SciTePress - Affiliation Profile

University of Porto, Portugal

Context (please use complete words only)

Field

Sort by

35 Papers

Topic: Security

Author: Ana Ferreira

Affiliation: CINTESIS - Centre for Health Technology and Services Research, Faculty of Medicine of Porto, Porto, Portugal

Digital Object Identifier: 10.5220/0009386002090216

Proceedings of ICEIS 2020, ISBN: 978-989-758-423-7

Quick Abstract

This paper aims to investigate, with a literature review, how the research community has been tackling the security and privacy requirements mandated by the General Data Protection Legislation (GDPR), over the last year and a half. We assessed what proposed solutions have been implemented since GDPR came into force, if and where they were tested in real settings, with what technologies and what specific GDPR requirements were targeted. No similar review has been found by the authors as works in the literature mostly provide recommendations for GDPR compliance or assess if current solutions are GDPR compliant. Results show that most proposed solutions focus on Consent, PrivacybyDefault/Design and are assessed on IoT and healthcare domains. However, almost none is tested and used in a real setting. Although it may be still early days for this review, it is clear that: a) there is the need for more GDPR compliant novel solutions, tests and evaluations in real settings; b) the obtained knowledge be quickly shared so that proper feedback is given to the legal authorities and business/research organizations; and c) solutions on privacy must integrate socio-technical components that can face, in an all-inclusive way, infrastructures, activities and processes, where GDPR must apply.

Illegitimate HIS Access by Healthcare Professionals Detection System Applying an Audit Trail-based Model

Topics: Ehealth; Confidentiality and Data Security; Medical Informatics

Authors: Liliana Sá-Correia ¹ , Manuel Correia ² and Ricardo Cruz-Correia ³

Affiliations: ¹ HLTSYS, HealthySystems, lda, Porto, Portugal , ² Faculdade de Ciências da Universidade do Porto, Portugal , ³ HLTSYS, HealthySystems, lda, Porto, Portugal, Center for Research in Health Technologies and Information Systems - CINTESIS, Porto, Portugal

Digital Object Identifier: 10.5220/0008991505390546

Proceedings of HEALTHINF 2020, ISBN: 978-989-758-398-8

Quick Abstract

Complex data management on healthcare institutions makes very hard to identify illegitimate accesses which is a serious issue. We propose to develop a system to detect accesses with suspicious behavior for further investigation. We modeled use cases (UC) and sequence diagrams (SD) showing the data flow between users and systems. The algorithms represented by activity diagrams apply rules based on professionals’ routines, use data from an audit trail (AT) and classify accesses as suspicious or normal. The algorithms were evaluated between 23rd and 31st July 2019. The results were analyzed using absolute and relative frequencies and dispersion measures. Access classification was in accordance to rules applied. “Check time of activity” UC had 64,78% of suspicious classifications, being 55% of activity period shorter and 9,78% longer than expected, “Check days of activity” presented 2,27% of suspicious access and “EHR read access” 79%, the highest percentage of suspicious accesses. The results show the first picture of HIS accesses. Deeper analysis to evaluate algorithms sensibility and specificity should be done. Lack of more detailed information about professionals’ routines and systems, and low quality of systems logs are some limitations. Although we believe this is an important step in this field.

Informatics as Support for Changes in Health Policy: A Case in Obstetrics

Topics: Evaluation and Use of Healthcare IT; Electronic Health Records and Standards; Medical Informatics

Authors: Giovana Gelatti ¹ , Pedro Rodrigues ² and Ricardo João Correia ²

Affiliations: ¹ Institute of Mathematical and Computer Sciences of University of São Paulo, 13566-590, São Carlos, Brasil, Centre for Health Technology and Services Research, 4200-450, Porto, Portugal , ² Centre for Health Technology and Services Research, 4200-450, Porto, Portugal, Universidade do Porto, Faculty of Medicine of University of Porto, 4200-319, Porto, Portugal

Digital Object Identifier: 10.5220/0009173807450749

Proceedings of HEALTHINF 2020, ISBN: 978-989-758-398-8

Quick Abstract

Introduction: In 2015 the Directorate-General for Health of Portugal published new standards (DGS 001/2015) for the registration of cesarean section indicators. The existing scenario was the lack of data, influencing the quality of indicators and analyses on them. The use of a single computer tool was encouraged to register and compare indicators between hospitals with special attention to the Robson Classification as it employs basic information of pregnancy to classify all deliveries in 10 groups. The selected tool was Obscare software. Aim: Describe the scenario on data quality by analyzing the completeness of obstetric records from 2016 to 2018 of the variables used in Robson’s classification collected by the Obscare tool. Methods: The completeness is evaluated using a number of missing values. The lower the completeness, the higher the number of missing values. Also, we perform the imputation of data based on basic concepts and analyzed the participation of this data in the indication of the type of delivery to be performed according to classification suggested by DGS 001/2015. Results: From 2016 to 2018, 5922 number of pregnancies resulted in 5922 of Robson Classifications. The variables with lower completeness were related to previous cesarean section (77%) and previous pregnancies (43%). After imputation, it fell to 3.9% and 0.56%, respectively causing 4.6% of discarded data from the total. Discussion: There is a significant amount of missing data in basic variables used to study the classification of delivery type. We believe that encouraging data completion with the possibility of comparing data between hospitals should be a priority in the health area.

Netphishing: Network and Linguistic Analysis of Phishing Email Subject Lines

Topic: Security

Authors: Ana Ferreira ¹ , Soraia Teles ² , Rui Chilro ³ and Milaydis Sosa-Napolskij ¹

Affiliations: ¹ CINTESIS - Centre for Health Technology and Services Research, Faculty of Medicine, Porto, Portugal , ² CINTESIS - Centre for Health Technology and Services Research, Faculty of Medicine, Porto, Portugal, Institute of Biomedical Sciences Abel Salazar, University of Porto (ICBAS-UP), Department of Behavioural Sciences, Porto, Portugal , ³ Independent Researcher, Portugal

Digital Object Identifier: 10.5220/0009407202500257

Proceedings of ICEIS 2020, ISBN: 978-989-758-423-7

Quick Abstract

This study provides support on why subject lines of predatory emails should be analysed to improve the detection of phishing attacks. Network science together with a linguistic analysis were performed on a sample of 240 phishing email subject lines from the past 12 years. Results show that even in straightforward subject lines, phishers can employ text elements to create a sense of proximity, mutual relationship as well as a neutral and professional relation, focused on present and future actions, to persuade potential victims to open phishing emails. The common words “your” and “account” form two main hubs and communities of words that integrate main organisations and actions related to those hubs. The linguistic analysis shows that concise phrases integrate such richness of language that can potentially be used to find differential emotional and behavioural marks on the text, to be used for better detecting phishing emails. This work provides current information as well as new research questions to be tested and further perused, to support the improvement of automated tools to identify predatory emails.

Patients to Mobilize Their Data: Secure and Flexible mHealth Delegation

Topics: Identity and Trust Management; Security Architecture and Design Analysis; Web Applications and Services; Access and Usage Control

Authors: Rafael Almeida , Pedro Vieira-Marques and Ana Ferreira

Affiliation: CINTESIS - Centro de Investigação em Tecnologias e Serviços de Saúde, Faculty of Medicine of Porto, Porto, Portugal

Digital Object Identifier: 10.5220/0008972905520560

Proceedings of ICISSP 2020, ISBN: 978-989-758-399-5

Quick Abstract

This work describes the development of a prototype of a secure and flexible delegation architecture, to be applied to an mHealth scenario where a mobile app is used for monitoring and coaching asthma patients. The motivation is the fact that mHealth apps are not security prepared and patients still have no trust in using them, on a regular basis. Nonetheless, patients can acknowledge mHealth potential and see the relevance of sharing/delegating health data to others, e.g., healthcare professionals, depending not only on the necessity and security, but also on the level of control they can have over it. This proposal empowers the patient to control, in a flexible, easy and secure way, fine-grained delegation features within a real mHealth setting.

Accomplishing Transparency within the General Data Protection Regulation

Topics: Privacy Enhancing Technologies; Legal and Regulatory Issues; Security Awareness and Education; Privacy, Security and Trust in Social Media

Authors: Dayana Spagnuelo ¹ , Ana Ferreira ² and Gabriele Lenzini ¹

Affiliations: ¹ SnT - University of Luxembourg and Luxembourg , ² CINTESIS - University of Porto and Portugal

Digital Object Identifier: 10.5220/0007366501140125

Proceedings of ICISSP 2019, ISBN: 978-989-758-359-9

Quick Abstract

Transparency is a user-centric principle proposed to empower users to hold data processors accountable for the usage and the processing of the user’s personal data. Accomplishing transparency may come with some resistance because it requires significant architectural changes, but it is mandatory by law under the recently approved General Data Protection Regulation. To help the transition, we systematically review what Transparency Enhancing Technologies can help to accomplish transparency in agreement with technical requirements that we elicited from the Regulation’s articles. We discuss our findings in the domain of medical data systems, where accomplishing transparency looks particularly controversial due to sensitivity of the personal medical data.

Related Ontology Subjects/Areas/Topics (2)

Information and Systems Security

Privacy Enhancing Technologies

mHealth Applications: Can User-adaptive Visualization and Context Affect the Perception of Security and Privacy?

Topics: Adaptive and Adaptable User Interfaces; Interaction Techniques and Devices; Interface Design

Authors: Joana Muchagata , Pedro Vieira-Marques and Ana Ferreira

Affiliation: CINTESIS - Center for Health Technology and Services Research, Faculty of Medicine, University of Porto and Portugal

Digital Object Identifier: 10.5220/0007724304440451

Proceedings of ICEIS 2019, ISBN: 978-989-758-372-8

Quick Abstract

Through mobile applications, patients and health professionals are able to access and monitor health data. But even with user-adaptive systems, which can adjust interface content according to individual’s needs and context (e.g., physical location), data privacy can be at risk, as these techniques do not aim to protect them or even identify the presence of vulnerabilities. The main goal of this paper is to test with end-users the adaptive visualization techniques, together with the context where they are used, to understand how these may influence users’ security perception, and decide which techniques can be applied to improve security and privacy of visualized data. An online survey was applied to test two different use-cases and contexts, where traditional access and access using visualization techniques are compared in terms of security characteristics. Preliminary results with 27 participants show that when accessing personal data from a patients’ perspective, the context has higher influence in the perception of confidentiality (authorized access) and integrity (authorized modification) of visualized data while for a health professional’s perspective, independently of the context, the visualization techniques are the ones that seem to primarily influence participants’ choices for those security characteristics. For availability (data available to authorized users whenever necessary), both visualization techniques and context have little, or no influence, in the participants’ choice.

Related Ontology Subjects/Areas/Topics (5)

Adaptive and Adaptable User Interfaces		Human-Computer Interaction		Interface Design
Enterprise Information Systems		Interaction Techniques and Devices

Mobile Apps for People with Dementia: Are They Compliant with the General Data Protection Regulation (GDPR)?

Topics: ICT, Ageing and Disability; e-Health; eHealth Applications

Authors: Joana Muchagata and Ana Ferreira

Affiliation: CINTESIS - Center for Health Technology and Services Research, Faculty of Medicine, University of Porto and Portugal

Digital Object Identifier: 10.5220/0007352200680077

Proceedings of HEALTHINF 2019, ISBN: 978-989-758-353-7

Quick Abstract

Mobile apps have the potential to improve the overall patients and caregivers’ quality of life and, particularly, of those with dementia. The ability to stimulate cognitive functions, keep the brain active and helping people to be as independent as possible in their daily lives are considered highly valued characteristics. But despite those advantages, there is a lack of security standards and guidelines focused on mobile apps and the general sense is that those provide low or no privacy/security and commonly do not comply with current regulations. We analysed eighteen apps with the ability to stimulate cognitive functions for people with dementia to verify if they were GDPR compliant. Results show that most analysed apps (78%) do not provide any information regarding how personal data are processed, and if they do, this is not clear. Also, users’ consent to allow that processing is rarely sought (11%). In conclusion, GDPR mandated requirements are still not implemented in most of the analysed mental health apps to ensure privacy and security in the interactions between users and mobile apps. This work intends to bring awareness to this issue to both researchers and developers, especially in the area of healthcare and mental health.

Related Ontology Subjects/Areas/Topics (6)

Biomedical Engineering		e-Health		ICT, Ageing and Disability
Cloud Computing		Health Information Systems		Platforms and Applications

Usability Study of a Tool for Patients’ Access Control to Their Health Data

Topics: Evaluation and Use of Healthcare IT; Electronic Health Records and Standards; Human-Machine Interfaces; Medical Informatics; Design and Development of Methodologies for Healthcare IT

Authors: Sandra Reis ¹ , Ana Ferreira ² , Pedro Vieira-Marques ² and Ricardo Cruz-Correia ³

Affiliations: ¹ Faculdade de Medicina da Universidade do Porto – FMUP, Porto, Portugal, HealthySystems - HLTSYS, Lda, Porto and Portugal , ² Faculdade de Medicina da Universidade do Porto – FMUP, Porto, Portugal, Center for Research in Health Technologies and Information Systems – CINTESIS, Porto and Portugal , ³ Faculdade de Medicina da Universidade do Porto – FMUP, Porto, Portugal, HealthySystems - HLTSYS, Lda, Porto, Portugal, Center for Research in Health Technologies and Information Systems – CINTESIS, Porto and Portugal

Digital Object Identifier: 10.5220/0007391200940102

Proceedings of HEALTHINF 2019, ISBN: 978-989-758-353-7

Quick Abstract

Considering the need that is expected for the institutions to be compliant with the new legislation we intended to create a tool (MyRegister) that will allow patients to know which professionals accessed their health data in healthcare institutions where they have had previous contact. Before development we decided to create a functional prototype to validate the user interface of the tool with real users. We created an evaluation instrument consisting of 4 tasks and a SUS questionnaire that allowed us to evaluate the MyRegister interface of the prototype by the participants. The results of the evaluation of the prototype allowed us to identify some of the major usability problems of the interface, while the SUS score of 79.5 in 100 is a result that shows good usability. Regarding the performed tasks, all were completed by the participants but not all of them answered correctly to the questions asked. After correcting the problems found and implementing the suggestions of the participants that we consider permissible to include, we intend to continue this project with the development of the tool and test its usability as well as user experience in real environments with a wider and more heterogeneous sample.

Related Ontology Subjects/Areas/Topics (7)

Biomedical Engineering	Health Information Systems	Informatics in Control, Automation and Robotics
Electronic Health Records and Standards	Human-Machine Interfaces	Robotics and Automation
Evaluation and Use of Healthcare IT

Visual Schedule: A Mobile Application for Autistic Children - Preliminary Study

Topics: Adaptive and Adaptable User Interfaces; Interaction Techniques and Devices; Interface Design; Accessibility and Usability

Authors: Joana Muchagata and Ana Ferreira

Affiliation: CINTESIS - Center for Health Technology and Services Research, Faculty of Medicine, University of Porto and Portugal

Digital Object Identifier: 10.5220/0007732804520459

Proceedings of ICEIS 2019, ISBN: 978-989-758-372-8

Quick Abstract

Children with autism often experience considerable challenges and one of them is the difficulty in understanding, structuring and predicting their daily life activities and routines. Several methodologies have been studied and implemented to help autistic children with these routine activities and tasks, and one of those methods is the use of visual schedules. For this, mobile apps and related technology have been considered as an excellent tool in supporting autistic children’s development. But despite the technological resources and the variety of mobile apps available today, the authors could not find such needed resources available for the Portuguese speaking autistic children population, especially in relation to visual schedules/routines, which are considered very important for the child’s development. Therefore, based on the literature and in some apps available in other countries for autistic children, the authors propose a set of mock-ups of a visual schedule application for smartphone. The visual mock-ups represent the idea of the app that we intend to implement in a near future to be used by Portuguese autistic children aged between 4 to 10 years old to support them in their daily routine and the performance of related tasks.

Related Ontology Subjects/Areas/Topics (6)

Accessibility and Usability		Enterprise Information Systems		Interaction Techniques and Devices
Adaptive and Adaptable User Interfaces		Human-Computer Interaction		Interface Design

Context (please use complete words only)

Field

Sort by

Topic(s):

Title:
ISBN:
Year:
Acronym:
Subject:

Title:
Author:
Affiliation:
Subject:

Name:
Affiliation:
Country:
Conference:
Subject:

Name:
Country:
Subject:

Affiliation

Filter listed results, by