PubMed Health⌕ Search

SEARCH · PubMed Health

Results for “secured computing”

Explore indexed PubMed citations for clinical trials, systematic reviews and public health research. Read source abstracts and follow each citation to its original PubMed record.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 523 records · Page 29Linked to original sources

[Strategy for securing medical documents by electronic signature and encryption].

The paper presents a survey of security strategies for the protection of medical documents which are generated, stored, and exchanged electronically. It is not meant to provide a precise technical background but to give a guideline for interested medical professionals. A systematic approach for the definition of appropriate security requirements is outlined, and generally accepted security functions (services) are described. The major part of the paper is dedicated to a technical introduction to state-of-the-art security mechanisms based on cryptographic methods. Finally, actual implementation problems and perspectives are discussed from a German/European viewpoint.

Computer Communication Networks↗

Building a highly available and intrusion tolerant Database Security and Protection System (DSPS).

Database Security and Protection System (DSPS) is a security platform for fighting malicious DBMS. The security and performance are critical to DSPS. The authors suggested a key management scheme by combining the server group structure to improve availability and the key distribution structure needed by proactive security. This paper detailed the implementation of proactive security in DSPS. After thorough performance analysis, the authors concluded that the performance difference between the replicated mechanism and proactive mechanism becomes smaller and smaller with increasing number of concurrent connections; and that proactive security is very useful and practical for large, critical applications.

Computer Security↗

Wireless local area network for the dental office.

Dental offices are no exception to the implementation of new and advanced technology, especially if it enhances productivity. In a rapidly transforming digital world, wireless technology has a special place, as it has truly "retired the wire" and contributed to the ease and efficient access to patient data and other software-based applications for diagnosis and treatment. If the office or the clinic is networked, access to patient management software, imaging software and treatment planning tools is enhanced. Access will be further enhanced and unrestricted if the entire network is wireless. As with any new, emerging technology, there will be issues that should be kept in mind before adapting to the wireless environment. Foremost is the network security involved in the installation and use of these wireless networks. This short, technical manuscript deals with standards and choices in wireless technology currently available for implementation within a dental office. The benefits of each network security protocol available to protect patient data and boost the efficiency of a modern dental office are discussed.

Computer Security↗

Distributing medical images with internet technologies: a DICOM web server and a DICOM java viewer.

With the advent of filmless radiology, it becomes important to be able to distribute radiologic images digitally throughout an entire hospital. A new approach based on World Wide Web technologies was developed to accomplish this objective. This approach involves a Web server that allows the query and retrieval of images stored in a Digital Imaging and Communications in Medicine (DICOM) archive. The images can be viewed inside a Web browser with use of a small Java program known as the DICOM Java Viewer, which is executed inside the browser. The system offers several advantages over more traditional picture archiving and communication systems (PACS): It is easy to install and maintain, is platform independent, allows images to be manipulated and displayed efficiently, and is easy to integrate with existing systems that are already making use of Web technologies. The system is user-friendly and can easily be used from outside the hospital if a security policy is in place. The simplicity and flexibility of Internet technologies makes them highly preferable to the more complex PACS workstations. The system works well, especially with magnetic resonance and computed tomographic images, and can help improve and simplify interdepartmental relationships in a filmless hospital environment.

Computer Security↗

Results of European projects improving security of distributed health information systems.

The challenge for improvement of quality and efficiency of health care systems causes the development and promotion of "Shared Care" in all developed countries. Distribution, decentralisation, and specialisation of health care must be joint with an extended communication and co-operation between the different care providers. Fulfilling the shared care paradigm, care supporting health information systems has to be distributed, interoperable, and scaleable too. Communication and co-operation across organisational, regional, and even national boundaries is bearing high threats and risks regarding security and privacy of medical and personal information of both patients and health professionals. Involved in several security projects funded by the European Union, the Medical Informatics Department and the regional Clinical Cancer Registry at the University of Magdeburg are piloting a secure regional distributed medical record system for cancer diseases. Requirements, solutions, and experiences are presented and discussed.

Computer Communication Networks↗

Application of a multilevel access model in the development of a security infrastructure for a clinical information system.

A number of security models including the military model, the Institute of Medicine model, and the matrix model have been utilized, or proposed, for protecting clinical information systems. These models have a number of limitations, however, and of particular concern, they focus on security as opposed to access. In this paper we describe a multilevel access model which can overcome some of these limitations. This model is currently being utilized in the development of an improved security infrastructure for a clinical information system.

Academic Medical Centers↗

Hierarchical Kohonenen net for anomaly detection in network security.

A novel multilevel hierarchical Kohonen Net (K-Map) for an intrusion detection system is presented. Each level of the hierarchical map is modeled as a simple winner-take-all K-Map. One significant advantage of this multilevel hierarchical K-Map is its computational efficiency. Unlike other statistical anomaly detection methods such as nearest neighbor approach, K-means clustering or probabilistic analysis that employ distance computation in the feature space to identify the outliers, our approach does not involve costly point-to-point computation in organizing the data into clusters. Another advantage is the reduced network size. We use the classification capability of the K-Map on selected dimensions of data set in detecting anomalies. Randomly selected subsets that contain both attacks and normal records from the KDD Cup 1999 benchmark data are used to train the hierarchical net. We use a confidence measure to label the clusters. Then we use the test set from the same KDD Cup 1999 benchmark to test the hierarchical net. We show that a hierarchical K-Map in which each layer operates on a small subset of the feature space is superior to a single-layer K-Map operating on the whole feature space in detecting a variety of attacks in terms of detection rate as well as false positive rate.

Algorithms↗

Implementing context and team based access control in healthcare intranets.

The establishment of an efficient access control system in healthcare intranets is a critical security issue directly related to the protection of patients' privacy. Our C-TMAC (Context and Team-based Access Control) model is an active security access control model that layers dynamic access control concepts on top of RBAC (Role-based) and TMAC (Team-based) access control models. It also extends them in the sense that contextual information concerning collaborative activities is associated with teams of users and user permissions are dynamically filtered during runtime. These features of C-TMAC meet the specific security requirements of healthcare applications. In this paper, an experimental implementation of the C-TMAC model is described. More specifically, we present the operational architecture of the system that is used to implement C-TMAC security components in a healthcare intranet. Based on the technological platform of an Oracle Data Base Management System and Application Server, the application logic is coded with stored PL/SQL procedures that include Dynamic SQL routines for runtime value binding purposes. The resulting active security system adapts to current need-to-know requirements of users during runtime and provides fine-grained permission granularity. Apart from identity certificates for authentication, it uses attribute certificates for communicating critical security metadata, such as role membership and team participation of users.

Computer Communication Networks↗

[A solution to add digital signatures to medical images according to the DICOM standard: embedded systems].

Radiology departments often underestimate the importance of protecting medical data during transmission, including the precautions taken to ensure data protection. In teleradiology, transmitted as well as stored patient data have to be signed digitally according to the currently valid regulation (Rontgenverordnung, RoV). The DICOM standard facilitates a digital signature. So far, medical image manufacturers only announced to support this security feature. We introduce a solution that extends the feature of digital signing to older modalities.

Computer Communication Networks↗

Generalisation and extension of a web-based data collection system for clinical studies using Java and CORBA.

Inadequate informatical support of multi-centre clinical trials lead to pure quality. In order to support a multi-centre clinical trial a data collection via WWW and Internet based on Java has been developed. In this study a generalization and extension of this prototype has been performed. The prototype has been applied to another clinical trial and a knowledge server based on C+t has been integrated via CORBA. The investigation and implementation of security aspects of web-based data collection is now under evaluation.

Artificial Intelligence↗

Realization of a CPR using HL7 queries from communication server to information server.

A communication server is often used in Germany to interface legacy systems. It handles the translation, duplication, and transmission of messages to all systems that might need this information. Based on the principles of "for every data there is only one master" and "information on demand" we have built an information server that reduces the messages required and simplifies the handling of messages, the update of data already sent compared to a communication server. It also allows to implement a security policy as required by the German data privacy legislature.

Computer Communication Networks↗

Security development of a pocket-sized teleradiology consultation system.

Telemedicine widens the access to sensitive data and therefore data security development is an essential part of telemedicine projects. Publicly available security evaluation methods provide a good starting point for security work. We built a mobile teleradiology consultation system that is integrated into hospital information system and systematically evaluated possible security threats that may endanger it. Based on the analysis, a security model was designed and implemented. We conclude that systematic approach to data security development facilitates the process but does not give all answers to the practical questions.

Computer Security↗

The technical conditions for an open architecture.

The development of Open Systems Architecture and the extensive networked interconnection of Health and Hospital Information Systems (HIS) offer great opportunities for improved care, but simultaneously these facilities pose a great danger to the overall security of the information held. The Geneva University Hospital which has built up it centralized informatics system over the last twenty years must now bring about the conditions for a migration towards open system, for although during the last ten years there have been declarations of intent, this architecture is still a long way from final implementation. Like others, the DIOGENE system (the Geneva HIS) has had to face difficult choices especially due to its own successful situation at the end of the eighties. This paper gives a brief explanation of the technical conditions needed in order to fully migrate towards an open system. The first choices towards obtaining optimum communication standards, operating systems and database management systems were the easiest. The real difficulties occurred when deciding on the choice for management tools in this open environment.

Computer Communication Networks↗

Enterprise systems.

Looking to the next generation of hospital information systems (HIS), the paper first provides an overview of enterprise systems, including the concept, current developments, hospital perspectives, critical issues and requirements, and future value-added enhancements. The paper then focuses on efforts drawing upon existing expertise in these critical areas, including infrastructure, workstations, standards, computerized patient records, and security. It concludes by stressing the importance of collaborative efforts in the creating of the next generation of HIS, health information systems or HIS.

Computer Security↗

Development of security guidelines for existing healthcare systems.

As modern healthcare establishments become increasingly dependent upon information systems it is vital to ensure that adequate security is present to safeguard the confidentiality and integrity of data and the availability of systems. Whilst this is now generally recognized in the design of new systems, many existing operational systems have been implemented without security in mind. This paper describes the need for a standardized approach in the protection of existing healthcare systems within Europe and presents an overview of a new set of information security guidelines that have been developed specifically for the medical community. The guidelines discussed have been produced as a deliverable of the Commission of European Communities (CEC) SEISMED (Secure Environment for Information Systems in Medicine) project, under the Advanced Informatics in Medicine (AIM) programme.

Computer Security↗

Smart cards: a specific application in the hospital.

Computers have the ability to process and access tremendous amounts of information in our daily lives. But, now, individuals have this ability by carrying a smart card in their own wallets. These cards provide us the versatility, power, and security of computers. This study begins with a short description of smart cards and their advantages. Then, an electronic circuit that is designed for healthcare application in hospitals is introduced. This circuit functions as a smart card holder identifier, access controller for hospital doors and also can be used as a smart card reader/writer. Design steps of this electronic circuit, operation principles, serial communication with P.C., and the software are examined. Finally a complete access control network for hospital doors that functions with smart cards is discussed.

Analog-Digital Conversion↗

A linkable identity privacy algorithm for HealthGrid.

The issues of confidentiality and privacy have become increasingly important as Grid technology is being adopted in public sectors such as healthcare. This paper discusses the importance of protecting the confidentiality and privacy of patient health/medical records, and the challenges exhibited in enforcing this protection in a Grid environment. It proposes a novel algorithm to allow traceable/linkable identity privacy in dealing with de-identified medical records. Using the algorithm, de-identified health records associated to the same patient but generated by different healthcare providers are given different pseudonyms. However, these pseudonymised records of the same patient can still be linked by a trusted entity such as the NHS trust or HealthGrid manager. The paper has also recommended a security architecture that integrates the proposed algorithm with other data security measures needed to achieve the desired security and privacy in the HealthGrid context.

Algorithms↗