Managing the Privacy and Security of eHealth Data

Abstract

The large scale adoption of mobile medicine, supported by an increasing number of medical devices and remote access to health services, correlated with the continuous involvement of the patients in their own healthcare, led to the emergence of tremendous amounts of clinical data. They need to be securely transferred, archived and accessed. This paper refers to a new approach for protecting the privacy and security of clinical data through the use of a state of the art encryption scheme and attribute-based access control authorization framework. As personal medical records are often used by different entities (e.g. doctors, pharmacists, nurses, etc.), there is a need for different degrees of authorization access for specific parts of the personal dossier. Appropriate cryptographic tools are presented for allowing partial visibility and valid protection on authorized parts for hierarchical privacy protection of eHealth data. The encryption process relies on ARCANA, a security platform developed at ERISCS research laboratory from University Aix-Marseille. It provides the appropriate cryptographic tools for secure hierarchical access to healthcare data. This ensures that the access of various entities to the healthcare data is accurately and hierarchically controlled. The access control framework used in this research is based on XACML, a standard access control decision model specified by OASIS. The applicability and feasibility of XACML-based policies to regulate the access to patient data are demonstrated through SAFAX. SAFAX is a new public authorization framework developed by the Eindhoven University of Technology tested among others on eHealth case studies, in cooperation with Munich University of Applied Sciences. It is envisioned that the usage of data encryption and public authorization solutions to regulate access control on patients clinical data will have a big impact on the patient's trust in electronic healthcare systems and will speed up their large scale adoption.

Factors Influencing Rural End-Users' Acceptance of e-Health in Developing Countries: A Study on Portable Health Clinic in Bangladesh

“…20 Social reference (SR) and facilitating condition were adopted from UTAUT. 22 The model also incorporates a few additional variables based on existing literature and empirical evidences to have a better understanding of consumers' acceptance behavior toward e-health, which are perceived cost (PC), 30 perceived privacy (PP), 31 service delivery time (SDT), 32 perceived system effectiveness (PSE), 33 and impact of advertisement (Adv). 34…”

Implementation of 3D Simulation to Foster Digital Twin Based Applications in Manufacturing: An Educational Case Study

“…In this section, the authors aim at analyzing the founding research objectives (RO), together with the methodology followed to reach them. As already described in the previous section, the need to establish practical demonstrators capable of supporting theoretical lectures about the DT paradigm in Learning Factories, is of crucial importance as the digitalization processes in industrial settings require highly specialized workforce and knowledgeable experts in Information Technology-related topics, such as IoT, communication protocols, network infrastructures, and cybersecurity [18]. For these reasons, the research objectives posed in this work are the following:…”

Risk and UCON-based Access Control Model for Healthcare Big Data

“…Currently, the issue of privacy breach of personal data has become the core concern of big data in health care [17,18]. Soceanu et al [19] proposed a new privacy protection approach for healthcare big data to address the privacy and security issues of clinical data.…”