Framework and prototype for a secure XML-based electronic health records system

International Journal of Electronic Healthcare

Volumn 3, Issue 2, 2007, Pages 151-174

  Steele, Robert ^a   Gardner, William ^a   Chandra, Darius ^a   Dillon, Tharam S ^a  

^a UNIVERSITY OF TECHNOLOGY SYDNEY   (Australia)

Author keywords

Access control; Auto generate user interface; Data confidentiality; eHealthcare system; EHRs; Electronic Health Records; eXtensible Markup Language; Security; Web application; XML

Indexed keywords

COMPUTER INTERFACE; ELECTRONIC MEDICAL RECORD; HEALTH CARE SYSTEM; HUMAN; INTERNET; MEDICAL INFORMATICS; MEDICAL INFORMATION; MEDICAL INFORMATION SYSTEM; REVIEW; TECHNOLOGY;

EID: 34248337455     PISSN: 17418453     EISSN: 17418461     Source Type: Journal    
DOI: 10.1504/IJEH.2007.013098     Document Type: Review

References (41)

1. Agrawal, R., Gehani, N.H. and Srinivasan, J. (1990) 'OdeView: the graphical interface to ode', International Conference on Management of Data, Atlantic City, NJ: ACM Press.
2. Bertino, E. and Ferrari, E. (2002) 'Secure and selective dissemination of XML documents', ACM Transactions on Information and System Security (TISSEC), Vol. 5, pp.290-331.
3. Bertino, E., Castano, S. and Ferrari, E. (2001) 'Securing XML documents with Author-X', Internet Computing, IEEE, Vol. 5, pp.21-31.
4. Carey, M., Haas, L., Maganty, V. and Williams, J. (1996) 'PESTO: an integrated query/browser for object databases', International Conference on Very Large Databases (VLDB), Mumbai, India.
5. Cornwall, A. (2002) 'Electronic health records: an international perspective', Health Issues Journal, Health Issues Centre Inc., La Trobe University.
6. Damiani, E., Samarati, P., de Capitani di Vimercati, S. and Paraboschi, S. (2001) 'Controlling access to XML documents', Internet Computing, IEEE, Vol. 5, pp.18-28.
7. Damiani, E., Vimercati, S.D.C.D., Paraboschi, S. and Samarati, P. (2002) 'A fine-grained access control system for XML documents', ACM Transactions on Information and System Security (TISSEC), Vol. 5, pp.169-202.
8. Dar, S., Gehani, N.H., Jagadish, H.V. and Srinivasan, J. (1995) 'Queries in an object-oriented graphical interface', Journal of Visual Languages and Computing, Vol. 6, pp.27-52.
9. DHA (2003) HealthConnect System Architecture, HealthConnect Program Office.
10. Edelstein, L. (2001) 'Hippocratic oath - classical version', Survivor M.D. Web Site.
11. FPC (2004) HealthConnect Interim Research Report and Draft Systems Architecture - Federal Privacy Commissioner Submission, Office of the Federal Privacy Commissioner.
12. Gabillon, A. and Bruno, E. (2001) 'Regulating access to XML documents', The 15th Annual Conference on Database Security.
13. Gardner, W., Chang, E. and Dillon, T.S. (2005) 'Declarative web form design method for XForms in e-business applications', 3rd International IEEE Conference on Industrial Informatics, INDIN05, Perth, Australia.
14. Goel, S.K., Clifton, C. and Rosenthal, A. (2003) 'Derived access control specification for XML', Workshop on XML Security, Fairfax, VA: ACM Press.
15. HL7 Inc. (2001) Health Level Seven - HL7 Standard.
16. Kudo, M. and Hada, S. (2000) 'XML document security based on provisional authorization', 7th ACM Conference on Computer and Communications Security (CCS), Athens, Greece: ACM Press.
17. Li, L. and Rubin, B. (2004) 'Technology investment in hospital: an empirical study', International Journal of Management Enterprise Development, Vol. 1, pp.390-410.
18. Metaxiotis, K., Ptochos, D. and Psarras, J. (2004) 'E-health in the new millennium: a research and practice agenda', International Journal of Electronic Healthcare, Vol. 1, pp.165-175.
19. Mieczkowska, S., Hinton, M. and Barnes, D. (2004) 'Barriers to e-health business processes', International Journal of Electronic Healthcare, Vol. 1, pp.47-59.
20. Miklau, G. and Suciu, D. (2003) 'Controlling access to published data using cryptography', VLDB.
21. Munroe, K.D. and Papakonstantinou, Y. (2000) 'BBQ: a visual interface for integrated browsing and querying of XML', International Conference on Very Large Databases (VLDB), Cairo, Egypt.
22. Nassis, V., Rajugan, R., Dillon, T.S. and Rahayu, W. (2004) 'Conceptual design of XML document warehouses', 6th International Conference on Data Warehousing and Knowledge Discovery, DaWaK 2004, Zaragoza, Spain.
23. NSW DoH (2001) A NSW Health Strategy for the Electronic Health Record - Government's Action Plan for Health, EHR Working Group: A Working Group of the Information Management Implementation Co-ordination Group (IMICG), NSW Department of Health.
24. OASIS (2003) eXtensible Access Control Markup Language (XACML) Version 1.0, http://www.oasis-open.org/committees/download.php/2406/oasis-xacml-1. 0.pdf.
25. Papakonstantinou, Y., Petropoulos, M. and Vassalos, V. (2002) 'QURSED: querying and reporting semistructured data', International Conference on Management of Data, Madison, WI: ACM Press.
26. Paulson, P.G. and Snyder, K. (2005) 'E-healthcare: strategies to consider', International Journal of Electronic Healthcare, Vol. 1, pp.442-452.
27. Petropoulos, M., Vassalos, V. and Papakonstantinou, Y. (2001) 'XML query forms (XQForms): declarative specification of XML query interfaces', International Conference on World Wide Web, Hong Kong: ACM Press.
28. Rajugan, R., Chang, E., Dillon, T.S. and Ling, F. (2003) 'XML view: Part 1', 14th International Conference on Database and Expert Systems Applications, Prague, Czech Republic.
29. Randeree, E. and Rao, H.R. (2004) 'E-health and assurance: curing hospital websites', International Journal of Electronic Healthcare, Vol. 1, pp.33-61.
30. Steele, R. and Dillon, T. (2004) 'Ontology driven system for mobile device access of electronic health records', Proceedings of Third International Conference of Mobile Business 04, New York, 12-13 July.
31. Steele, R., Gardner, W. and Dillon, T.S. (2004a) 'Xplorer: a generic search and navigation application for semi-structured data repositories', 3rd IASTED International Conference on Communications, Internet, and Information Technology (CIIT 2004), US Virgin Islands.
32. Steele, R., Ventsov, Y. and Dillon, T. (2004b) 'XML schema-based discovery and invocation of mobile services', IEEE EEE04, Taipeir.
33. USHHS (2003) Summary of the HIPAA Privacy Rule, Office for Civil Rights, US Department of Health and Human Services.
34. W3C-XFORMS (2003) XForms 1.0 - W3C Recommendation, http://www.w3.org/MarkUp/Forms/.
35. W3C-XHTML (2002) Extensible HyperText Markup Language XHTML 1.0, 2nd ed., http://www.w3.org/TR/xhtml1/'.
36. W3C-XML (2004) Extensible Markup Language (XML), http://www.w3.org/XML.
37. W3C-XPATH (1999) XML Path Language (XPath) Version 1.0, http://www.w3.org/TR/xpath.
38. W3C-XQUERY (2004) XQuery 1.0: An XML Query Language, http://www.w3.org/TR/xquery/.
39. W3C-XSL (2003) Extensible Stylesheet Language (XSL), http://www.w3.org/Style/XSL/.
40. Wenfei, F., Chee-Yong, C. and Minos, G. (2004) 'Secure XML querying with security views', SIGMOD, Paris, France.
41. Wickramasinghe, N. and Misra, S.K. (2004) 'A wireless trust model for healthcare', International Journal of Electronic Healthcare, Vol. 1, pp.60-70.