Authors:
Daniel Slamanig
and
Christian Stingl
Affiliation:
School of Medical Information Technology, Carinthia University of Applied Sciences, Austria
Keyword(s):
Anonymity, Cryptography, Electronic Health Record, Health Data, Information Security, Privacy.
Related
Ontology
Subjects/Areas/Topics:
Biomedical Engineering
;
Cloud Computing
;
Confidentiality and Data Security
;
e-Health
;
Health Information Systems
;
Platforms and Applications
Abstract:
In recent years, demographic change and increasing treatment costs demand the adoption of more cost efficient, highly qualitative and integrated health care processes. The rapid growth and availability of the Internet facilitate the development of eHealth services and especially of electronic health records (EHRs) which are promising solutions to meet the aforementioned requirements. Considering actual web-based EHR systems, patient-centric and patient moderated approaches are widely deployed. Besides these initiatives there is an emerging market of so called personal health record platforms, e.g. Google Health. Both concepts provide a central and web-based access to highly sensitive data of EHRs. Additionally, the fact that these EHR systems may be hosted by not fully trustworthy providers necessitates to thoroughly consider privacy issues. In this paper we define security and privacy objectives that play an important role in context of web-based EHRs. Furthermore, we discuss deploy
ed solutions as well as concepts proposed in the literature with respect to this objectives and point out several weaknesses. Finally, we introduce a system which overcomes the drawbacks of existing solutions by considering an holistic approach to preserve patient’s privacy and discuss the applied methods in detail.
(More)