Security on the Web: Big Brother is watching you.
Explore the source record for details and available documents.
Computer Communication Networks↗
SEARCH · PubMed Health
Results for “secured computing”
Explore indexed PubMed citations for clinical trials, systematic reviews and public health research. Read source abstracts and follow each citation to its original PubMed record.
Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.
Security versus access: trade-offs are only part of the story.
Explore the source record for details and available documents.
Computer Security↗
Radiology CME on the Web using secure document transfer and internationally distributed image servers.
We describe the implementation of a World Wide Web-based Continuing Medical Educational (CME) program in Diagnostic Radiology which allows accumulation of Category I credit. The program implements an unknown case presentation format which includes multiple choice questions, didactic information, and literature references with links to abstracts. Physician participation is anticipated to occur in brief sessions during which the program automatically tracks CME credit accumulation. To allow an interactive presentation, HTML electronic form documents are created "on the fly" by a Common Gateway Interface (CGI) application interfacing with several relational databases. The system is scalable with bandwidth intensive image transfers distributed over multiple internationally distributed image servers. For CME participants, the system utilizes documents encryption to ensure confidential physician interactions.
Computer Communication Networks↗
Wikis, blogs and podcasts: a new generation of Web-based tools for virtual collaborative clinical practice and education.
BACKGROUND: We have witnessed a rapid increase in the use of Web-based 'collaborationware' in recent years. These Web 2.0 applications, particularly wikis, blogs and podcasts, have been increasingly adopted by many online health-related professional and educational services. Because of their ease of use and rapidity of deployment, they offer the opportunity for powerful information sharing and ease of collaboration. Wikis are Web sites that can be edited by anyone who has access to them. The word 'blog' is a contraction of 'Web Log' - an online Web journal that can offer a resource rich multimedia environment. Podcasts are repositories of audio and video materials that can be "pushed" to subscribers, even without user intervention. These audio and video files can be downloaded to portable media players that can be taken anywhere, providing the potential for "anytime, anywhere" learning experiences (mobile learning). DISCUSSION: Wikis, blogs and podcasts are all relatively easy to use, which partly accounts for their proliferation. The fact that there are many free and Open Source versions of these tools may also be responsible for their explosive growth. Thus it would be relatively easy to implement any or all within a Health Professions' Educational Environment. Paradoxically, some of their disadvantages also relate to their openness and ease of use. With virtually anybody able to alter, edit or otherwise contribute to the collaborative Web pages, it can be problematic to gauge the reliability and accuracy of such resources. While arguably, the very process of collaboration leads to a Darwinian type 'survival of the fittest' content within a Web page, the veracity of these resources can be assured through careful monitoring, moderation, and operation of the collaborationware in a closed and secure digital environment. Empirical research is still needed to build our pedagogic evidence base about the different aspects of these tools in the context of medical/health education. SUMMARY AND CONCLUSION: If effectively deployed, wikis, blogs and podcasts could offer a way to enhance students', clinicians' and patients' learning experiences, and deepen levels of learners' engagement and collaboration within digital learning environments. Therefore, research should be conducted to determine the best ways to integrate these tools into existing e-Learning programmes for students, health professionals and patients, taking into account the different, but also overlapping, needs of these three audience classes and the opportunities of virtual collaboration between them. Of particular importance is research into novel integrative applications, to serve as the "glue" to bind the different forms of Web-based collaborationware synergistically in order to provide a coherent wholesome learning experience.
Audiovisual Aids↗
Securing electronic health records without impeding the flow of information.
OBJECTIVE: We present an integrated set of technologies, known as the Hippocratic Database, that enable healthcare enterprises to comply with privacy and security laws without impeding the legitimate management, sharing, and analysis of personal health information. APPROACH: The Hippocratic Database approach to securing electronic health records involves (1) active enforcement of fine-grained data disclosure policies using query modification techniques, (2) efficient auditing of past database access to verify compliance with policies and track security breaches, (3) data mining algorithms that preserve privacy by randomizing information at the individual level, (4) de-identification of personal health data using an optimal method of k-anonymization, and (5) information sharing across autonomous data sources using cryptographic protocols. CONCLUSIONS: Our research confirms that policies concerning the disclosure of electronic health records can be reliably and efficiently enforced and audited at the database level. We further demonstrate that advanced data mining and anonymization techniques can be employed to analyze aggregate health records without revealing individual patient identities. Finally, we show that web services and commutative encryption can be used to share sensitive information selectively among autonomous entities without compromising security or privacy.
Access to Information↗
Advanced tool kits for EPR security.
Responding to the challenge for efficient and high quality health care, the shared care paradigm must be established in health. In that context, information systems such as electronic patient records (EPR) have to meet this paradigm supporting communication and interoperation between the health care establishments (HCE) and health professionals (HP) involved. Due to the sensitivity of personal medical information, this co-operation must be provided in a trustworthy way. To enable different views of HCE and HP ranging from management, doctors, nurses up to systems administrators and IT professionals, a set of models for analysis, design and implementation of secure distributed EPR has been developed and introduced. The approach is based on the popular UML methodology and the component paradigm for open, interoperable systems. Easy to use tool kits deal with both application security services and communication security services but also with the security infrastructure needed. Regarding the requirements for distributed multi-user EPRs, modelling and implementation of policy agreements, authorisation and access control are especially considered. Current developments for a security infrastructure in health care based on cryptographic algorithms as health professional cards (HPC), security services employing digital signatures, and health-related TTP services are discussed. CEN and ISO initiatives for health informatics standards in the context of secure and communicable EPR are especially mentioned.
Algorithms↗
A team approach to managing an information security program.
How can HIM professionals step into the spotlight as facilities establish information security policies and procedures? At Hartford Hospital, HIM practitioners collaborated with other departments and formed a team that creatively implements and manages the security process.
Computer Security↗
Electronic records pose new security challenges.
LOCATION: Sarasota (FL) Memorial Hospital. PROJECT: To effectively secure patient records as the hospital moves from paper records to electronic records system. GOAL: New fingerprint electronic security systems offer flexibility while restricting access to authorized individuals only.
Computer Security↗
Implementing data privacy and security (the Slovenian experience).
Data protection is carried out in two steps. The legislation covers data privacy in general as well as its projection in health care. Its purpose was to leave no personal data undefined within the national health care system. The regulations deal with procedures and anticipated corrective actions, rendering a so-called "organisational prescription". Its purpose was to assure data security through an appropriate information system.
Computer Security↗
Security measures required for HIPAA privacy.
HIPAA security requirements include administrative, physical, and technical services and mechanisms to safeguard confidentiality, availability, and integrity of health information. Security measures, however, must be implemented in the context of an organization's privacy policies. Because HIPAA's proposed privacy rules are flexible and scalable to account for the nature of each organization's business, size, and resources, each organization will be determining its own privacy policies within the context of the HIPAA requirements and its security capabilities. Security measures cannot be implemented in a vacuum.
Computer Security↗
Realization of security concepts for DICOM-based distributed medical services.
Exploiting distributed hard- and software resources for telemedicine requires a fast, secure, and platform-independent data exchange. Standards without inherent security mechanisms such as DICOM may ease non-authorized data access. Therefore, exemplary telemedical data streams were analyzed within the Berlin metropolitan area network using specialized magnetic resonance imaging techniques and distributed resources for data postprocessing. For secure DICOM communication both the Secure Socket Layer Protocol and a DICOM-conform partial encryption of patient-relevant data were implemented. Partial encryption exhibited the highest transfer rate and enabled a secure long-term storage. Different data streams between secured and unsecured networks were realized using partial encryption.
Berlin↗
Future of security and privacy in medical information.
Today, issues of privacy and confidentiality in healthcare are dealt largely informally. Little legislation exists, and the awkwardness of accessing paper records makes violations of patients' privacy sporadic. As healthcare institutions move towards a future where all information is kept in an Electronic Medical Record (EMR), the casual attitudes that are prevalent will be in conflict with the desires and expectations of the patients. Legislation has been passed to make the holders of medical data responsible for securely protecting the patients privacy. Specific implementation guidelines are still lacking. There is much institutional resistance to the adoption of rigorous rules, but we expect that in the near future reliable procedures will have to be implemented to comply both with legal guidelines and patient's expectations. After introducing the issue more precisely we provide an overview over the concepts needed to understand the roles of technology of privacy and security and the people that must manage the technology. We then discuss the components of secure EMR systems and will point out where adequate technology exists and where future improvements are essential. We conclude with some advice to healthcare management facing the demands for security and privacy that the future will bring.
Computer Security↗
Imaging center emergency: who has the back-ups?
On first glance, the issue of data back-up appears to be straightforward and relatively uncomplicated since procedures will already be in place. However, as the related risks and requirements are included in the equation, the process of meeting HIPAA requirements in this area becomes more complicated. Data back-up is an important part of disaster and emergency mode operations planning adding to the challenge of meeting the Security Rule's April 21, 2005, compliance date.
Computer Security↗
The hereafter. Why IT security matters to your practice even after the HIPAA Security Rule deadline.
The days when taking care of security meant locking filing cabinets and installing a reliable burglar alarm are long gone. But just what is the role of a practice's administrator to ensure that its information technology is secure? This article helps administrators answer that question.
Computer Security↗
Addressing information security training and awareness within the European healthcare community.
This paper discusses the need to promote information security issues within modern healthcare establishments and the consequent need for appropriate training and awareness initiatives. Security is an area of extreme significance in healthcare information systems but, whilst the need is generally recognised, many personnel are not familiar with even basic concepts and procedures. As such, adequate promotion of security through training and awareness initiatives is viewed as a vital first step. The paper highlights a series of basic factors that healthcare establishments (HCEs) should consider in setting up a training and awareness framework. The discussion then examines a number of ways in which relevant information may be disseminated to staff, including security guidelines, training seminars and world-wide web based services. The paper is largely based upon work that is currently being conducted as part of the Health Telematics ISHTAR (Implementing Secure Healthcare Telematics Applications in euRope) project.
Awareness↗
Multimedia authenticity protection with ICA watermarking and digital bacteria vaccination.
We propose the application of independent component analysis (ICA), via unsupervised neural networks, to authenticity protection for multimedia products. We give an overview of the current state of multimedia authenticity protection, including the requirements of various multimedia applications, current approaches to the problem, and the robustness of the approaches. For watermark security, a covert independent-component watermarking signal can serve as a 'vaccination' against a dormant digital 'bacteria' protecting the multimedia data. An unauthorized removal of the watermark triggers the bacteria payload, which then degrades the quality of the unauthorized data. We argue that such digital bacteria meet all the established requirements for beneficial virus-like programs, and their payload would merely affect pirated media. We show how these new approaches contribute to a flexible, robust, and secure system for protecting the authenticity of multimedia products.
Computer Security↗
Security measures for protecting confdential information on the Internet and Intranets.
Explore the source record for details and available documents.
Computer Communication Networks↗
Security for microcomputers in public areas.
Explore the source record for details and available documents.
Academic Medical Centers↗