The new secure transfer service, Supertunneli, will be gradually introduced starting April 1, 2025. The service is based on the S3 interface.
Supertunneli enables smoother transfers of larger datasets, as well as automatic encryption and decryption of data.
“The implementation will be done in stages, starting with the data holders whose datasets are most frequently used through Findata. We will provide more details on the progress and instructions for data holders closer to the implementation, but preparations can already begin,” says Hannu Vilpponen, Head of ICT at Findata.
Before the launch, user manuals and terms of use for the transfer services will be prepared. Findata’s service provider, CSC, is responsible for more detailed technical guidelines and will create reference implementations to facilitate the adoption process.
“We are currently testing the technical functionality of the service with Pirha and Aalto University’s SECDATA environment,” Vilpponen says.
The current transfer service, Nextcloud, will remain in use but will be renamed Tunneli as part of the renewal.
“There will still be a need for smaller or individual data transfers, and a browser-based solution is effective for that. Not everyone needs to build an interface for Supertunneli. For example, researchers can use Tunneli to send their own datasets to Findata if they need to be combined with data under the Act on Secondary Use,” Vilpponen explains.
Later, the S3 interface is also planned to be used for sending datasets to different Secure Processing Environments (SPE) and for the automatic transmission of results from other service providers’ SPE’s to Findata.
“According to the Secondary Use Act, Findata is responsible for ensuring the anonymity of all published results from secure data environments. So far, researchers have been responsible for sending the published results, but with the interface, the process can be automated.”
More information
Co-funded by the European Union. Views and opinions expressed are however those of the author(s) only and do not necessarily reflect those of the European Union or European Health and Digital Executive Agency. Neither the European Union nor the granting authority can be held responsible for them.