Logo image
Back
Distributed clinical data sharing via dynamic access-control policy transformation
Journal article   Peer reviewed

Distributed clinical data sharing via dynamic access-control policy transformation

F. Rezaeibagha and Y. Mu
International Journal of Medical Informatics, Vol.89, pp.25-31
2016
DOI: https://doi.org/10.1016/j.ijmedinf.2016.02.002
url
Link to Published Version *Subscription may be requiredView

Abstract

Background Data sharing in electronic health record (EHR) systems is important for improving the quality of healthcare delivery. Data sharing, however, has raised some security and privacy concerns because healthcare data could be potentially accessible by a variety of users, which could lead to privacy exposure of patients. Without addressing this issue, large-scale adoption and sharing of EHR data are impractical. The traditional solution to the problem is via encryption. Although encryption can be applied to access control, it is not applicable for complex EHR systems that require multiple domains (e.g. public and private clouds) with various access requirements. Objectives This study was carried out to address the security and privacy issues of EHR data sharing with our novel access-control mechanism, which captures the scenario of the hybrid clouds and need of access-control policy transformation, to provide secure and privacy-preserving data sharing among different healthcare enterprises. Methods We introduce an access-control mechanism with some cryptographic building blocks and present a novel approach for secure EHR data sharing and access-control policy transformation in EHR systems for hybrid clouds. Results We propose a useful data sharing system for healthcare providers to handle various EHR users who have various access privileges in different cloud environments. A systematic study has been conducted on data sharing in EHR systems to provide a solution to the security and privacy issues. Conclusions In conclusion, we introduce an access-control method for privacy protection of EHRs and EHR policy transformation that allows an EHR access-control policy to be transformed from a private cloud to a public cloud. This method has never been studied previously in the literature. Furthermore, we provide a protocol to demonstrate policy transformation as an application scenario.

Details

Metrics

16 Record Views
32 Times Cited - Web of Science

InCites Highlights

These are selected metrics from InCites Benchmarking & Analytics tool, related to this output

Citation topics
4 Electrical Engineering, Electronics & Computer Science
4.187 Security Systems
4.187.160 Cryptographic Protocols
Web Of Science research areas
Computer Science, Information Systems
Health Care Sciences & Services
Medical Informatics
ESI research areas
Clinical Medicine
Logo image