PubMed Health⌕ Search

SEARCH · PubMed Health

Results for “secured computing”

Explore indexed PubMed citations for clinical trials, systematic reviews and public health research. Read source abstracts and follow each citation to its original PubMed record.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 1,315 records · Page 73Linked to original sources
PubMed1995

A one way public key cryptosystem for the linkage of nominal files in epidemiological studies.

An encryption method is proposed for nominal files to allow their linkage while respecting confidentiality rules. In contrast to most encryption algorithms, this encryption method must be non-reversible. The method is based on congruence, like the SAN MARCO algorithm, and satisfies the two following conditions. 1) Non-reversible enciphering, which implies the possibility of collisions. 2) The collision rate must be minimized, to allow file linkage. The security of this method is, in addition, guaranteed by a key, which is destroyed after enciphering and is not given to the recipient of the coded file.

Algorithms↗
PubMed2004

Simultaneous storage of medical images in the spatial and frequency domain: a comparative study.

BACKGROUND: Digital watermarking is a technique of hiding specific identification data for copyright authentication. This technique is adapted here for interleaving patient information with medical images, to reduce storage and transmission overheads. METHODS: The patient information is encrypted before interleaving with images to ensure greater security. The bio-signals are compressed and subsequently interleaved with the image. This interleaving is carried out in the spatial domain and Frequency domain. The performance of interleaving in the spatial, Discrete Fourier Transform (DFT), Discrete Cosine Transform (DCT) and Discrete Wavelet Transform (DWT) coefficients is studied. Differential pulse code modulation (DPCM) is employed for data compression as well as encryption and results are tabulated for a specific example. RESULTS: It can be seen from results, the process does not affect the picture quality. This is attributed to the fact that the change in LSB of a pixel changes its brightness by 1 part in 256. Spatial and DFT domain interleaving gave very less %NRMSE as compared to DCT and DWT domain. CONCLUSION: The Results show that spatial domain the interleaving, the %NRMSE was less than 0.25% for 8-bit encoded pixel intensity. Among the frequency domain interleaving methods, DFT was found to be very efficient.

Algorithms↗
PubMed2004

A security architecture for interconnecting health information systems.

Several hereditary and other chronic diseases necessitate continuous and complicated health care procedures, typically offered in different, often distant, health care units. Inevitably, the medical records of patients suffering from such diseases become complex, grow in size very fast and are scattered all over the units involved in the care process, hindering communication of information between health care professionals. Web-based electronic medical records have been recently proposed as the solution to the above problem, facilitating the interconnection of the health care units in the sense that health care professionals can now access the complete medical record of the patient, even if it is distributed in several remote units. However, by allowing users to access information from virtually anywhere, the universe of ineligible people who may attempt to harm the system is dramatically expanded, thus severely complicating the design and implementation of a secure environment. This paper presents a security architecture that has been mainly designed for providing authentication and authorization services in web-based distributed systems. The architecture has been based on a role-based access scheme and on the implementation of an intelligent security agent per site (i.e. health care unit). This intelligent security agent: (a). authenticates the users, local or remote, that can access the local resources; (b). assigns, through temporary certificates, access privileges to the authenticated users in accordance to their role; and (c). communicates to other sites (through the respective security agents) information about the local users that may need to access information stored in other sites, as well as about local resources that can be accessed remotely.

Access to Information↗
PubMed2006

End-to-end security in telemedical networks--a practical guideline.

The interconnection of medical networks in different healthcare institutions will be constantly increasing over the next few years, which will require concepts for securing medical data during transfer, since transmitting patient related data via potentially insecure public networks is considered a violation of data privacy. The aim of our work was to develop a model-based approach towards end-to-end security which is defined as continuous security from point of origin to point of destination in a communication process. We show that end-to-end security must be seen as a holistic security concept, which comprises the following three major parts: authentication and access control, transport security, as well as system security. For integration into existing security infrastructures abuse case models were used, which extend UML use cases, by elements necessary to describe abusive interactions. Abuse case models can be constructed for each part mentioned above, allowing for potential security risks in communication from point of origin to point of destination to be identified and counteractive measures to be directly derived from the abuse case models. The model-based approach is a guideline to continuous risk assessment and improvement of end-to-end security in medical networks. Validity and relevance to practice will be systematically evaluated using close-to-reality test networks as well as in production environments.

Access to Information↗
PubMed2003

Use of information technology in general practice.

The internet and NHS Net are used increasingly in UK general practice. A questionnaire survey conducted in southern England examined these applications. 77 (55%) of 141 practices responded. Of these, 71 were connected to one or other service and 27 offered a practice website. Only a small minority used a website for direct patient booking or access to pathology results. Moreover, among those with a practice website, none paid the necessary attention to data security. The survey revealed some fundamental misunderstandings that may partly account for the slow uptake of these technologies in British general practice.

Computer Security↗
PubMed2004

Feasibility of a patient decision aid regarding disclosure of personal health information: qualitative evaluation of the Health Care Information Directive.

BACKGROUND: Concerns regarding the privacy of health information are escalating owing both to the growing use of information technology to store and exchange data and to the increasing demand on the part of patients to control the use of their medical records. The objective of this study was to evaluate the Health Care Information Directive (HCID), a recently-developed patient decision aid that aims to delineate the level of health information an individual is willing to share. METHODS: We convened a series of four focus group meetings with several communities in a large Canadian city. A total of 28 men and women participated, representing health care consumer advocates, urban professionals, senior citizens, and immigrants who speak English as a second language. Data were analysed using qualitative methods. RESULTS: Participants lacked substantial knowledge regarding the fate and uses of personal health information. They expressed mistrust concerning how their information will be used and protected. Several suggestions were made towards customizing the use of data according to specific needs rather than broad and full access to their charts. Furthermore, despite concern regarding the implementation of a tool like the HCID, participants were hopeful that a refined instrument could contribute to the improved regulation of health information. CONCLUSION: This study indicated poor knowledge concerning the uses of personal health information, distrust concerning security provisions, and cautious support for a patient decision aid such as the HCID to improve control over health data.

Access to Information↗
PubMed2002

Why we need standardisation in Healthcare security.

This chapter presents the benefits resulting from standardisation in the field of Security in Healthcare Information Systems (HIS). Especially in the EU, standardisation appears as a key element for the effectiveness of the Single Market and the competitiveness of European industry.

Computer Security↗
PubMed2004

High level security policies for health care establishments.

Health Care Establishments (HCE) are today highly dependent upon Information and Communications Technologies (ICT). This increasing reliance upon ICT has stressed the need to foster security in Healthcare Information Systems (HIS). Security policies may have a significant contribution to this effort, but they could become the cause of portability and interoperability problems. Moreover, policies that fail to take into account all the aspects of HIS security, the legal and regulatory requirements, and the existence of several stakeholders may lead to ineffective or inefficient security measures. Policies of a special category, named Generic Security Policies (GSP), should be developed to provide policy-level harmonisation and guidance to policy-makers within HCE. Six such policies are comparatively reviewed herein.

Access to Information↗
PubMed1993

Medical confidentiality and data protection as influenced by modern technology.

Confidentiality has been considered to be a basic element of the doctor-patient relationship worldwide since the time of Hippocrates. On the verge of entering a society in which communication plays a leading role, confidentiality alone can no longer protect the patient's rights. Increasing diagnostic activity multiplies the amount of data available for processing in health systems. On the other hand, the use of electronic medical records allows practically unlimited amounts of data to be saved. The compilation of any personal data, however, requires a legal basis such as the consent of the individual concerned, which is generally given within the doctor-patient relationship. Compiled medical data can be assigned to four main sectors: therapy, financing, administration and research. This division into four sectors is based on the need to reconcile the conflicting needs of the patient's right to informational self-determination and third-party interests. Data can be processed for one or more of these purposes insofar as a legal basis therefore (law or consent) exists. Using the data for purposes outside the sector for which they were compiled interferes with the individual's right to informational self-determination. Thus most data compiled in the course of therapy may not be processed for research purposes, unless made anonymous, thereby losing the chance of retracing the source of the data. However, new informational techniques can procure secure anonymized and retraceable data flow. The legislature has to consider these technologies in order to enable the enormous opportunities presented by new methods of data processing to be fully exploited in research.

Computer Security↗
PubMed2004

Verifiable threshold signature schemes against conspiracy attack.

In this study, the author has designed new verifiable (t,n) threshold untraceable signature schemes. The proposed schemes have the following properties:(1) Verification: The shadows of the secret distributed by the trusted center can be verified by all of the participants;(2) Security: Even if the number of the dishonest member is over the value of the threshold, they cannot get the system secret parameters, such as the group secret key, and forge other member's individual signature;(3) Efficient verification: The verifier can verify the group signature easily and the verification time of the group signature is equivalent to that of an individual signature; (4) Untraceability: The signers of the group signature cannot be traced.

Algorithms↗
PubMed1996

The computer-based record: patient moving from concept toward reality.

In 1991 the Institute of Medicine issued a report on improving patient records which has proven to be a landmark for the many individuals and institutions involved in the development of computer-based patient records (CPRs). The report called Computer-based Patient Records: An Essential Technology for Health Care, recommended that CPRs become the primary form for patient records, and urged widespread implementation of CPRs within a decade. It also provides a framework for reviewing the current status of CPRs. In reviewing progress that has been made toward CPRs since the Institute of Medicine (IOM) report was released, it is useful to look beyond the IOM report's major focus on efforts in the USA and include international activities related to CPR development and implementation. Looking forward, CPR efforts are likely to be expedited through greater collaboration.

Computer Communication Networks↗
PubMed2006

Investigating risk exposure in e-health systems.

PURPOSE: Health managers, administrators and health practitioners now face new challenges due to the increasing dependency being placed on electronic health information systems. This paper focuses on Electronic Health Records for determining the critical attributes for e-health system development. The proposed QUiPS model aims to provide a framework for building trustworthy solutions by identifying the pertinent issues needed to determine the risk exposure with a given system. APPROACH: To produce dependable, low risk and viable IT solutions, each critical attribute needs to be specifically addressed and prioritized. It is shown how these attributes possess a number of interdependencies making the analysis and prioritization tasks complex and hence, in practice, often incomplete. Two Australian case studies are presented that access enterprise level applications of live health records where these risk based techniques have been applied. RESULTS: The value and the shortcomings of taking a risk based approach to developing and deploying electronic health information systems that are safe and secure, is evaluated. The case studies presented indicate that traditional methods used to derive the requirements are often inadequate and the risks that are faced in ensuring a safe and secure system are highly application dependent and dynamic. CONCLUSIONS: Convergence towards a viable universal solution for our electronic health records is not imminent and trust in e-health is fragile. Policies that data custodians follow need to be flexible and updated on a regular basis. Technological solutions are at best a stop gap to avoid the common hazards associated with access control and secure messaging. A wider range of analysis techniques to determine the key issues for a dependable health information system can derive longer term sustainable solutions.

Attitude of Health Personnel↗
PubMedDate not supplied

HIPAA privacy and security implications for field triage.

The Health Insurance Portability and Accountability Act (HIPAA) of 1996 addresses insurance reforms, medical savings accounts, fraud and abuse provisions, and health information standards. This report discusses HIPAA issues that could impact field triage and emergency medical services.

Computer Security↗
PubMed2005

Digital reference service: trends in academic health science libraries.

Two years after the initial 2002 study, a greater number of academic health science libraries are offering digital reference chat services, and this number appears poised to grow in the coming years. This 2004 follow-up study found that 36 (27%) of the academic health science libraries examined provide digital chat reference services; this was an approximately 6% increase over the 25 libraries (21%) located in 2002. Trends in digital reference services in academic health science libraries were derived from the exploration of academic health science library Web sites and from digital correspondence with academic health science library personnel using e-mail and chat. This article presents an overview of the current state of digital reference service in academic health science libraries.

Academic Medical Centers↗
PubMed1996

Guidelines for secure system development and secure implementation.

In this paper the present state of development of the guidelines for both secure system development and secure implementation, as being drafted within the scope of the SEISMED project, are briefly described. For system development there is a lot of literature how to cope with security requirements. For secure implementation of systems within an organization hardly any literature was found. By consequence there is a significant difference in maturity of the two sets of guidelines.

Computer Security↗
PubMed1991

Data protection in networks.

Health Data are sensitive to loss, manipulation and breach of confidentiality. Systems handling health data must be especially secure. Anyone accessing health data-be they stored in data banks or in personalized chip-cards-must be specifically authorized to do so and must be strongly authenticated before access is granted.

Computer Communication Networks↗