Model-driven application-level encryption for the privacy of e-health data

ARES 2010 - 5th International Conference on Availability, Reliability, and Security

Volumn , Issue , 2010, Pages 341-346

  Ding, Yun ^a   Klein, Karsten ^a  

^a InterComponentWare AG   (Germany)

Author keywords

Cryptography; Database encryption; Privacy enhancing technologies; Security and privacy in e Health

Indexed keywords

DATABASE ENCRYPTION; EHEALTH; PRIVACY-ENHANCING TECHNOLOGIES; SECURITY AND PRIVACY;

DATA PRIVACY; DATABASE SYSTEMS; HEALTH; HEALTH CARE; NETWORK SECURITY; SOFTWARE DESIGN;

CRYPTOGRAPHY;

EID: 77952383756     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/ARES.2010.91     Document Type: Conference Paper

References (16)

1. A. Boldyreva, N. Chenette, Y. Lee, and A. O'Neil, "Order-Preserving Symmetric Encryption", Proceedings of the 28th Annual International Conference on the Theory and Applications of Cryptographic Techniques, Eurocrypt 2009, pp. 224-241, 2009.
2. H. Hacigümüs, B. Iyer, and S. Mehrotra, "Providing Database as a Service", Proceedings of the International Conference on Data Engineering, pp. 29-38, 2002.
3. Health Insurance Portability and Accountability Act (HIPAA), http://www.hipaa.org.
4. Jasypt - Java simplified encryption, http://www.jasypt.org.
5. K. Klein, A. C. Wolff, O. Ziebold and T. Liebscher, "ICW eHealth Framework", Stud Health Technol Inform, 134:177-90, 2008.
6. K. Kenan, "Cryptography in the Database: The Last Line of Defense", Addison-Wesley Longman, 2005.
7. M. Krasser, "Enterprise Security - Instanzbasiserte Zugriffskontrolle" (in German), Java Magazin, 7/2007. See also http://safr.sourceforge.net/index.html.
8. L. Liu, and J. Gai, "A New Lightweight Database Encryption Scheme Transparent to Applications", Proceedings of the 6th IEEE International Confernce on Industrial Informatics, 2008.
9. U. T. Mattsson, "Secure encryption key lifecycle management", http://www.globalsecuritymag.com/Secure-Encryption-key-lifecycle,20081029,5799, accessed on September 15th, 2009.
10. U. T. Mattsson, "A Practical Implementation of Transparent Encryption and Separation of Duties in Enterprise Databases", Proceedings of the 7th IEEE International Conference on E-Commerce Technology, 2005.
11. T. Neubauer, and A. Ekelhart, "An Evaluation of Technologies for the Pseudonymization of Medical Data", Proceedings of the 24th ACM Symposium on Applied Computing, 2009.
12. openArchitectureWare, http://www.openarchitectureware.org/.
13. Oracle Transparent Data Encryption, http://www.oracle.com/technology/ oramag/oracle/05-sep/o55security.html.
14. K. Pommerening and M. Reng, "Secondary Use of the EHR via Pseudonymization", Medical Care Compunetics I, pp. 441-446, 2004.
15. B. Riedl, V. Grascher, S. Fenz, and T. Neubauer, "Pseudonymization for improving the Privacy in e-Health Applications", Proceedings of the 41st International Conference on System Sciences, 2008.
16. B. Riedl, T. Neubauer, G. Goluch, O. Boehm, G. Reinauer, and A. Krumboeck, "A secure architecture for the pseudonymization of medical data", Proceedings of the second International Conference on Availability, Reliability and Security (ARES'07), 2007.