Economic and security aspects of applying a threshold scheme in e-health

ARES 2008 - 3rd International Conference on Availability, Security, and Reliability, Proceedings

Volumn , Issue , 2008, Pages 39-46

  Riedl, Bernhard ^a   Grascher, Veronika ^a   Kolb, Mathias ^a   Neubauer, Thomas ^a  

^a Secure Business Austria   (Austria)

Author keywords

[No Author keywords available]

Indexed keywords

E-HEALTH; ECONOMIC CONSTRAINTS; ELECTRONIC HEALTH RECORDS; HEALTH CARE SECTORS; HEALTH DATA; INTERNATIONAL CONFERENCES; K , N THRESHOLD SCHEME; SECURITY MECHANISMS; SERVICE QUALITY;

HEALTH; HEALTH CARE; RECORDS MANAGEMENT;

SECURITY OF DATA;

EID: 49049106162     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/ARES.2008.175     Document Type: Conference Paper

References (37)

1. S. J. Wang, B. Middleton, L. A. Prosser, C. G. Bardon, C. D. Spurr, P. J. Carchidi, A. F. Kittler, R. C. Goldszer, D. G. Fairchild, A. J. Sussman, G. J. Kuperman, and D. W. Bates, "A cost-benefit analysis of electronic medical records in primary care," The American Journal of Medicine, vol. 114, pp. 397-403, 2003.
2. F. R. Ernst and A. J. Grizzle, "Drug-related morbidity and mortality: Updating the cost-of-illness model," University of Arizona, Tech. Rep., 1995.
3. _, "Drug-related morbidity and mortality: Updating the cost-of-illness model," University of Arizona, Tech. Rep., 2001.
4. Health Level Seven, Inc., "H17 version 3," online: http://www.h17.org/v3ballot/html/welcome/environment/index.htm, September 2007.
5. IBM, "Machbarkeitsstudie betreffend Einfuehrung der elektronischen Gesundheitsakte (ELGA) im oesterreichischen Gesundheitswesen," 2006.
6. R. L. Peterson, "Patent: Encryption system for allowing immediate universal access to medical records while maintaining complete patient control over privacy," US Patent US 2003/0074564 A1, 2003.
7. C. Thielscher, M. Gottfried, S. Umbreit, F. Boegner, J. Haack, and N. Schroeders, "Patent: Data processing system for patient data," Int. Patent, WO 03/034294 A2, 2005.
8. G. de Moor, B. Claerhout, and F. de Meyer, "Privacy enhancing technologies: the key to secure communication and management of clinical and genomic data," Methods of information in medicine, vol. 42, pp. 148-153, 2003.
9. J. Gulcher, K. Kristjansson, H. Gudbjartsson, K., and Stefanson, "Protection of privacy by third-party encryption in genetic research," European journal of human genetics, vol. 8, pp. 739-742, 2000.
10. K. Pommerening, "Medical Requirements for Data Protection," in Proceedings of IFIP Congress, Vol. 2, 1994, pp. 533-540. [Online]. Available: citeseer.ist.psu.edu/330589.html
11. K. Pommerening and M. Reng, Medical And Care Compunetics 1. IOS Press, 2004, ch. Secondary use of the Electronic Health Record via pseudonymisation, pp. 441-446.
12. B. Riedl, V. Grascher, and T. Neubauer, "Applying a threshold scheme to the pseudonymization of health data," in to appear in the proceedings of the 13th IEEE Pacific Rim International Symposium on Dependable Computing (PRDC07), 2007.
13. B. Riedl, V. Grascher, S. Fenz, and T. Neubauer, "Pseudonymization for improving the privacy in e-health applications," in to appear on Proceedings of the Forty-First Hawai'i International Conference on System Sciences, 2008.
14. R. C. Barrows and P. D. Clayton, "Privacy, confidentiality, and electronic medical records," Journal of the American Medical Informatics Association, vol. 13, pp. 139-148, 1996, http://www.pubmedcentral.nih.gov/ picrender.fcgi?artid=116296&blobtype=pdf.
15. K. Pommerening, "Pseudonyme ein Kompromiss zwischen Anonymisierung und Personenbezug," Medizinische Forschung - Aerztliches Handeln; 40. Jahrestagung der GMDS, pp. 329-333, September 1995.
16. M. Ackerman, R. Craft, F. Ferrante, M. Kratz, S. Mandil, and H. Sapci, "Telemedicine technology," Telemedicine Journal and e-Health, vol. 8, No. 1, pp. 71-78, 2002.
17. J. Montagnat, F. Bellet, H. Benoit-Cattin, V. Breton, L. Brunie, H. Duque, Y. Legr, I. E. Magnin, L. Maigne, S. Miguet, J. M. Pierson, L. Seitz, and T. Tweed, "Medical images simulation, storage, and processing on the european datagrid testbed," Journal of Grid Computing, vol. 2, Number 4, pp. 387-400, 2004.
18. A. Pfitzmann and M. Koehntopp., "Anonymity, Unlinkability, Unobservability, Pseudonymity, and Identity Management A Consolidated Proposal for Terminology," in Lecture Notes in Computer Science. Springer Berlin / Heidelberg, 2005.
19. B. Riedl, T. Neubauer, and O. Boehm, "Patent: Datenverarbeitungssystem zur verarbeitung von objektdaten," Austrian-Provisional-Application, Application No. A 1928/2006, 2006.
20. B. Riedl, T. Neubauer, G. Goluch, O. Boehm, G. Reinauer, and A. Krumboeck, "A secure architecture for the pseudonymization of medical data," in Proceedings of the Second International Conference on Availability, Reliability and Security, 2007, pp. 318-324.
21. K. Taipale, "Technology, Security and Privacy: The Fear of Frankenstein, the Mythology of Privacy and the Lessons of King Ludd," International Journal of Communications Law & Policy, vol. 9, 2004.
22. D. Lobach and D. Detmer, "Research challenges for electronic health records," American Journal of Preventive Medicine, vol. 32, Issue 5, pp. 104-111, 2007.
23. T. Thornburgh, "Social engineering: the "Dark Art"," in Proceedings of the 1st annual conference on Information security curriculum development. New York, NY, USA: ACM Press, 2004, pp. 133-135.
24. K. Maris, "The Human Factor," in Proceedings of Hack.lu, Luxembourg, 2005.
25. European Union, Article 29 Working Party, "Working document on the processing of personal data relating to health in electronic health records (ehr)," February 2007.
26. J. Han and M. Kamber, Data mining: concepts and techniques. San Francisco, CA, USA: Morgan Kaufmann Publishers Inc., 2000.
27. A. Shamir, "How to share a secret," Commun. ACM, vol. 22, no. 11, pp. 612-613, 1979.
28. V. Schmidt, W. Striebel, H. Prihoda, M. Becker, and G. D. Lijzer, "Patent: Verfahren zum beoder verarbeiten von daten," German Patent, DE 199 25 910 A1, 2001.
29. D. C. Wherry, "Secure your public key infrastructure with hardware security modules," SANS Institute, Tech. Rep., 2003.
30. Federal information processing standards publication, "Security requirements for cryptographic modules (fips pub 140-2)," Institute of Standards and Technology (NIST), Tech. Rep., 05 2001.
31. Office for National Statistics (ONS), "T 04: England; estimated resident population by single year of age and sex; mid-2005 population estimates," ONLINE, 08 2006, http://www.statistics.gov.uk/statbase/Product. asp?vlnk=14508&More=Y.
32. _, "Average total income and average income tax payable: by sex, 2000/01: Regional trends 38," ONLINE, 2002, http://www.statistics.gov.uk/ StatBase/ssdataset.asp?vlnk=7752. [Online]. Available: http://www.statistics. gov.uk/StatBase/ssdataset.asp?vlnk=7752
33. J. Monger, "International comparisons of labour disputes in 2002," Labour Market Trends, vol. 111, pp. 19-28, 2003.
34. S. Maerkle, K. Koechy, R. Tschirley, and H. U. Lemke, "The PREPaRe system - Patient Oriented Access to the Personal Electronic Medical Record," in Proceedings of Computer Assisted Radiology and Surgery, Netherlands, 2001, pp. 849-854.
35. R. B. Elson and D. P. Connelly, "Computerized patient records in primary care. their role in mediating guideline-driven physician behavior change," Family Medicine, vol. 4, no. 8, 1995.
36. M. H. Trivedi, J. K. Kern, B. D. Grannemann, K. Z. Altshuler, and P. Sunderajan, "A computerized clinical decision support system as a means of implementing depression guidelines," Psychiatric Services, vol. 55, pp. 879-885, 2004.
37. D. W. Bates, "Medication errors: How common are they and what can be done to prevent them?" Drug safety, vol. 15, pp. 303-310, 1996.