charset=utf-8" \
    "https://healthcare.googleapis.com/v1/projects/PROJECT_ID/locations/REGION/datasets/SOURCE_DATASET_ID/operations/OPERATION_ID"

如果要求成功，伺服器會以 JSON 格式傳回回應。去識別化程序完成後，回應會包含 "done": true。

{
  "name": "projects/PROJECT_ID/locations/REGION/datasets/SOURCE_DATASET_ID/operations/OPERATION_ID",
  "metadata": {
    "@type": "type.googleapis.com/google.cloud.healthcare.v1.OperationMetadata",
    "apiMethodName": "google.cloud.healthcare.v1.dataset.DatasetService.DeidentifyDataset",
    "createTime": "CREATE_TIME",
    "endTime": "END_TIME",
    "logsUrl": "https://console.cloud.google.com/logs/viewer/CLOUD_LOGGING_URL"
  },
  "done": true,
  "response": {
    "@type": "type.googleapis.com/google.cloud.healthcare.v1.deidentify.DeidentifySummary",
    "successStoreCount": "1",
    "successResourceCount": "1"
  }
}

接下來，您可以使用病患 ID，在新的目的地資料集中取得病患資源的詳細資料：

curl -X GET \
     -H "Authorization: Bearer $(gcloud auth print-access-token)" \
     -H "Content-Type: application/fhir+json; charset=utf-8" \
     "https://healthcare.googleapis.com/v1/projects/PROJECT_ID/locations/REGION/datasets/DESTINATION_DATASET_ID/fhirStores/FHIR_STORE_ID/fhir/Patient/r77433dd-dkeuc-633743nfd-383nfdsjds732"

伺服器會傳回以下回應：

{
  "address": [
    {
      "city": "Anycity",
      "district": "Anydistrict",
      "line": [
        "123 Main Street"
      ],
      "period": {
        "start": "1990-12-05"
      },
      "postalCode": "12345",
      "state": "CA",
      "text": "123 Main Street Anycity, Anydistrict, CA 12345",
      "type": "both",
      "use": "home"
    }
  ],
  "birthDate": "1980-12-05",
  "gender": "female",
  "id": "r77433dd-dkeuc-633743nfd-383nfdsjds732",
  "meta": {
    "lastUpdated": "2018-01-01T2018-01-01T00:00:00+00:00",
    "versionId": "MTU0MDU4NTcxNjI2MTUxNDAwMAA"
  },
  "name": [
    {
      "family": "[PERSON_NAME]",
      "given": [
        "[PERSON_NAME]"
      ],
      "use": "official"
    }
  ],
  "resourceType": "Patient",
  "text": {
    "div": "<div><p><b>Patient</b></p><p><b>Name</b>: Smith, Darcy</p><p><b>DateOfBirth</b>: 1980-12-05</p><p><b>Gender</b>: Female</p></div>",
    "status": "generated"
  }
}

PowerShell

$cred = gcloud auth application-default print-access-token
$headers = @{ Authorization = "Bearer $cred" }

Invoke-WebRequest `
  -Method Post `
  -Headers $headers `
  -ContentType: "application/json; charset=utf-8" `
  -Body "{
    'destinationDataset': 'projects/PROJECT_ID/locations/LOCATION/datasets/DESTINATION_DATASET_ID',
    'config': {
      'fhir': {
        'fieldMetadataList': {
          'paths': [
            'Patient.HumanName'
          ],
          'action': 'TRANSFORM'
        }
      },
      'text': {
        'transformations': {
          'infoTypes': [
            'PERSON_NAME'
          ],
          'replaceWithInfoTypeConfig': {}
        }
      }
    }
  }" `
  -Uri "https://healthcare.googleapis.com/v1/projects/PROJECT_ID/locations/LOCATION/datasets/SOURCE_DATASET_ID:deidentify" | Select-Object -Expand Content

如果要求成功，伺服器會以 JSON 格式傳回：

{
  "name": "projects/PROJECT_ID/locations/REGION/datasets/SOURCE_DATASET_ID/operations/OPERATION_ID"
}

回應會包含作業名稱。您可以使用 Operation get 方法追蹤作業狀態：

$cred = gcloud auth print-access-token
$headers = @{ Authorization = "Bearer $cred" }

Invoke-WebRequest `
  -Method Get `
  -Headers $headers `
  -ContentType: "application/json; charset=utf-8" `
  -Uri "https://healthcare.googleapis.com/v1/projects/PROJECT_ID/locations/REGION/datasets/SOURCE_DATASET_ID/operations/OPERATION_ID" | Select-Object -Expand Content

如果要求成功，伺服器會以 JSON 格式傳回回應。去識別化程序完成後，回應會包含 "done": true。

{
  "name": "projects/PROJECT_ID/locations/REGION/datasets/SOURCE_DATASET_ID/operations/OPERATION_NUMBER",
  "metadata": {
    "@type": "type.googleapis.com/google.cloud.healthcare.v1.OperationMetadata",
    "apiMethodName": "google.cloud.healthcare.v1.dataset.DatasetService.DeidentifyDataset",
    "createTime": "CREATE_TIME",
    "endTime": "END_TIME",
    "logsUrl": "https://console.cloud.google.com/logs/viewer/CLOUD_LOGGING_URL"
  },
  "done": true,
  "response": {
    "@type": "type.googleapis.com/google.cloud.healthcare.v1.deidentify.DeidentifySummary",
    "successStoreCount": "1",
    "successResourceCount": "1"
  }
}

接下來，您可以使用病患 ID，在新的目的地資料集中取得病患資源的詳細資料：

$cred = gcloud auth print-access-token
$headers = @{ Authorization = "Bearer $cred" }

Invoke-RestMethod `
  -Method Get `
  -Headers $headers `
  -ContentType: "application/fhir+json; charset=utf-8" `
  -Uri "https://healthcare.googleapis.com/v1/projects/PROJECT_ID/locations/REGION/datasets/DESTINATION_DATASET_ID/fhirStores/FHIR_STORE_ID/fhir/Patient/r77433dd-dkeuc-633743nfd-383nfdsjds732" | ConvertTo-Json

伺服器會傳回以下回應：

{
  "address": [
    {
      "city": "Anycity",
      "district": "Anydistrict",
      "line": [
        "123 Main Street"
      ],
      "period": {
        "start": "1990-12-05"
      },
      "postalCode": "12345",
      "state": "CA",
      "text": "123 Main Street Anycity, Anydistrict, CA 12345",
      "type": "both",
      "use": "home"
    }
  ],
  "birthDate": "1980-12-05",
  "gender": "female",
  "id": "r77433dd-dkeuc-633743nfd-383nfdsjds732",
  "meta": {
    "lastUpdated": "2018-01-01T2018-01-01T00:00:00+00:00",
    "versionId": "MTU0MDU4NTcxNjI2MTUxNDAwMAA"
  },
  "name": [
    {
      "family": "[PERSON_NAME]",
      "given": [
        "[PERSON_NAME]"
      ],
      "use": "official"
    }
  ],
  "resourceType": "Patient",
  "text": {
    "div": "<div><p><b>Patient</b></p><p><b>Name</b>: Smith, Darcy</p><p><b>DateOfBirth</b>: 1980-12-05</p><p><b>Gender</b>: Female</p></div>",
    "status": "generated"
  }
}

輸出結果顯示 name.family 和 name.given 的值已由值的 infoType 取代。

將 FHIR 存放區層級資料去識別化

上述範例說明如何在資料集層級去識別 FHIR 資料。如要將資料集去識別化要求變更為 FHIR 儲存庫去識別化要求，請進行下列變更：

將要求主體中的 destinationDataset 修改為 destinationStore
在 destinationStore 的值結尾處加入 fhirStores/DESTINATION_FHIR_STORE_ID
指定來源資料的位置時，請新增 fhirStores/SOURCE_FHIR_STORE_ID。

例如：

資料集層級去識別化：

'destinationDataset': 'projects/PROJECT_ID/locations/LOCATION/datasets/DESTINATION_DATASET_ID'
…
"https://healthcare.googleapis.com/v1/projects/PROJECT_ID/locations/LOCATION/datasets/SOURCE_DATASET_ID:deidentify"

FHIR 儲存庫層級去識別化：

'destinationStore': 'projects/PROJECT_ID/locations/LOCATION/datasets/DESTINATION_DATASET_ID/fhirStores/DESTINATION_FHIR_STORE_ID'
…
"https://healthcare.googleapis.com/v1/projects/PROJECT_ID/locations/LOCATION/datasets/SOURCE_DATASET_ID/fhirStores/SOURCE_FHIR_STORE_ID:deidentify"

以下範例會擴充去識別特定 FHIR 路徑，但去識別化作業會在單一 FHIR 儲存庫中進行，並將去識別化資料複製到新的 FHIR 儲存庫。請注意，DESTINATION_FHIR_STORE_ID 參照的 FHIR 儲存庫必須已存在。

curl

curl -X POST \
    -H "Authorization: Bearer $(gcloud auth application-default print-access-token)" \
    -H "Content-Type: application/json; charset=utf-8" \
    --data "{
      'destinationStore': 'projects/PROJECT_ID/locations/LOCATION/datasets/DESTINATION_DATASET_ID/fhirStores/DESTINATION_FHIR_STORE_ID',
     'config': {
        'fhir': {
          'fieldMetadataList': [
            {
              'paths': [
                'Patient.HumanName'
              ],
              'action': 'TRANSFORM'
            }
          ]
        }
      }
    }" "https://healthcare.googleapis.com/v1/projects/PROJECT_ID/locations/LOCATION/datasets/SOURCE_DATASET_ID/fhirStores/SOURCE_FHIR_STORE_ID:deidentify"

如果要求成功，伺服器會以 JSON 格式傳回：

{
  "name": "projects/PROJECT_ID/locations/LOCATION/datasets/SOURCE_DATASET_ID/operations/OPERATION_ID"
}

回應會包含作業名稱。您可以使用 Operation get 方法追蹤作業狀態：

curl -X GET \
    -H "Authorization: Bearer $(gcloud auth application-default print-access-token)" \
    -H "Content-Type: application/json; charset=utf-8" \
    "https://healthcare.googleapis.com/v1/projects/PROJECT_ID/locations/LOCATION/datasets/SOURCE_DATASET_ID/operations/OPERATION_ID"

如果要求成功，伺服器會以 JSON 格式傳回回應。去識別化程序完成後，回應中會包含 "done": true。

{
  "name": "projects/PROJECT_ID/locations/LOCATION/datasets/SOURCE_DATASET_ID/operations/OPERATION_ID",
  "metadata": {
    "@type": "type.googleapis.com/google.cloud.healthcare.v1.OperationMetadata",
    "apiMethodName": "google.cloud.healthcare.v1.deidentify.DeidentifyService.DeidentifyFhirStore",
    "createTime": "CREATE_TIME",
    "endTime": "END_TIME",
    "logsUrl": "https://console.cloud.google.com/logs/query/CLOUD_LOGGING_URL",
    "counter": {
      "success": "SUCCESS_COUNT"
    }
  },
  "done": true,
  "response": {
    "@type": "type.googleapis.com/google.cloud.healthcare.v1.deidentify.DeidentifyFhirStoreSummary"
  }
}

PowerShell

$cred = gcloud auth application-default print-access-token
$headers = @{ Authorization = "Bearer $cred" }

Invoke-WebRequest `
  -Method Post `
  -Headers $headers `
  -ContentType: "application/json; charset=utf-8" `
  -Body "{
    'destinationStore': 'projects/PROJECT_ID/locations/LOCATION/datasets/DESTINATION_DATASET_ID/fhirStores/DESTINATION_FHIR_STORE_ID',
    'config': {
      'fhir': {
        'fieldMetadataList': [
          {
            'paths': [
              'Patient.HumanName'
            ],
            'action': 'TRANSFORM'
          }
        ]
      }
    }
  }" `
  -Uri "https://healthcare.googleapis.com/v1/projects/PROJECT_ID/locations/LOCATION/datasets/SOURCE_DATASET_ID/fhirStores/SOURCE_FHIR_STORE_ID:deidentify" | Select-Object -Expand Content

如果要求成功，伺服器會以 JSON 格式傳回：

{
  "name": "projects/PROJECT_ID/locations/LOCATION/datasets/SOURCE_DATASET_ID/operations/OPERATION_ID"
}

回應中會包含作業 ID。您可以使用 Operation get 方法追蹤作業狀態：

$cred = gcloud auth application-default print-access-token
$headers = @{ Authorization = "Bearer $cred" }

Invoke-WebRequest `
  -Method Get `
  -Headers $headers `
  -ContentType: "application/json; charset=utf-8" `
  -Uri "https://healthcare.googleapis.com/v1/projects/PROJECT_ID/locations/LOCATION/datasets/SOURCE_DATASET_ID/operations/OPERATION_ID" | Select-Object -Expand Content

如果要求成功，伺服器會以 JSON 格式傳回回應。去識別化程序完成後，回應會包含 "done": true。

{
  "name": "projects/PROJECT_ID/locations/LOCATION/datasets/SOURCE_DATASET_ID/operations/OPERATION_ID",
  "metadata": {
    "@type": "type.googleapis.com/google.cloud.healthcare.v1.OperationMetadata",
    "apiMethodName": "google.cloud.healthcare.v1.deidentify.DeidentifyService.DeidentifyFhirStore",
    "createTime": "CREATE_TIME",
    "endTime": "END_TIME",
    "logsUrl": "https://console.cloud.google.com/logs/query/CLOUD_LOGGING_URL",
    "counter": {
      "success": "SUCCESS_COUNT"
    }
  },
  "done": true,
  "response": {
    "@type": "type.googleapis.com/google.cloud.healthcare.v1.deidentify.DeidentifyFhirStoreSummary"
  }
}

將 FHIR 儲存庫的子集去識別化

在 FHIR 存放區層級去識別 FHIR 資料時，您可以指定篩選器來去識別部分資料。

篩選器的格式為 FHIR 資源 ID 清單。您可以在 FhirFilter 物件內的 Resources 物件中指定 ID。

以下範例會擴充在 FHIR 存放區層級去識別資料，但會提供兩個 FHIR 資源 ID 的清單 (一個是病患，另一個是觀察項目)，用於決定要去識別哪些資源。

curl

curl -X POST \
    -H "Authorization: Bearer $(gcloud auth application-default print-access-token)" \
    -H "Content-Type: application/json; charset=utf-8" \
    --data "{
      'destinationStore': 'projects/PROJECT_ID/locations/LOCATION/datasets/DESTINATION_DATASET_ID/fhirStores/DESTINATION_FHIR_STORE_ID',
      'config': {
        'fhir': {
          'fieldMetadataList': [
            {
              'action': 'TRANSFORM',
              'paths': [
                'Patient.HumanName'
              ]
            }
          ]
        }
      },
      'resourceFilter': {
        'resources': {
          'resources': [
            'Patient/PATIENT_ID',
            'Observation/OBSERVATION_ID'
          ]
        }
      }
    }" "https://healthcare.googleapis.com/v1/projects/PROJECT_ID/locations/LOCATION/datasets/SOURCE_DATASET_ID/fhirStores/SOURCE_FHIR_STORE_ID:deidentify"

如果要求成功，伺服器會以 JSON 格式傳回：

{
  "name": "projects/PROJECT_ID/locations/LOCATION/datasets/SOURCE_DATASET_ID/operations/OPERATION_ID"
}

回應會包含作業名稱。您可以使用 Operation get 方法追蹤作業狀態：

curl -X GET \
    -H "Authorization: Bearer $(gcloud auth application-default print-access-token)" \
    -H "Content-Type: application/json; charset=utf-8" \
    "https://healthcare.googleapis.com/v1/projects/PROJECT_ID/locations/LOCATION/datasets/SOURCE_DATASET_ID/operations/OPERATION_ID"

如果要求成功，伺服器會以 JSON 格式傳回回應。去識別化程序完成後，回應中會包含 "done": true。

{
  "name": "projects/PROJECT_ID/locations/LOCATION/datasets/SOURCE_DATASET_ID/operations/OPERATION_ID",
  "metadata": {
    "@type": "type.googleapis.com/google.cloud.healthcare.v1.OperationMetadata",
    "apiMethodName": "google.cloud.healthcare.v1.deidentify.DeidentifyService.DeidentifyFhirStore",
    "createTime": "CREATE_TIME",
    "endTime": "END_TIME",
    "logsUrl": "https://console.cloud.google.com/logs/query/CLOUD_LOGGING_URL",
    "counter": {
      "success": "SUCCESS_COUNT"
    }
  },
  "done": true,
  "response": {
    "@type": "type.googleapis.com/google.cloud.healthcare.v1.deidentify.DeidentifyFhirStoreSummary"
  }
}

PowerShell

$cred = gcloud auth application-default print-access-token
$headers = @{ Authorization = "Bearer $cred" }

Invoke-WebRequest `
  -Method Post `
  -Headers $headers `
  -ContentType: "application/json; charset=utf-8" `
  -Body "{
    'destinationStore': 'projects/PROJECT_ID/locations/LOCATION/datasets/DESTINATION_DATASET_ID/fhirStores/DESTINATION_FHIR_STORE_ID',
    'resourceFilter': {
      'resources': {
        'resources': [
          'Patient/PATIENT_ID',
          'Observation/OBSERVATION_ID'
        ]
      }
    },
    'config': {
      'fhir': {
        'fieldMetadataList': [
          {
            'paths': [
              'Patient.HumanName'
            ],
            'action': 'TRANSFORM'
          }
        ]
      }
    }
  }" `
  -Uri "https://healthcare.googleapis.com/v1/projects/PROJECT_ID/locations/LOCATION/datasets/SOURCE_DATASET_ID/fhirStores/SOURCE_FHIR_STORE_ID:deidentify" | Select-Object -Expand Content

如果要求成功，伺服器會以 JSON 格式傳回：

{
  "name": "projects/PROJECT_ID/locations/LOCATION/datasets/SOURCE_DATASET_ID/operations/OPERATION_ID"
}

回應中會包含作業 ID。您可以使用 Operation get 方法追蹤作業狀態：

$cred = gcloud auth application-default print-access-token
$headers = @{ Authorization = "Bearer $cred" }

Invoke-WebRequest `
  -Method Get `
  -Headers $headers `
  -ContentType: "application/json; charset=utf-8" `
  -Uri "https://healthcare.googleapis.com/v1/projects/PROJECT_ID/locations/LOCATION/datasets/SOURCE_DATASET_ID/operations/OPERATION_ID" | Select-Object -Expand Content

如果要求成功，伺服器會以 JSON 格式傳回回應。去識別化程序完成後，回應會包含 "done": true。

{
  "name": "projects/PROJECT_ID/locations/LOCATION/datasets/SOURCE_DATASET_ID/operations/OPERATION_ID",
  "metadata": {
    "@type": "type.googleapis.com/google.cloud.healthcare.v1.OperationMetadata",
    "apiMethodName": "google.cloud.healthcare.v1.deidentify.DeidentifyService.DeidentifyFhirStore",
    "createTime": "CREATE_TIME",
    "endTime": "END_TIME",
    "logsUrl": "https://console.cloud.google.com/logs/query/CLOUD_LOGGING_URL",
    "counter": {
      "success": "SUCCESS_COUNT"
    }
  },
  "done": true,
  "response": {
    "@type": "type.googleapis.com/google.cloud.healthcare.v1.deidentify.DeidentifyFhirStoreSummary"
  }
}

在 Google Cloud 控制台中將資料去識別化

您可以在 Google Cloud 控制台中，為資料集或 FHIR 儲存庫去識別資料。預設的 FHIR 去識別化設定可用於去識別化資料集和 FHIR 儲存庫。詳情請參閱「預設 FHIR 資料去識別化」。

將資料集資料去識別化

如要為資料集去識別化資料，請完成下列步驟：

在 Google Cloud 控制台中，前往「Datasets」(資料集) 頁面。

前往「資料集」
針對要去識別的資料集，從「動作」清單中選擇「去識別」。

系統隨即會顯示「De-identify Dataset」(去識別資料集) 頁面。
選取「Set destination dataset」(設定目的地資料集)，然後輸入新資料集的名稱，以便儲存去識別化資料。
按一下「去識別化」，即可將資料集中的資料去識別化。

將 FHIR 儲存庫中的資料去識別化

如要將 FHIR 存放區中的資料去識別，請完成下列步驟：

在 Google Cloud 控制台中，前往「Datasets」(資料集) 頁面。

前往「資料集」
按一下要去識別資料的資料集。
在 FHIR 儲存庫清單中，針對要去識別化的 FHIR 儲存庫，從「動作」清單中選擇「去識別化」。

系統會顯示「去識別化 FHIR 儲存庫」頁面。
選取「Set destination data store」(設定目的地資料儲存庫)，然後選擇要儲存去識別化資料的資料集和 FHIR 儲存庫。

注意：如果您想將去識別化資料儲存在新的 FHIR 儲存庫中，請先建立新的儲存庫，然後選取該儲存庫做為目的地 FHIR 儲存庫。
點選「去識別化」，即可將 FHIR 儲存庫中的資料去識別化。

FHIR 去識別化作業疑難排解

如果在 FHIR 去識別化作業期間發生錯誤，系統會將錯誤記錄到 Cloud Logging。詳情請參閱「查看 Cloud Logging 中的錯誤記錄檔」。

如果整個作業傳回錯誤，請參閱長期執行作業的疑難排解。

將 FHIR 資料去識別化 透過集合功能整理內容 你可以依據偏好儲存及分類內容。

去識別化總覽

資料集層級去識別化

FHIR 儲存庫層級去識別化

篩選器

本指南中使用的 FHIR 資源範例

預設的 FHIR 資料去識別化

curl

PowerShell

將特定 FHIR 路徑去識別化

預設的 FHIR 去識別化設定檔

使用路徑去識別資源

curl

PowerShell

使用 infoType 和原始轉換功能搭配 FHIR 資源

預設的 FHIR infoType

原始轉換選項

在 TextConfig 中指定設定

RedactConfig

curl

PowerShell

CharacterMaskConfig

curl

PowerShell

DateShiftConfig

curl

PowerShell

CryptoHashConfig

curl

PowerShell

ReplaceWithInfoTypeConfig

curl

PowerShell

將 FHIR 存放區層級資料去識別化

curl

PowerShell

將 FHIR 儲存庫的子集去識別化

curl

PowerShell

在 Google Cloud 控制台中將資料去識別化

將資料集資料去識別化

將 FHIR 儲存庫中的資料去識別化

FHIR 去識別化作業疑難排解

將 FHIR 資料去識別化

在 `TextConfig` 中指定設定

`RedactConfig`

`CharacterMaskConfig`

`DateShiftConfig`

`CryptoHashConfig`

`ReplaceWithInfoTypeConfig`