A security architecture for interconnecting health information systems

International Journal of Medical Informatics

Volumn 73, Issue 3, 2004, Pages 305-309

  Gritzalis, Dimitris ^a   Lambrinoudakis, Costas ^b  

^a ATHENS UNIVERSITY OF ECONOMICS AND BUSINESS   (Greece)

^b UNIVERSITY OF THE AEGEAN   (Greece)

Author keywords

Computer security; Electronic healthcare records; Information systems security; Medical Data Protection; Medical data security; Role based access control

Indexed keywords

HEALTH CARE; INTELLIGENT AGENTS; MEDICAL COMPUTING; SECURITY OF DATA; WORLD WIDE WEB;

CHRONIC DISEASES; HEALTH INFORMATION SYSTEMS;

HOSPITAL DATA PROCESSING;

COMPUTER PROGRAM; COMPUTER SECURITY; HEALTH CARE PERSONNEL; HOSPITAL INFORMATION SYSTEM; HUMAN; MEDICAL INFORMATICS; MEDICAL INFORMATION; MEDICAL INFORMATION SYSTEM; MEDICAL RECORD; ORGANIZATION AND MANAGEMENT; PRIORITY JOURNAL; REVIEW;

EID: 1842526990     PISSN: 13865056     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.ijmedinf.2003.12.011     Document Type: Article

References (11)

1. B. Blobel, "Security requirements and solutions in distributed Electronic Health Records", in: Proceedings of the 13th IFIP International Information Security Conference (SEC-1997), 1997.
2. B. Blobel, S. Katsikas, "Patient Data and the Internet: Security Issues", Proceedings of the IMIA Conference on Common Security Solutions for Communicating Patient Data, 1997.
3. Cross M. Europe's wrestling with electronic patient record. Doc. World. 5.1:2000;30-33.
4. Gritzalis S., Iliadis J., Gritzalis D., Spinellis D., Katsikas S. Development of secure web-based medical applications. Med. Inf. 24(1):1999;75-90.
5. Q. He, K. Sycara, T. Finin, "Personal security agent: KQML-based PKI," in: Proceedings of the ACM Conference on Autonomous Agents, Minneapolis, USA, 1998.
6. S. Kokolakis, E. Kiountouzis, "Achieving interoperability in a multiple security policies environment", Computers and Security, vol. 15, No. 3, September 2000.
7. Organization for the Advancement of Structured Information Standards (OASIS), "Extensible access control markup language specification 1.0", OASIS Standard, November 2002 (available at http://www.oasis-open. org ).
8. Organization for the Advancement of Structured Information Standards (OASIS), "Security assertion markup language", OASIS Standard, May 2002 (available at http://www.oasis-open.org ).
9. J. Park, R. Sandhu, G-J. Ahn, "Role-based access control on the web", ACM Transactions on Information and Systems Security, vol. 4, No. 1, February 2001.
10. D. Spinellis, S. Gritzalis, J. Iliadis, D. Gritzalis, S. Katsikas, "Trusted Third Party services for deploying secure telemedical applications over the WWW", Computers and Security, vol. 18, No. 7, 1999.
11. Trade Partners, Health and Medical Market in Finland, United Kingdom 2002, available from: http://www.tradepartners.gov.uk/healthcare/finland/ profile/overview.shtml.