Patient privacy protection using anonymous access control techniques.
Objective: The objective of this study is to develop a solution to preserve security and privacy in a healthcare environment where health-sensitive information will be accessed by many parties and stored in various distributed databases. The solution should maintain anonymous medical records and it...
| Publicado en: | Methods of Information in Medicine Vol. 47; no. 3; pp. 235 - 241 |
|---|---|
| Autores principales: | , , , , , , , |
| Formato: | research Journal Article |
| Publicado: |
Thieme Medical Publishing Inc.
2008
|
| Acceso en línea: | Ver este registro en EBSCOhost |
| fields | @attributes: recordID: 1 pdfLink: plink: https://search.ebscohost.com/login.aspx?direct=true&db=ccm&AN=105702114&site=ehost-live header: @attributes: shortDbName: ccm uiTerm: 105702114 longDbName: CINAHL Complete uiTag: AN controlInfo: bkinfo: dissinfo: jinfo: jid: 00261270 W7M jtl: Methods of Information in Medicine issn: 00261270 maglogo: N pubinfo: dt: 2008 vid: 47 iid: 3 pid: 2811 pub: Thieme Medical Publishing Inc. place: New York, New York artinfo: ui: 105702114 105702114 NLM18473090 2010096845 10.3414/me9116 NLM18473090 105702114 ppf: 235 ppct: 6 formats: tig: atl: Patient privacy protection using anonymous access control techniques. aug: au: Weerasinghe D Rajarajan M Elmufti K Rakocevic V Weerasinghe, D Rajarajan, M Elmufti, K Rakocevic, V affil: School of Engineering and Mathematical Sciences, City University, Northampton Square, London, EC1V 0HB, UK sug: subj: Data Security Equipment and Supplies Patient Record Systems Standards Privacy and Confidentiality Standards Data Security Standards Great Britain Patient Record Systems Administration Pilot Studies Human ab: Objective: The objective of this study is to develop a solution to preserve security and privacy in a healthcare environment where health-sensitive information will be accessed by many parties and stored in various distributed databases. The solution should maintain anonymous medical records and it should be able to link anonymous medical information in distributed databases into a single patient medical record with the patient identity.Methods: In this paper we present a protocol that can be used to authenticate and authorize patients to healthcare services without providing the patient identification. Healthcare service can identify the patient using separate temporary identities in each identification session and medical records are linked to these temporary identities. Temporary identities can be used to enable record linkage and reverse track real patient identity in critical medical situations.Results: The proposed protocol provides main security and privacy services such as user anonymity, message privacy, message confidentiality, user authentication, user authorization and message replay attacks. The medical environment validates the patient at the healthcare service as a real and registered patient for the medical services. Using the proposed protocol, the patient anonymous medical records at different healthcare services can be linked into one single report and it is possible to securely reverse track anonymous patient into the real identity.Conclusion: The protocol protects the patient privacy with a secure anonymous authentication to healthcare services and medical record registries according to the European and the UK legislations, where the patient real identity is not disclosed with the distributed patient medical records. pubtype: Academic Journal doctype: research Journal Article ougenre: Article language: English refInfo: holdings: @attributes: islocal: N |
|---|