PubMed Health⌕ Search

SEARCH · PubMed Health

Results for “secured computing”

Explore indexed PubMed citations for clinical trials, systematic reviews and public health research. Read source abstracts and follow each citation to its original PubMed record.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 1,261 records · Page 70Linked to original sources
PubMed2001

Towards second-generation smart card-based authentication in health information systems: the secure server model.

Conventional smart card-based authentication systems used in health care alleviate some of the security issues in user and system authentication. Existing models still do not cover all security aspects. To enable new protective measures to be developed, an extended model of the authentication process is presented. This model includes a new entity referred to as secure server. Assuming a secure server, a method where the smart card is aware of the status of the terminal integrity verification becomes feasible. The card can then act upon this knowledge and restrict the exposure of sensitive information to the terminal as required in order to minimize the risks. The secure server model can be used to illuminate the weaknesses of current approaches and the need for extensions which alleviate the resulting risks.

Computer Security↗
PubMed2004

Telemedical database of Hodgkin's disease.

The creation of a complex telemedical system oriented towards childhood Hodgkin's disease has been undertaken at the Department of Bioinformatics and Telemedicine of the Jagiellonian University Medical College in cooperation with the Department of Oncology and Pediatric Hematology of the Polish-American Institute of Pediatrics, JU MC. Data collecting, data processing and data transmission is aimed to aid and/or supervise surgical and drug treatment. The Tele-Database of Childhood Hodgkin's Disease (TDCHD) is not a simple Internet database project. A few hundred data items are presented in each patient's record, covering the complete medical treatment period. Efficient management and proper data protection are necessary for a medical database. Therefore, the interface for entering data has been divided into several parts. Each part is subjected to separate editing and transfer. A double-layer debugging system has been applied in the program: the first pass occurs on the client side (programmed in JavaScript and XML), the second - on the server side (programmed in PHP). Strict authorization is requested for all participants. Clinical data collected according to management standards and information governance (data quality, security and confidentiality) is organized in a way that facilitates practical and scientific use.

Child↗
PubMed1997

[Data protection measures in medical information systems].

Information technology and networks should improve health care in the next few years. But the information systems in use are open systems; processing and transporting data by them is incompatible with the high privacy requirements of patient information. We have the technical means to achieve better security, but we cannot build them into existing systems by way of addition--the suppliers of hard- and software must integrate them into the systems, beginning with the system design, in a way that doesn't detract users from their proper tasks; users shouldn't have to do more than log into the IT system with their Health Professional Card. On the other hand the expense of organisational means and security personnel in health care environment is not negligible. But a thorough realization of security features will substantially improve the quality of information and the compliance with the law. The costs will reduce the profit of information technology, but not completely.

Computer Security↗
PubMed2007

Pseudonymization of radiology data for research purposes.

Medical image processing methods and algorithms, developed by researchers, need to be validated and tested. Test data would ideally be real clinical data especially that clinical data is varied and exists in large volumes. Nowadays, clinical data is accessible electronically and has important value for researchers. However, the usage of clinical data for research purposes should respect data confidentiality, patient right to privacy, and patient consent. In fact, clinical data is nominative given that it contains information about the patient such as name, age, and identification number. Evidently, clinical data needs to be de-identified to be exported to research databases. However, the same patient is usually followed during a long period of time. The disease progression and the diagnostic evolution represent extremely valuable information for researchers as well. Our objective is to build a research database from de-identified clinical data while enabling the data set to be easily incremented by exporting new pseudonymous data, acquired over a long period of time. Pseudonymization is data de-identification, such that data belonging to an individual in the clinical environment still belong to the same individual in the de-identified research version. In this paper, we explore various software architectures to enable the implementation of an imaging research database that can be incremented in time. We also evaluate their security and discuss their security pitfalls. As most imaging data accessible electronically is available with the digital imaging and communication in medicine (DICOM) standard, we propose a de-identification scheme that closely follows DICOM recommendations. Our work can be used to enable electronic health record (EHR) secondary usage such as public surveillance and research, while maintaining patient confidentiality.

Algorithms↗
PubMed2005

[Ten critical theses for patient applied telematic applications in health care].

Telematics applications in health care improve patient care in many ways. Especially the improvements through electronic communication, documentation and cooperation between the different providers have high potential for a qualitative and effective health care. Immaterialization of patient records enables their availability as health records across all health care institutions that are involved in the treatment of a patient. However, the realization of a telematic platform in health care raises new questions concerning ethical and technical issues. These questions must be answered in consideration of the interests of citizens, patients, health care providers and insurance companies. Against this background ten critical theses regarding patient-oriented applications in health telematics are presented and discussed. Special attention is paid to the changes in the relationship between patients and physicians and the necessity to establish a new cooperative medical documentation culture, based on controlled vocabularies and where patients and physicians together decide, which information should be added to the central health record, as well as the creation of the necessary trustworthiness and the balance of effective benefit of health telematics and the informational self determination of the patient.

Computer Communication Networks↗
PubMed2002

Online health networks.

Healthcare networks function as a structural synergy serving the various healthcare actors, including the patient, who is the beneficiary. Medically speaking, they meet the need of healthcare professionals for targeted information sharing with regard to the medical record. Economically speaking, they may represent an added value and/or a diminution of costs, thus contributing to quality of care. The adoption of the same standards for all concerned servers is an absolute prerequisite if multidisciplinary applications are to be generated, as well as related services of an informational and educational nature.

Computer Security↗
PubMed1992

Information technologies. Physician-hospital networks.

Patient care efficiencies and quality of care improvements require progressive efforts to integrate the patient information systems and allow for on-demand accessibility to authorized information users. The dilemma facing the designers and managers of these systems is that each step toward improving accessibility seems to introduce another potential information leakage point. We are reminded once again that information is a very difficult resource to control because it is possible to steal it without removing it physically from its storage place. The essence of information security in physician links is captured by establishing mechanisms for identifying system users, limiting user authority, assuring the privacy of transmitted data, and monitoring system use and users.

Computer Communication Networks↗
PubMed1997

Security of medical image databases.

Medical images are an integral and indispensable part of health care information systems. Because of the critical nature of image information and stringent privacy requirements in medical environments, the medical images database systems must provide reasonable safeguards to assure confidentiality, integrity and availability of images to be deployable. In this paper we address mainly the confidentiality issues. Only authorized users should have for example access to medical images. Access to images is usually based on certain security constraints. Security constraints processing is a widely used mechanism for obtaining the appropriate level of the security required in traditional (non-multimedia) database systems. However, the security constraints processing in multimedia environments possess a number of interesting problems. In this paper we address the advantages and problems of using content-based security constraints on medical image databases. We also propose a methodology for the integration of security constraints into medical image databases, taking into account the true multimedia nature of the medical images (e.g. the content of the medical images).

Computer Communication Networks↗
PubMed1999

Results of European projects enabling secure regional, national and international health care networks.

Based on the work of the ISHTAR, the TRUSTHEALTH1, the EUROMED-ETS and the MEDSEC project funded by the European Commission, the synergetic results of these different projects in providing a security infrastructure for the test environment of an oncological network will be demonstrated. The ISHTAR project investigated security issues in Health Care Establishments (HCE). It provides guidance for threat and risk analysis, and defines a schema for specification and implementation of appropriate security services and mechanisms to respond to the HCE security requirements of both communication and application security concepts. The TRUSTHEALTH1 project dealt with specification and test implementation of basic security services and mechanisms based on Health Professional Cards (HPC) and Trusted Third Party (TTP) services. Within the EUROMED-ETS project, the security solution has been extended to the Internet environment and WWW tools, successfully creating an Internet-based international TTP structure between the universities of Athens, Calabria, and Magdeburg. Finally, in the MEDSEC project the specification and implementation of a generic EDI security solution has been delivered to provide secure communication between applications and sites. In the ongoing TRUSTHEALTH2 project, the results of all these projects will be implemented in a real environment of cancer care.

Algorithms↗
PubMed2000

The futility of common firewall policies: an experimental demonstration.

Many healthcare organizations utilize network "firewalls" to protect their networks from being accessed by unauthorized external entities. These same firewalls are also often configured to deny access to certain external services from within the internal network. The latter policy can be subverted through a "protocol tunneling" strategy, which has been implemented as a set of programs called "Firehole." Organizations should be aware of this potential weakness in their network security designs. Policies that deny external services to users should be carefully evaluated in light of clearly defined organizational goals.

Computer Communication Networks↗
PubMed1997

Internet security concerns.

Despite all the media hype, critical security issues do surround the Internet. Nurses need to ask two key questions: How is the Internet used in my organization and What kind of Internet connection do we have?

Computer Communication Networks↗
PubMed2006

Min-max hyperellipsoidal clustering for anomaly detection in network security.

A novel hyperellipsoidal clustering technique is presented for an intrusion-detection system in network security. Hyperellipsoidal clusters toward maximum intracluster similarity and minimum intercluster similarity are generated from training data sets. The novelty of the technique lies in the fact that the parameters needed to construct higher order data models in general multivariate Gaussian functions are incrementally derived from the data sets using accretive processes. The technique is implemented in a feedforward neural network that uses a Gaussian radial basis function as the model generator. An evaluation based on the inclusiveness and exclusiveness of samples with respect to specific criteria is applied to accretively learn the output clusters of the neural network. One significant advantage of this is its ability to detect individual anomaly types that are hard to detect with other anomaly-detection schemes. Applying this technique, several feature subsets of the tcptrace network-connection records that give above 95% detection at false-positive rates below 5% were identified.

Algorithms↗
PubMed2005

[Electronic health records in Germany].

Electronic health records (EGA), as overall medical applications for the documentation of medical information under the guidance and sovereignty of the patient, change the traditional doctor-patient relationship. Unlike the electronic patient record (EPA), which the treating physician is in charge of, the patient has the sole right to decide who may insert which data into it and who may see his electronic health record (EGA). Thus, the patient's right of informational self-determination and his possibilities to get involved in the treatment process are substantially strengthened. The current situation of the EGA in Germany is described and the parallel development of EGA and EPA is discussed. The electronic health record acquires extensive significance, especially in line with the imminent introduction of the electronic health card on the basis of a standardised telematics infrastructure in Germany.

Computer Communication Networks↗