HIPAA Compliant HIS in J2EE Environment

Abstract

This article presents the design and architecture of a health information system that takes into account various requirements posed by the Health Insurance Portability and Accountability Act of 1996 (HIPAA). The recommendations made, primarily address Health Care Provider and Health Plans' needs. It introduces the reader to common HIPAA terminology, then picks a specific enterprise technology stack, i.e. Java Enterprise Edition (J2EE) and delves into some of its relevant artifacts. The article makes recommendations for tools, techniques and design guidelines to facilitate the architecture of a HIPAA compatible information system. We focus primarily on Health-care Providers and a subset of Health Plans. These entities have one thing in common: they process or store health information, hence they fall under HIPAA's purview. The architecture model that we are proposing will attempt to present a unified security model (e.g. security in client, application and database layers).

Pims: An Architecture For A Web Enabled Patient Information And Monitoring System

“…Authenticity of an Electronic Health Record (EHR) is crucial for the trustworthiness of information, especially in distributed environments where data is transmitted over insecure channels and stakeholders have usually never physically met 8 . For a more detailed discussion on security and HIPAA (Health Insurance Portability and Accountability Act) compliance we refer readers to 17 . Page 14.958.10…”