skip to main content
research-article

NHS Number Open Source Software: Implications for Digital Health Regulation and Development

Published:03 November 2022Publication History
Skip Abstract Section

Abstract

A national example of open source digital healthcare is critiqued. The code for implementing numeric patient identifiers is surprisingly naïve and bug-ridden, despite patient identifiers being computationally trivial and a critical component of reliable healthcare. The issues raised are shown to be widespread, long term, and apparently unrecognized. Problems are traced back to inadequacies in the relevant standards, and, at every stage, regulation through to development, inadequate Software Engineering input.

An important finding is that the relevant healthcare standards are inconsistent and written without sufficient rigor to be at all constructive for implementing digital systems. The widely recognized problems of interoperability may be traced back to diverse (and buggy) interpretations of vague standards.

REFERENCES

  1. [1] NHS Digital. 2017. Fit for 2020, Report from the NHS Digital Capability Review. Retrieved on September 2022 webarchive.nationalarchives.gov.uk/ukgwa/20210118183345/https://digital.nhs.uk/about-nhs-digital/our-work/transforming-health-and-care-through-technology/fit-for-2020-report-from-the-nhs-digital-capability-review.Google ScholarGoogle Scholar
  2. [2] Aniche M.. 2022. Effective Software Testing: A Developer’s Guide. Manning. Retrieved on September 2022 www.manning.com/books/effective-software-testing?utm_source=aniche&utm_medium=affiliate&utm_campaign=book_aniche_effective_11_16_21&a_aid=aniche&a_bid=6e66ba23.Google ScholarGoogle Scholar
  3. [3] Berrou C., Pyndiah R., Adde P., Douillard C., and Bidan R. Le. 2005. An Overview of Turbo Codes and their Applications. IEEE. 1–9 pages. Google ScholarGoogle ScholarCross RefCross Ref
  4. [4] Boyd A., Thomas R., Cornish R., and Macleod J.. 2018. NHS Number and the Systems used to Manage Them: An Overview for Research Users. University of Bristol. Retrieved on September 2022 www.closer.ac.uk/wp-content/uploads/CLOSER-NHS-ID-Resource-Report-Apr2018.pdf.Google ScholarGoogle Scholar
  5. [5] Ducklin P.. 2018. Serious SSH Bug Lets Crooks Log in Just by Asking Nicely.... Naked Security. Retrieved on September 2022 nakedsecurity.sophos.com/2018/10/17/serious-ssh-bug-lets-crooks-log-in-just-by-asking-nicely.Google ScholarGoogle Scholar
  6. [6] Edgar M.. 2019. Why we are Deprecating and then Withdrawing the NHS Common User Interface. NHS Digital. Retrieved on September 2022 digital.nhs.uk/blog/transformation-blog/2019/why-we-are-withdrawing-the-nhs-common-user-interface.Google ScholarGoogle Scholar
  7. [7] Falessi D. and Kruchten P.. 2015. Five reasons for including technical debt in the software engineering curriculum. In Proceedings of the 2015 European Conference on Software Architecture Workshops (ECSAW’15). ACM, Article 28, 4 pages. Google ScholarGoogle ScholarDigital LibraryDigital Library
  8. [8] Executive David Flory, Deputy NHS Chief. 2011. The Operating Framework for the NHS in England 2012/13. Number 3.29. Department of Health. Retrieved on September 2022 assets.publishing.service.gov.uk/government/uploads/system/uploads/attachment_data/file/216590/dh_131428.pdf.Google ScholarGoogle Scholar
  9. [9] Security Center for Internet. 2022. Log4j Zero-Day Vulnerability Response. www.cisecurity.org/log4j-zero-day-vulnerability-response.Google ScholarGoogle Scholar
  10. [10] Goldacre Ben. 2022. Better, Broader, Safer: Using Health Data for Research and Analysis. Department of Health and Social Care. Retrieved on September 2022 www.gov.uk/government/publications/better-broader-safer-using-health-data-for-research-and-analysis.Google ScholarGoogle Scholar
  11. [11] Gustafson J. L.. 2015. The End of Error: Unum Computing. Chapman & Hall/CRC Computational Science.Google ScholarGoogle Scholar
  12. [12] Hillestad R., Bigelow J. H., Chaudhry B., Dreyer P., Greenberg M. D., Meili R., Ridgely M. S., Rothenberg J., and Taylor R.. 2008. Identity Crisis: An Examination of the Costs and Benefits of a Unique Patient Identifier for the U.S. Health Care System. RAND Corporation. www.rand.org/pubs/monographs/MG753.html.Google ScholarGoogle Scholar
  13. [13] Hoare C. A. R.. 1981. The emperor’s old clothes. Communications of the ACM 24, 2 (1981), 7583. Google ScholarGoogle ScholarDigital LibraryDigital Library
  14. [14] Hunt J.. 2013. NHS Challenged to go Paperless by 2018. UK Government. Retrieved on September 2022 www.gov.uk/government/news/jeremy-hunt-challenges-nhs-to-go-paperless-by-2018–2.Google ScholarGoogle Scholar
  15. [15] Knuth D. E.. 1986. Computers & Typesetting – TeX : The Program, Vol. B. Addison Wesley.Google ScholarGoogle Scholar
  16. [16] Knuth D. E.. 1986. Computers & Typesetting – The TeX Book, Vol. A. Addison Wesley.Google ScholarGoogle Scholar
  17. [17] Knuth D. E.. 2019. The Stanford GraphBase: A Platform for Combinatorial Computing. Addison Wesley Professional.Google ScholarGoogle Scholar
  18. [18] Koppel R.. 2014. Illusions and delusions of cut, pasted, and cloned notes: Ephemeral reality and pixel prevarications. Chest 145, 3 (2014), 444445. Google ScholarGoogle ScholarCross RefCross Ref
  19. [19] Koppel R., Wetterneck T., Telles J. L., and Karsh B.-T.. 2008. Workarounds to barcode medication administration systems: Their occurrences, causes, and threats to patient safety. Journal of the American Medical Informatics Association 15, 4 (2008), 408423. Google ScholarGoogle ScholarCross RefCross Ref
  20. [20] Meyer Bertrand. 2014. Agile! The Good, the Hype and the Ugly. Springer.Google ScholarGoogle Scholar
  21. [21] Mills S., Lee J. K., Rassekh B. M., Kodelja M. Z., Bae G., Pannarunothai S., and Kijsanayotin B.. 2019. Unique health identifiers for universal health coverage. Journal of Health, Population and Nutrition 38 (Supplement 1), 22 (2019). Google ScholarGoogle ScholarCross RefCross Ref
  22. [22] Board NIB, National Information. 2014. Using Data and Technology to Transform Outcomes for Patients and Citizens: A Framework for Action. HM Government. Retrieved on September 2022 digital.nhs.uk/article/549/National-Information-Board-Paperless-2020.Google ScholarGoogle Scholar
  23. [23] Test US Department of Defense Director of Operational and (DOT&E) Evaluation. 2020. F-35 Joint Strike Fighter (JSF). FY19 DOD Programs (2020). Retrieved on September 2022 www.theregister.com/2020/02/07/f35_dote_fy2019_report.Google ScholarGoogle Scholar
  24. [24] Care Department of Health & Social. 2018. Policy Paper: The Future of Healthcare: Our Vision for Digital, Data and Technology in Health and Care.Google ScholarGoogle Scholar
  25. [25] Care Department of Health & Social. 2021. Integration and Innovation: Working Together to Improve Health and Social Care for All. UK Government. Retrieved on September 2022 www.gov.uk/government/publications/working-together-to-improve-health-and-social-care-for-all/integration-and-innovation-working-together-to-improve-health-and-social-care-for-all-html-version.Google ScholarGoogle Scholar
  26. [26] Health U.S. Department of and Services Human. 2012. Unique Health Identifier for Individuals. Vol. White paper. Retrieved on September 2022 aspe.hhs.gov/white-paper-unique-health-identifier-individuals.Google ScholarGoogle Scholar
  27. [27] Organization ECRI Institute Patient Safety. 2016. Patient Identification: Executive Summary. Retrieved on September 2022 hwww.ecri.org/Resources/Whitepapers_and_reports/PSO%20Deep%20Dives/Deep%20Dive_PT_ID_2016_exec%20summary.pdf.Google ScholarGoogle Scholar
  28. [28] Paulson J. W., Succi Giancarlo, and Eberlein Armin. 2004. An empirical study of open-source and closed-source software products. IEEE Transactions on Software Engineering 30, 4 (2004), 246256.Google ScholarGoogle ScholarDigital LibraryDigital Library
  29. [29] Shaw D.. 2021. At-home Food Selling Concerning, Says Food Standards Agency. Retrieved on September 2022 www.bbc.co.uk/news/business-56032185.Google ScholarGoogle Scholar
  30. [30] Stevens L.. 2017. New review highly critical of NHS Digital’s capabilities. digitalhealth (9 July 9 July 2017). Retrieved on September 2022 www.digitalhealth.net/2017/07/nhs-digital-fronted-multiple-concerns-review-finds.Google ScholarGoogle Scholar
  31. [31] Tan Lin, Liu Chen, Li Zhenmin, Wang Xuanhui, Zhou Yuanyuan, and Zhai Chengxiang. 2014. Bug characteristics in open source software. Empirical Software Engineering 19, 6 (2014), 16651705. Google ScholarGoogle ScholarDigital LibraryDigital Library
  32. [32] Thimbleby H.. 2007. Press On: Principles of Interaction Design. MIT Press.Google ScholarGoogle Scholar
  33. [33] Thimbleby H.. 2015. Safer user interfaces: A case study in improving number entry. IEEE Transactions on Software Engineering 41, 7 (2015), 711729. Google ScholarGoogle ScholarDigital LibraryDigital Library
  34. [34] Thimbleby H.. 2018. Misunderstanding IT: Hospital cybersecurity problems in court. Digital Evidence and Electronic Signature Law Review 15 (2018), 1132. Google ScholarGoogle ScholarCross RefCross Ref
  35. [35] Thimbleby H.. 2018. Misunderstanding IT: Hospital cybersecurity problems in court. Digital Evidence and Electronic Signature Law Review 15 (2018), 1132. Retrieved on September 2022 journals.sas.ac.uk/deeslr/article/viewFile/4891/4841.Google ScholarGoogle Scholar
  36. [36] Thimbleby H.. 2020. The problem isn’t Excel, it’s unprofessional software engineering. British Medical Journal 371, m4181 (2020). Google ScholarGoogle ScholarCross RefCross Ref
  37. [37] Thimbleby H.. 2021. Fix IT: How to Solve the Problems of Digital Healthcare. Oxford University Press.Google ScholarGoogle Scholar
  38. [38] Thimbleby H.. 2021. The pivotal pandemic: Why we urgently need to fix IT. In Systems and Covid-19, Proceedings of the 29th Safety-Critical Systems Symposium, Parsons M. and Nicholson M. (Eds.), Vol. SCSC-161. Safety-Critical Systems Club, 413427.Google ScholarGoogle Scholar
  39. [39] Thimbleby Harold and Cairns Paul. 2010. Reducing number entry errors: Solving a widespread, serious problem. Journal Royal Society Interface 7, 51 (2010), 14291439. Google ScholarGoogle ScholarCross RefCross Ref
  40. [40] Thimbleby Harold and Cairns Paul. 2017. Interactive numerals. Royal Society Open Science 4, 160903 (2017), 160903. Google ScholarGoogle ScholarCross RefCross Ref
  41. [41] Thimbleby Harold, Cairns Paul, and Oladimeji Patrick. 2015. Unreliable numbers: Error and harm induced by bad design can be reduced by better design. Journal Royal Society Interface 12, 110 (2015), 20150685. Google ScholarGoogle ScholarCross RefCross Ref
  42. [42] Thimbleby H. and Williams D.. 2018. A tool for publishing reproducible algorithms & A reproducible, elegant algorithm for sequential experiments. Science of Computer Programming 156 (2018), 4567. Google ScholarGoogle ScholarCross RefCross Ref
  43. [43] Wachter R. M. (Ed.). 2016. Making IT Work: Harnessing the Power of Health Information Technology to Improve Care in England: Report of the National Advisory Group on Health Information Technology in England. National Advisory Group on Health Information Technology in England.Google ScholarGoogle Scholar
  44. [44] Williams C.. 2016. How One Developer Just Broke Node, Babel and Thousands of Projects in 11 Lines of JavaScript Code Pulled from NPM—which Everyone was using. Retrieved on September 2022 www.theregister.com/2016/03/23/npm_left_pad_chaos.Google ScholarGoogle Scholar
  45. [45] Woodcock J. C. P., Larsen P. G., Bicarregui J. C., and Fitzgerald J. S.. 2009. Formal methods: Practice and experience. ACM Computing Surveys 41, 4 (2009), 19. Google ScholarGoogle ScholarDigital LibraryDigital Library

Index Terms

  1. NHS Number Open Source Software: Implications for Digital Health Regulation and Development

        Recommendations

        Comments

        Login options

        Check if you have access through your login credentials or your institution to get full access on this article.

        Sign in

        Full Access

        • Published in

          cover image ACM Transactions on Computing for Healthcare
          ACM Transactions on Computing for Healthcare  Volume 3, Issue 4
          October 2022
          331 pages
          EISSN:2637-8051
          DOI:10.1145/3544003
          Issue’s Table of Contents

          Permission to make digital or hard copies of all or part of this work for personal or classroom use is granted without fee provided that copies are not made or distributed for profit or commercial advantage and that copies bear this notice and the full citation on the first page. Copyrights for components of this work owned by others than ACM must be honored. Abstracting with credit is permitted. To copy otherwise, or republish, to post on servers or to redistribute to lists, requires prior specific permission and/or a fee. Request permissions from [email protected].

          Publisher

          Association for Computing Machinery

          New York, NY, United States

          Publication History

          • Published: 3 November 2022
          • Online AM: 5 August 2022
          • Accepted: 10 May 2022
          • Received: 27 April 2022
          Published in health Volume 3, Issue 4

          Permissions

          Request permissions about this article.

          Request Permissions

          Check for updates

          Qualifiers

          • research-article
          • Refereed
        • Article Metrics

          • Downloads (Last 12 months)139
          • Downloads (Last 6 weeks)8

          Other Metrics

        PDF Format

        View or Download as a PDF file.

        PDF

        eReader

        View online with eReader.

        eReader

        Full Text

        View this article in Full Text.

        View Full Text

        HTML Format

        View this article in HTML Format .

        View HTML Format