Data-centric privacy protocol for intensive care grids

IEEE Transactions on Information Technology in Biomedicine

Volumn 14, Issue 6, 2010, Pages 1327-1337

  Luna, Jesus ^a   Dikaiakos, Marios ^b   Marazakis, Manolis ^c   Kyprianou, Theodoros ^d  

^a Barcelona Digital Technology Centre   (Spain)

^b UNIVERSITY OF CYPRUS   (Cyprus)

^c INSTITUTE OF COMPUTER SCIENCE   (Greece)

^d NICOSIA GENERAL HOSPITAL   (Cyprus)

Author keywords

Data fragmentation; health grids; intensive care grid (ICGrid); privacy; security

Indexed keywords

COMPUTING FACILITIES; DATA AND METADATA; DATA CENTRIC; DATA FRAGMENTATION; DATA GRID; E-HEALTH SYSTEMS; EUROPEAN UNION; GRID SYSTEMS; HIGH FLOW; INTENSIVE CARE; INTENSIVE CARE GRID (ICGRID); MANDATORY ACCESS CONTROL; PERSONAL DATA; PRIVACY; PUBLIC NETWORKS; QUALITY-OF-SECURITY; SECURITY; SECURITY AND PRIVACY; SECURITY SOLUTIONS; STORAGE CAPABILITY;

ACCESS CONTROL; DATA PRIVACY; HEALTH; INTERNET PROTOCOLS; METADATA; NETWORK SECURITY;

INTENSIVE CARE UNITS;

ARTICLE; COMPUTER NETWORK; COMPUTER SECURITY; CONFIDENTIALITY; ELECTRONIC MEDICAL RECORD; EUROPEAN UNION; HUMAN; INTENSIVE CARE UNIT; LEGAL ASPECT; MEDICAL INFORMATICS; STANDARD;

COMPUTER COMMUNICATION NETWORKS; COMPUTER SECURITY; CONFIDENTIALITY; ELECTRONIC HEALTH RECORDS; EUROPEAN UNION; HUMANS; INTENSIVE CARE UNITS; MEDICAL INFORMATICS;

EID: 78249278133     PISSN: 10897771     EISSN: None     Source Type: Journal    
DOI: 10.1109/TITB.2010.2073478     Document Type: Article

References (45)

1. K. Gjermundrod, M. Dikaiakos, D. Zeinalipour-Yazti, G. Panayi, and T. Kyprianou, "Icgrid: Enabling intensive care medical research on the egee grid," in From Genes to Personalized HealthCare: Grid Solutons for the Life Sciences. Proceedings of HealthGrid 2007, Amsterdam, The Netherlands, IOS Press, 2010, pp. 248-257.
2. Various, "EU Parliament. Directive 95/46/EC of the European Parliament and of the Council of 24 October 1995 on the protection of individuals with regard to the processing of personal data and on the free movement of such data," Official Journalof the European Communities of23November 1995 No L. 281 p. 31., Oct. 1995.
3. J. Luna, M. Flouris, M. Marazakis, and A. Bilas, "An analysis of security services in grid storage systems," in Proc. CoreGRID Workshop Grid Middleware 2007, Jun., pp. 171-185.
4. J. Luna, M. Flouris, M. Marazakis, A. Bilas, M. Dikaiakos, H. Gjermundrod, and T. Kyprianou, "A data-centric security analysis of icgrid," in Proc. CoreGRID Integr. Res. Grid Comput., 2008, pp. 165-176.
5. V. Casola, R. Preziosi, M. Rak, and L. Troiano, "A reference model for security level evaluation: Policy and fuzzy techniques," J. UCS, vol. 11, no. 1, pp. 150-174, 2005.
6. J. Luna, M. Flouris, M. Marazakis, and A. Bilas, "Providing security to the desktop data grid," in Proc. IEEE IPDPS 2008, Miami, FL, Apr. 14-18, pp. 1-8.
7. Online. (1996). "U.S. Department of Health and Human Services: HIPAA Law," [Online]. Available: http://www.cms.hhs.gov/HIPAAGenInfo/Downloads/ HIPAALaw.pdf
8. A. L. Dunlop, T. Graham, Z. Leroy, K. Glanz, and B. Dunlop, "The impact of hipaa authorization on willingness to participate in clinical research," in Proc. Ann. Epidemiol., Nov. 2007, vol. 17, pp. 899-905.
9. Various. (2006, Jan.). "European Health Management Association Legally eHealth-Deliverable 2," [Online]. Available: http://www.ehma.org/- fileupload/Downloads/Legally-eHealth-Del-02-data-Protection-v08(revised-after- submission).pdf, processing Medical data: data protection, confidentiallity and security.
10. B. Fraser, "Site Security Handbook," RFC 2196 (Informational), Sep. 1997, [Online]. Available: http://www.ietf.org/rfc/rfc2196.txt
11. V. Welch. (2005). "Globus toolkit version 4 grid security infrastructure: A standards perspective," [Online]. Available: http://www.globus.org/toolkit/docs/4.0/security/GT4-GSI-Overview.pdf, the Globus Security Team.
12. Online. (2008). "Enabling Grids for E-SciencE project," [Online]. Available: http://www.eu-egee.org/
13. R. Alfieri, R. Cecchini, V. Ciaschini, L. dellAgnello, A. Frohner, A. Gianoli, K. Lorentey, and F. Spataro, "VOMS, an authorization system for virtual organizations," in Proc. First Eur. Across Grids Conf., Feb. 2003, pp. 13-14.
14. D. Jones, "Smart cards\The key to secure and flexible healthcare provision," Card Technol. Today, vol. 15, no. 11, p. 8, 2003.
15. W. B. Lee and C. D. Lee, "A cryptographic key management solution for hipaa privacy/security regulations," IEEE Trans. Inf. Technol. Biomed., vol. 12, no. 1, pp. 34-41, Jan. 2008.
16. Various. (2006, Oct.). Federal ministry of health: The electronic health card," [Online]. Available: http://www.die-gesundheitskarte.de/, public Relations Section. Berlin, Germany. 2010.
17. B. Hayes, "Guardian: A prototype intelligent agent for intensive care monitoring," Artif. Intell. Med., vol. 4, pp. 165-185, 1992.
18. D. Sackett, Evidence-Based Medicine: How to Practice and Teach EBM, 2nd ed. Maryland Heights, MO: Churchill Livingstone, 2000.
19. B. Dawant, "Knowledge-based systems for intelligent patient monitoring management in critical care environments," in Biomedical Engineering Handbook, J. D. Bronzino, Ed. Boca Raton, FL: CRC Press, 2000.
20. Online. (2008). "glite: Lightweight middleware for grid computing," [Online]. Available: http://www.glite.org/
21. N. Santos and B. Koblitz, "Distributed metadata with the AMGA metadata Catalog," in Proc. Workshop Next-Gener. Distrib. Data Manage. HPDC-15, Jun. 2006, pp. 1-6.
22. Online. (2005). "EGEE: FiReMAN Catalog User Guide," [Online]. Available: https://edms.cern.ch/document/570780
23. E. Riedel, M. Kallahalla, and R. Swaminathan, "A framework for evaluating storage system security," in FA S T, D. D. E. Long, Ed. Berkeley, CA: USENIX, 2002, pp. 15-30.
24. M. O. Rabin, "Efficient dispersal of information for security, load balancing, and fault tolerance," J. ACM, vol. 36, no. 2, pp. 335-348, 1989.
25. D. E. Bell and L. J. LaPadula, "Secure computer systems: A mathematical model, volume ii," J. Comput. Security, vol. 4, no. 2/3, pp. 229-263, 1996.
26. Online. (2008). "Amga: Users, groups and acls," [Online]. Available: http://project-arda-dev.web.cern.ch/project-arda-dev/metadata/groups- andacls.html
27. S. Burke, S. Campana, A. D. Peris, F. Donno, P. M. Lorenzo, R. Santinelli, and A. Sciaba. (2006, Nov.). "gLite 3.0 User Guide," [Online]. Available: http://glite.web.cern.ch/glite/documentation/
28. Various. (accessed 2008, Jun.). "Onion Networks," [Online]. Available: http://www.onionnetworks.com/developers/
29. V. Casola, N. Mazzocca, J. Luna, O. Manso, and M. Medina, "Static evaluation of certificate policies for grid pkis interoperability," in Proc. 2nd Int. Conf. ARES 2007. Washington, DC: IEEE Computer Society, pp. 391-399.
30. S. Chokhani, W. Ford, R. Sabett, C. Merrill, and S. Wu. (2003, Nov.). "Internet X.509 public key infrastructure\Certificate policy and certification practices framework," RFC 3647 (Informational), [Online]. Available: http://www.ietf.org/rfc/rfc3647.txt
31. V. Casola, A. Mazzeo, N. Mazzocca, and V. Vittorini, "A policy-based methodology for security evaluation: A security metric for public key infrastructures," J. Comput. Security, vol. 15, no. 2, pp. 197-229, 2007.
32. A. Mei, L. V. Mancini, and S. Jajodia, "Secure dynamic fragment and replica allocation in large-scale distributed file systems," IEEE Trans. Parallel Distrib. Syst., vol. 14, no. 9, pp. 885-896, Sep. 2003.
33. Online. (2005). "Classic ap profile version 4.03," [Online]. Available: http://www.eugridpma.org/igtf/IGTF-AP-classic-20050905-4-03.pdf
34. R. Housley, W. Polk, W. Ford, and D. Solo. (2002, Apr.). "Internet X.509 public key infrastructure\Certificate and certificate revocation list (CRL) profile," RFC 3280 (Informational), [Online]. Available: http://www.ietf.org/rfc/rfc3280.txt
35. Online. (2009) "Health-e-child project," [Online]. Available: http://www.health-e-child.org/links/
36. C. del Frate, J. Galvez, T. Hauer, D. Manset, R. McClatchey, M. Odeh, D. Rogulin, T. Solomonides, and R. Warren. (2009). "Mammo-grid project," [Online]. Available: https://savannah.cern.ch/projects/mammogrid
37. A. Redolfi, R. McClatchey, A. Anjum, A. Zijdenbos, D. Manset, F. Barkhof, C. Spenger, Y. Legré, L.-O. Wahlund, C. Barat-tieri, G. B. Frisoni. (2009). "Neugrid project," [Online]. Available: http://www.neugrid.eu/ pagine/overview.php
38. S. Erberich, J. Silverstein, A. Chervenak, R. Schuler, M. Nelson, and C. Kesselman. (2009). "Medicus project," [Online]. Available: http://dev.globus.org/wiki/Incubator/MEDICUS/
39. R. Sinnott, M. Bayer, A. Stell, and J. Koetsier, "Grid infrastructures for secure access to and use of bioinformatics data: Experiences from the bridges project," in Proc. Availability, Reliabil. Security, Int. Conf., 2006, vol. 0, pp. 950-957.
40. Online. (2007, Feb.). "SHARE: Technology and security roadmap," [Online]. Available: http://wiki.healthgrid.org/index.php/Share-Roadmap-I
41. J. Montagnat, Á. Frohner, D. Jouvenot, C. Pera, P. Kunszt, B. Koblitz, N. Santos, C. Loomis, R. Texier, D. Lingrand, P. Guio, R. B. D. Rocha, A.S. de Almeida, and Z. Farkas, "A secure grid medical data manager interfaced to the glite middleware," J. Grid Comput., vol. 6, no. 1, pp. 45-59, 2008.
42. J. Kubiatowicz, D. Bindel, Y. Chen, S. E. Czerwinski, P. R. Eaton, D. Geels, R. Gummadi, S. C. Rhea, H. Weatherspoon, W. Weimer, C. Wells, and B.Y. Zhao, "Oceanstore: An architecture for global-scale persistent stor age," in Proc. ASPLOS, 2000, pp. 190-201.
43. A. Adya, W. J. Bolosky, M. Castro, G. Cermak, R. Chaiken, J. R. Douceur, J. Howell, J. R. Lorch, M. Theimer, and R. Wattenhofer, "Farsite: Federated, available, and reliable storage for an incompletely trusted environment," in OSDI, 2002, pp. 1-14.
44. M. W. Storer, K. M. Greenan, E. L. Miller, and K. Voruganti, "Secure, archival storage with potshards," in Proc. 5th Conf. USENIX FAST2007 Berkeley, CA: USENIX Association, pp. 11-11.
45. Online. (2007). "Cleversafe," [Online]. Available: http://www.cleversafe. com