PubMed Health⌕ Search

SEARCH · PubMed Health

Results for “secured computing”

Explore indexed PubMed citations for clinical trials, systematic reviews and public health research. Read source abstracts and follow each citation to its original PubMed record.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 1,441 records · Page 80Linked to original sources
PubMed2000

Secure interoperability of patient data cards in health networks.

In the healthcare area, chip card based information systems occur in the shape of patient data cards providing informational self determination and mobility of the users as well as quality, integrity, accountability, and availability of the data stored on the card, thus improving the shared care of patients. Dealing with sensitive personal medical information, shared care information systems have to provide appropriate security services, only authorized users allowing restricted rights to the patients' data according to the "need to know" principle. The DIABCARD project aims the implementation and evaluation of a chip card based medical information system (CCMIS) for facilitating communication and co-operation between health professionals in different organisations or departments caring the same patient with Diabetes as an example. In co-operation with the EC-funded TrustHealth project, the communication and application security services needed are provided as strong authentication and the derived services like authorization, access control, accountability, confidentiality etc. The solution is based on Health Professional Cards and Trusted Third Party services. Besides the secure handling of the patient's chip cart in DIABCARD workstations, also the secure communication between these workstations and related departmental systems has been implemented. Finally, a few legal issues, future trends like the XML standard set and their implications for the solution presented as well as for distributed health information systems in general are shortly discussed.

Computer Communication Networks↗
PubMedDate not supplied

Storage options for the healthcare enterprise.

The storage objectives for the healthcare enterprise (HE) are to ensure that information (images and data) are readily available anywhere and at anytime, images and data are secure, and the storage fulfills legal requirements and the Health Insurance Portability and Accountability Act (HIPAA). These objectives must be satisfied at a minimum economic cost with respect to personnel, hardware, software, space and telecommunications. Many approaches and storage configurations meet these objectives. Which approach is chosen will depend on the size of the institution, patient population, geographic distribution of the institutions (if more than one), type of facility (such as a hospital, outpatient clinic or private imaging center), and financial investment objectives. The quantity of storage required depends on the characteristics of the modalities, the number of imaging devices and databases, the number and location of imaging sites that make up the HE, the size of the data and image, and the projected procedure volume growth. The only certainty with respect to storage requirements is that they will increase significantly with time. The types of storage required in the HE can be described by their functions: Active storage includes both online and long-term storage. Backup images are temporarily backed up on the limited storage capacity of the modality for several days or longer. Additional copies of the study are made on different media (e.g., disk, DVD or tape), in different locations. The process of backing up data and images must be automated. Effective April 21, 2005, HIPAA requires that all healthcare entities have a disaster recovery plan in effect. This requires that a copy of all medical data be secure, retrievable and maintained in a second location, such that if the primary copy of the data is destroyed or made unavailable, the disaster recovery copy would be available. Planning for the HE archive is critical if the HE is to work productively in an integrated digital environment. The information technology department must be an integral part of planning for the HE archive, which must be located in a secure data center and not under the management of any single clinical department. After the technologies currently available are evaluated, it is imperative that the chosen solution is cost-effective and scalable, and that it will allow the HE to take advantage of future storage and storage management technology.

Archives↗
PubMed2005

Encrypted storage of medical data on a grid.

OBJECTIVES: In this article we present grids as an architecture for medical image processing and health-care networks. We argue that confidential patient data should not be stored unprotected on a grid and explain why access control systems alone do not offer sufficient protection. The objective of our work is to propose a method that complements access control systems on a grid architecture and thus makes the storage of confidential data more secure. METHODS: Effective protection can be achieved by storing confidential data in encrypted form. This raises the problem of how authorized users get access to the data, since they need to have the decryption keys. RESULTS: Our proposal details a key management architecture, that allows encrypted storage and still enables users to access decryption keys for data they are authorized to see. To achieve this functionality we use distributed keyservers storing redundant shares of the keys. CONCLUSIONS: The resulting architecture achieves our primary objective of making the storage of confidential data more secure without loosing the data sharing properties of the grid architecture. Furthermore our architecture is robust against breakdowns and denial of service attacks. It scales well with the number of users and does not introduce a single point of failure into the system.

Access to Information↗
PubMed2006

The security implications of VeriChip cloning.

The VeriChip is a Radio-Frequency Identification (RFID) tag produced commercially for implantation in human beings. Its proposed uses include identification of medical patients, physical access control, contactless retail payment, and even the tracing of kidnapping victims. As the authors explain, the VeriChip is vulnerable to simple, over-the-air spoofing attacks. In particular, an attacker capable of scanning a VeriChip, eavesdropping on its signal, or simply learning its serial number can create a spoof device whose radio appearance is indistinguishable from the original. We explore the practical implications of this security vulnerability. The authors argue that:1 The VeriChip should serve exclusively for identification, and not authentication or access control. 2 Paradoxically, for bearer safety, a VeriChip should be easy to spoof; an attacker then has less incentive to coerce victims or extract VeriChips from victims' bodies.

Computer Security↗
PubMed2004

MDA-based EHR application security services.

Component-oriented, distributed, virtual EHR systems have to meet enhanced security and privacy requirements. In the context of advanced architectural paradigms such as component-orientation, model-driven, and knowledge-based, standardised security services needed have to be specified and implemented in an integrated way following the same paradigm. This concerns the deployment of formal models, meta-languages, reference models such as the ISO RM-ODP, and development as well as implementation tools. International projects' results presented proceed on that streamline.

Computer Communication Networks↗
PubMed2004

E-health in the Scandinavian countries.

For more than 10 years the Scandinavian countries have been focusing on utilizing information technology to increase efficiency in the delivery of healthcare services. Over the last 3 years all three countries have built closed secure IP-based healthcare networks that cover nearly all aspects of the national healthcare sector. The next step is to connect the national networks and integrate them into one large Scandinavian healthcare network. This paper describes the history of e-health in the Scandinavian Countries, the challenges and emerging trends.

Computer Security↗
PubMed1995

How to achieve secure environments for information systems in medicine.

The efficiency of modern health care relies more and more upon a computerized infrastructure. Open distributed IT-systems have started to bring professionals together from all around the world. Multimedia applications integrate formerly separated functionalities. On the one hand, easy processing and communication of images, sounds, and texts will help to represent illnesses and diseases holistically. But, on the other hand, such technology may compromise the privacy of patients, and may subvert the accountability and professional secrecy of health care professionals. The European Union has initiated a multi-disciplinary project to come up with practical guidelines on how to achieve a Secure Environment for Information Systems in MEDicine (SEISMED). It has taken into account the traditional and proven principles of health care data processing, the various legislations within the EU, the enormous and subtle risks of health care IT-systems, and the cost of changing existing technology.

Computer Communication Networks↗
PubMed1993

[Cancer registry and data security].

Population-based cancer registration has existed in the five Nordic countries for 35-50 years. With the exception of Sweden, the Nordic cancer registries not only collect figures of annual incidence, but also serve as institutes for cancer statistics and epidemiological research. The article gives an account of the scope of research based on cancer registries in the Nordic countries, as illustrated by examples from Finland.

Computer Security↗
PubMed1997

Privacy, confidentiality, and security in clinical information systems: dilemmas and opportunities for the nurse executive.

Protecting the patient medical record in an information age is neither simple or easy. Confidentiality dilemmas create opportunities for nurse executives to exercise leadership in areas of critical concern. The drive toward computerization offers profound implications for privacy, security, and confidentiality, which must be proactively pursued through the careful development of preventive measures. Additionally, the benefits of clinical information systems (CIS) in patient care must not be minimized. The nurse executive who understands the benefit of CIS is in a position to advocate for its important role in health care today.

Computer Security↗
PubMed1998

[Reliable cryptology as a means for confidentiality and safety in medical communication and documentation].

The application of strong cryptography secures the integrity of medical data and their confidentiality during transmission. Encryption allows to use the Internet for the transmission of confidential medical data rendering an expensive specialised Internet like the DGN superfluous. By signing and timestamping medical records electronically their probative force is substantially improved in case of a law-suit.

Algorithms↗
PubMed2003

Health integration cost cutting.

By combining several traditional approaches to integration with newer innovations, healthcare organizations are finding that problems such as HIPAA remediation and providing secure online access to patient records can be resolved by leveraging integration projects across the enterprise. In the current cost-cutting environment, the projects that get done are those that can be justified by direct impact on additional revenue, can show significant cost savings and extremely fast return on investment, and meet regulatory requirements.

Computer Security↗
PubMed2006

The diffusion of virtual communities in health care: concepts and challenges.

OBJECTIVE: This paper providers an overview and discussion of virtual communities in health care. Furthermore, we aim to discuss in this context ethical, legal and technical considerations and the current status of research in this domain. METHODS: We searched medical and social science literature including survey studies, randomized and non-randomized controlled interventions and reviews. RESULTS: The literature indicates that a virtual community in health care as a group of people using telecommunication with the purposes of delivering health care and education, and/or providing support, covers a wide range of clinical specialties, technologies and stakeholders. Examples include peer-to-peer networks, virtual health care delivery and research teams. Ethical challenges including the concepts of identity and deception, privacy and confidentiality and technical issues, such as sociability and usability are discussed. CONCLUSION: Virtual communities may empower patients and enhance coordination of care services; however, there is not sufficient systematic evidence of the effectiveness of virtual communities on clinical outcomes or patient empowerment. Researchers need to address issues, such as sample sizes and experimental design to further the research field in this domain. PRACTICE IMPLICATIONS: When practitioners utilize virtual community tools to communicate with patients or colleagues they have to maximize sociability and usability of this mode of communication, while addressing concerns for privacy and the fear of de-humanizing practice, and the lack of clarity or relevance of current legislative frameworks.

Attitude of Health Personnel↗
PubMed2005

[Telematics in the health system and data protection].

In the health system, telematics are to be used for the benefit of patients and to make it possible for them to receive better medical care. Telematics must be employed in accordance with the guidelines of data protection and this means in particular that the patient must remain the master of his data. Therefore, he must be able to decide in which situation and to whom he wants to reveal his medical data. For this reason, the exact implementation of the introduction of the electronic medical smart card envisaged by the law requires detailed access authorisations and limitations, which must be reinforced by ample technical security measures. These measures must be transmitted to the patients through co-operation of doctors and health insurance companies in such a transparent way that they recognise the advantages of the new technology. The higher the acceptance is on the patients' side, the more they will be willing to participate voluntarily in telematic projects.

Computer Communication Networks↗
PubMed1996

Security standards for medical information systems.

This paper has provided an overview of some of the aspects of medical information systems security and the standards that are available to implement security solutions. There is a need to address a complete solution for the security of medical information systems: technical, procedural and legal protection of medical records, databases, applications, hardware and software, networks and the management of the system. The existing standards cover some of these topics but not all. There is still room for further work and the development of standardised technological solutions supported by legal and procedural measures.

Computer Security↗
PubMed2004

Chief medical officer actions on information security in an Italian rehabilitation centre.

In a multi-speciality rehabilitation centre, where child neuropsychiatrists, neurologists, physical rehabilitators, psychologists, nurses, therapists and other health care professionals actively care for patients, the moment will arrive when information security takes high priority on the chief medical officer (CMO) agenda. This has happened at the La Nostra Famiglia Institution. Local push to high priority arose from several concurrent forces, like privacy both on the patient and on the doctor side, legal and ethical aspects. Recommendations on the protection of medical data require appropriate technical and organisational measures to be taken to protect personal data against unauthorised access, alterations or any other form of inappropriate processing. In the same time quick and easy access to patient information should be granted to authorised personnel to ensure proper and in time treatment of patients. A long lasting sequence of co-operative negotiation meetings between the CMO and the chief information officer (CIO) led to appropriate outline of policies. We developed a suitable and modular architecture for designing systems that can simultaneously manage an increasing number of healthcare actors, objects and related access levels taking into account temporal conditions. Actions for keeping the prototype in use on an everyday basis are directly taken by the CMO.

Access to Information↗
PubMed2004

Multidimensional analysis: a management tool for monitoring HIPAA compliance and departmental performance.

Most RIS and PACS systems include extensive auditing capabilities as part of their security model, but inspecting those audit logs to obtain useful information can be a daunting task. Manual analysis of audit trails, though cumbersome, is often resorted to because of the difficulty to construct queries to extract complex information from the audit logs. The approach proposed by the authors uses standard off-the-shelf multidimensional analysis software tools to assist the PACS/RIS administrator and/or security officer in analyzing those audit logs to identify and scrutinize suspicious events. Large amounts of data can be quickly reviewed and graphical analysis tools help explore system utilization. While additional efforts are required to fully satisfy the demands of the ever-increasing security and confidentiality pressures, multidimensional analysis tools are a practical step toward actually using the information that is already being captured in the systems' audit logs. In addition, once the work is performed to capture and manipulate the audit logs into a viable format for the multidimensional analysis tool, it is relatively easy to extend the system to incorporate other pertinent data, thereby enabling the ongoing analysis of other aspects of the department's workflow.

Computer Security↗
PubMed2000

Secure, web-accessible call rosters for academic radiology departments.

Traditionally, radiology department call rosters have been posted via paper and bulletin boards. Frequently, changes to these lists are made by multiple people independently, but often not synchronized, resulting in confusion among the house staff and technical staff as to who is on call and when. In addition, multiple and disparate copies exist in different sections of the department, and changes made would not be propagated to all the schedules. To eliminate such difficulties, a paperless call scheduling application was developed. Our call scheduling program allowed Java-enabled web access to a database by designated personnel from each radiology section who have privileges to make the necessary changes. Once a person made a change, everyone accessing the database would see the modification. This eliminates the chaos resulting from people swapping shifts at the last minute and not having the time to record or broadcast the change. Furthermore, all changes to the database were logged. Users are given a log-in name and password and can only edit their section; however, all personnel have access to all sections' schedules. Our applet was written in Java 2 using the latest technology in database access. We access our Interbase database through the DataExpress and DB Swing (Borland, Scotts Valley, CA) components. The result is secure access to the call rosters via the web. There are many advantages to the web-enabled access, mainly the ability for people to make changes and have the changes recorded and propagated in a single virtual location and available to all who need to know.

Academic Medical Centers↗