Background: The secure management of sensitive clinical data, particularly human genomics data, has become a critical requirement in modern biomedical research. Although the necessary software and algorithms are readily available, their use by non-IT experts poses significant challenges. Methods: We developed dabih, an open-source web application specifically designed to facilitate user-friendly encrypted data management. dabih enables web-based uploading, storing, sharing, and downloading of sensitive data in any format. Its approach to data security involves a two-stage envelope encryption process. We combine symmetric-key encryption for data and public-key encryption as key encapsulation mechanism. The private key necessary for decrypting the data remains exclusively on the owner's device. Thus, accessing data is impossible without explicit permission from the keyholder. Results: dabih is available open-source on GitHub https://github.com/spang-lab/dabih, as ready to use containers on docker hub and includes a command line interface and a graphical bulk upload tool as pre-built binaries. Documentation is available as part of the web application. Conclusions: dabih enables everyone to use strong cryptography for their data, while being just as simple to use as other, non-encrypted, data storage solutions. All the cryptography occurs seamlessly in the background as users interact with a secure web portal, simply by dragging and dropping files.

翻译：背景：敏感临床数据，特别是人类基因组数据的安全管理，已成为现代生物医学研究中的关键需求。尽管必要的软件和算法已可便捷获取，但非IT专家使用者仍面临重大挑战。方法：我们开发了dabih，这是一个专为促进用户友好型加密数据管理而设计的开源Web应用程序。dabih支持任意格式敏感数据的基于Web的上传、存储、共享和下载。其数据安全方法采用两级信封加密流程，结合对称密钥加密用于数据加密，公钥加密作为密钥封装机制。解密数据所需的私钥始终保留在数据所有者设备上，未经密钥持有者明确授权无法访问数据。结果：dabih以开源形式发布在GitHub（https://github.com/spang-lab/dabih），通过Docker Hub提供即用型容器，并提供命令行界面及以预编译二进制格式提供的图形化批量上传工具。文档作为Web应用程序的组成部分提供。结论：dabih使每个人都能对其数据使用强加密技术，同时保持与其他非加密数据存储解决方案相同的简易性。所有加密操作在使用者拖放文件时，于安全的Web门户后台无缝完成。