SEARCH · PubMed Health

Results for “secured computing”

Explore indexed PubMed citations for clinical trials, systematic reviews and public health research. Read source abstracts and follow each citation to its original PubMed record.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 1,495 records · Page 83Linked to original sources

PubMed2001

Experiences from development of home health care applications based on emerging Java technology.

Home health care is an expanding area within the health care system. The idea of moving parts of the health care process from expensive specialised hospital care to primary health care and home health care might be attractive in a cost perspective. The introduction of home health care applications must be based on a rigorous analysis of necessary requirements to secure a safe and reliable health care. This article reports early experiences from the development of a home health care application based on emerging Java technologies such as the OSGi platform. A pilot application for follow-up of diabetes patients is presented and discussed in relation to a list of general requirements on home health care applications.

Blood Glucose Self-Monitoring↗

PubMed2005

[Patients' mailbox and electronic prescription].

Electronic prescribing shall contribute essentially to improved healthcare services from 2006 onwards in Germany. The desired improvements, however, can only be achieved with "real" telematic solutions. The alternative of pharmaceutical prescription transmission via secure network connections or via electronic health card provides a considerable empowerment to the patients. Electronic prescribing, however, does not provide direct advantages to patients. Benefits for them can be realised by a drug documentation system, ready to identify contraindications or multiple prescriptions. The patients' acceptance of the system to be established therefore largely depends on the concurrent introduction of both elements.

Computer Security↗

PubMed2006

Secure e-Health: managing risks to patient health data.

e-Health, as an inter-jurisdictional enterprise, presents risks to patient health data that involve not only technology and professional protocols but also laws, regulations and professional security cultures. The USA Patriot Act is one example of how national laws can shape these concerns. Secure e-Health therefore requires not only national standardization of professional education and protocols but also global interoperability of regulations and laws. Some progress in this regard has been made in the European context; however, even here developments are incomplete, and nothing similar has been accomplished on a global scale. Professional health information organizations must take the lead in developing appropriate high-level principles for professional certification and security protocols and in harmonizing these on a global basis, so that they can provide a firm and consistent foundation for international treaties. Such developments should occur in concert with other health professions, so that coordinated requirements are integrated into revisions of the relevant codes of ethics. This presentation identifies and addresses some of the ethical and legal issues and proposes a series of recommendations.

Computer Security↗

PubMed1998

Adoption of security and confidentiality features in an operational community health information network: the Comox Valley experience--case example.

Since 1993, a budding community health information network (CHIN) has been in operation in the Comox Valley in Canada. A general hospital and three multi-doctor clinics are linked electronically. The clinics operate without paper charts using a comprehensive clinic information system. The link is provided by RSALink, a commercial message exchange service, based on Health Link, a system developed at the University of Victoria (McDaniel et al., Can. Med. Inform. 1 (1994) 40-41; McDaniel, Dissertation, University of Victoria, Canada, 1994). Health Link is a highly adaptable message exchange service with rich functionality. Despite this, the system is used exclusively to receive laboratory results transmitted by the hospital's laboratory system (RSAStat). The results are deposited in the patient data base of a commercial clinic information system (CliniCare). This case is instructive because the users' selection of services available through Health Link allows us to observe the preferences in this informational sophisticated environment. Laboratory data transmission is appreciated as highly beneficial. The reliability, security and ample privacy protection and authentication features of Health Link, in contrast, are used in a black box mode and are not consciously exploited. This is consistent with our experience of the use of other systems which have operated for a substantial time, essentially without serious protection features. Our experience suggests that security and confidentiality features are exploited only to the extent that they do not require additional effort or conscientious intervention. This puts the system provider in the difficult position of either offering interactive systems that nobody will use, or providing automated features that nobody is aware of and that are therefore not used to full advantage--if at all.

British Columbia↗

PubMed2003

EHR requirements.

Published requirements for the EHR are principally available via ISO 18308. They are statements defining the generic features necessary in any Electronic Health Record for it to be communicable and complete, retain integrity across systems, countries and time, and be a useful and effective ethico-legal record of care. Examples of requirements are provided in four themes: EHR functional requirements; Ethical, legal, and security requirements; Clinical requirements; Technical requirements. The main logical building blocks of an EHR are described using the terminology of CEN TC251 ENV13606. Examples are given of the placement of attributes to satisfy contextual and other requirements at the level of specific building blocks. A worked example of the use of the building blocks is given for the request-report cycle for an imaging investigation.

Computer Security↗

PubMed2002

Secure HL7 transactions using Internet mail (Internet draft).

The document describes the applicability of the Internet standardisation efforts on secure electronic data interchange (EDI) transactions for Health Level-7 (HL7), an EDI standard for Healthcare used world-wide. The document heavily relies on the work in progress by the IETF EDIINT working group. It is in most parts a restatement of the EDIINTs requirements document and application statement 1 (AS#1) tailored to the needs of the HL7 audience. The authors tried to make the document as self consistent as possible. The goal is to give to the reader who is not a security or Internet standards expert enough foundational and detail information to enable him to build communication software that complies to the Internet standards. Even though the authors rely on and promote the respective Internet standards and drafts, they did not withstand from commenting on and criticising the work where they see upcoming problems in use with HL7 or other EDI protocols that have not been in the initial focus of the EDIINT working group. The authors make suggestions to add parameters to the specification of the MIME type for EDI messages in RFC 1767 in order to enhance functionality. The authors give use cases for a larger subset of disposition types and modifiers of message disposition notifications. One key issue where the document goes beyond the current EDIINT drafts is the concept of non-repudiation of commitment to an EDI transaction. Secure EDI transactions should be regarded as "distributed contracts," i.e. not only the sending and receiving of single messages should be non-refutable but also the connection between messages interchanges. In anticipation of this requirement HL7 usually requires a response message to be sent to acknowledge every transaction. The authors therefore have the requirement to securely couple an EDI response message to its request message. Given the current shape of RFC 1767 this is generally possible only if a response message is coupled with an MDN receipt and the combination of both signed by the responder. The document describes a protocol to bundle MDN and response that uses the MIME multi-part/related content type in RFC 2112.

Computer Security↗

PubMed1992

Development of a model of information security requirements for enterprise-wide medical information systems.

Information security methods developed within the narrow frameworks of operating system design, specific database models, and military security methods all concentrate on representation of the objects of access control, rather than on the information needs of the subjects. This approach does not adequately support the needs of the varied users of medical information systems, who must have access to information in support of multiple organizational roles. A new conceptual approach to access control in medical settings based on user requirements is discussed.

Computer Security↗

PubMed2002

Hand surgery and the internet: results of a worldwide survey.

The opportunities offered by the Internet are employed increasingly in medicine. To obtain data on the extent to which the Internet is used by hand surgeons, survey forms were sent to 1043 participants of the Congress of the IFSSH in Vancouver in 1998. Ninety-four per cent of the respondents use the Internet. Most of the participants use the World Wide Web for literature searches, information on events and to read scientific articles. E-mail is used for general and scientific communication with colleagues and also for transmission of patient-related data. Perceived apprehensions include secure transmission of sensitive data, slow data transmission, and the lack of structure and of an authority to control the contents of the Internet. Virtual congresses and a newsgroup on hand surgery seem to be worthwhile future goals. Some problems pointed out in this survey have already been solved, at least partially, and possible solutions for the rest are discussed.

Attitude to Computers↗

PubMed1996

Open information systems and data security in medicine.

The realization of the German law for a new structure of health care delivery by the assurance of efficient structures and processes in hospitals calls for an optimal design of informational processes. To realize applications near to the users and just in time as well as to build up the complex functional relationships between departments and subsystems in big hospitals, a new design for Hospital Information Systems (HIS) is necessary. The features of modern HIS outlined in the paper can only be established by open systems, which guarantee portability, scalability and interoperability. This is also true in regionally distributed systems like the tumour register at Cancer Centres. In the paper the necessity and possibilities of open systems and different levels of application integration are discussed. The general statements are illustrated by practical realizations in the HIS of the Magdeburg University Hospital as well as in the tumour register at the Cancer Centre of Magdeburg/Sachsen-Anhalt. The creation of integrated structures for communications makes great demands on the assurance of data security and data protection, especially for the inclusion of external partners from the region. In the context of high sensitive data of cancer patients data protection is of top priority. The legal problems of data collection, data storage and exchange in medicine are discussed first. The paper presents some aspects of the concept for data security and data protection in the Magdeburg University HIS and of the related concept for data protection in the tumour register of the Cancer Centre Magdeburg/Sachsen-Anhalt. Appropriate steps of realization are demonstrated. The application of hardware based modern access control systems with integrated encryption of data follows. The statements are extended to the planned installation of hardware based network access control systems with integrated encryption of data in the LAN.

Computer Communication Networks↗

PubMed2005

Use of e-mail raises many HIPAA concerns for EDs.

Learn which types of electronic communications are most secure and who is permitted to see them to avoid regulatory violations. Use of common commercial e-mail services will not offer the necessary protection required by the Health Insurance Portability and Accountability Act of 1996. ED managers should be familiar with guidelines, especially electronically protected health information. Follow-up e-mails to primary care providers are only appropriate if your line and the recipient's line are encrypted.

Computer Security↗

PubMed2005

An implementation of a security infrastructure compliant with the Italian Personal Data Protection Code in a web-based cooperative work system.

In this poster we describe the security solutions implemented in a web-based cooperative work frame-work for managing heart failure patients among different health care professionals involved in the care process. The solution, developed in close collaboration with the Law Department of the University of Trento, is compliant with the new Italian Personal Data Protection Code, issued in 2003, that regulates also the storing and processing of health data.

Computer Security↗

PubMed2005

[Electronic health professional cards as indispensable elements of the upcoming health telematics infrastructure. Interactions with electronic patient data cards].

The German law for the modernization of statutory health care defines a functional framework for the upcoming telematics infrastructure in health care based on electronic health professional cards, electronic patient data cards and the necessary information, communication and security infrastructure. The currently ongoing discussion for the implementation is strongly influenced by diverse particulate interests often hindering systematic development. This article presents the fundamental technical mechanisms usable for a stepwise and expandable solution. The interdependence of the components is illustrated using the example of the ATG concept for an electronic patient record. These facts call for a stepwise implementation of telematic infrastructure based on the presented mechanisms.

Computer Communication Networks↗

PubMed2003

Taking the next step to privacy compliance for hospitals: implementing the OHA guidelines.

The recently released "Guidelines for Managing Privacy, Data Protection and Security for Ontario Hospitals," prepared by the Ontario Hospital eHealth Council Privacy and Security Working Group (the "Guidelines") are useful in that they provide a comprehensive overview of the types of issues raised for hospitals by existing and pending privacy legislation, and a very high-level framework for addressing same. However, the Guidelines are, as stated high-level guidelines only,--leaving hospital management to grapple with the next big step towards privacy compliance: how to operationalize the Guidelines within their particular hospital.

Computer Security↗

PubMedDate not supplied

Privacy and security: are your health information systems up to standard?

As electronic patient health information systems become more fully developed and widespread, there are persistent concerns about the privacy and confidentiality of the personal health data being stored and disseminated. Standards Australia has released two Standards which provide useful guidelines for the organisational, technological and human behavior solutions required to protect privacy and confidentiality in health care organisations. The major requirements of these Standards are outlined and the implications of the Standards for health information managers are discussed.

Australia↗

PubMed2000

Privacy and security compliance in the E-healthcare marketplace.

Complying with security and privacy regulations proposed by HHS in response to the Health Insurance Portability and Accountability Act (HIPAA) will require healthcare managers to address both internal and external business interactions and initiatives. The proposed regulations mandate certain procedures regarding administration, physical safeguards, technical security for data integrity and confidentiality, and technical security against unauthorized access. In particular, the proposed regulations require organizations to contractually ensure that vendors adhere to the regulations. Healthcare organizations also must implement training procedures for staff members who have contact with protected health information and designate a privacy officer to guard against improper disclosure of such information. Documented policies for organizational decision making are vital to an organization's efforts to implement procedures for compliance with the regulations.

Accreditation↗

PubMed2004

Sjunet--the national IT infrastructure for healthcare in Sweden.

Sjunet is the Swedish Health Care Network comprising an infrastructure for communication between hospitals, primary care centres and home care. It is also hosting a wide range of services from national authorities and health care service providers and vendors of health care systems. Sjunet allows secure transmission of health care data and applications on an IP-network separate from the Internet. The network is used for telemedical videoconferences, teleradiology, remote access to applications, database access, secure e-mail, EDI-messages and IP telephony. It is also useful for e-learning in medical education and further training for health personnel. Carelink is responsible for Sjunet in close co-operation with the county councils and other actors within Sjunet. Hence, Sjunet is as much a co-operative network as it is a technical communication platform for Swedish health care.

Computer Communication Networks↗

PubMed1998

Protecting patient confidentiality in hospitals.

As new methods of electronic data storage and distribution appear in hospitals, new challenges in protecting confidentiality have emerged. At the same time, demands for 'seamless' care and the desire to share information between clinicians are motivating hospitals to relax barriers to the transfer of patient information. Increasing numbers of users at multiple sites compound the difficulty of ensuring information systems security. Hospital policy may demand that requests by patients to restrict the distribution of personal information be respected, while existing electronic systems are not able to deliver on this promise. Compliance with the Information Privacy Principles of the Commonwealth Privacy Act 1988 and the Australian Standard 4400-1995 'Personal privacy protection in health care information systems' will provide a useful framework for managing these challenges. However, their implementation will require some forethought.

Australia↗

PubMed2006

Developing a strategic framework for healthcare standards.

This paper uses the example of information security to consider ways of ensuring that standards development matches evolving market needs within appropriate timeframes. It then considers the use of simple process maps as a way to identify interdependencies between emergent standards within specific domains, as well as generic characteristics that cross domain boundaries. It concludes by briefly examining issues that lie beyond the traditional technical orientation to consider its extension to information content and safety.

Community Health Planning↗