A security architecture for accessing health records on mobile phones

HEALTHINF 2011 - Proceedings of the International Conference on Health Informatics

Volumn , Issue , 2011, Pages 87-96

  Dmitrienko, Alexandra ^a   Hadzic, Zecir ^a   Löhr, Hans ^a   Winandy, Marcel ^a   Sadeghi, Ahmad Reza ^b  

^a RUHR UNIVERSITY BOCHUM   (Germany)

^b DARMSTADT UNIVERSITY OF TECHNOLOGY   (Germany)

Author keywords

Health records; Mobile computing; Security architecture; Smartphone; Trusted computing

Indexed keywords

APPLICATION ENVIRONMENT; APPLICATION SCENARIO; BUILDING BLOCKES; EHEALTH; ELECTRONIC HEALTH RECORD; GENERIC ARCHITECTURE; HARDWARE FEATURES; HARDWARE PLATFORM; HARDWARE SECURITY; HEALTH CARE PROFESSIONALS; HEALTH RECORDS; MALICIOUS SOFTWARE; MALWARES; MEDICAL DATA; MOBILE OPERATING SYSTEMS; PROTOTYPE IMPLEMENTATIONS; SECURITY AND PRIVACY; SECURITY ARCHITECTURE; SECURITY FEATURES; SECURITY FRAMEWORKS; SECURITY KERNEL; SENSITIVE DATAS; SENSITIVE INFORMATIONS; SMART PHONES; TROJAN HORSE; TRUSTED COMPUTING;

AUTHENTICATION; CELLULAR TELEPHONE SYSTEMS; COMPUTER CRIME; COMPUTER HARDWARE; COMPUTER PRIVACY; ELECTRONIC DOCUMENT EXCHANGE; GRAPHICAL USER INTERFACES; HEALTH; HEALTH CARE; INFORMATION SCIENCE; MOBILE DEVICES; MOBILE PHONES; MOBILE TELECOMMUNICATION SYSTEMS; RECORDS MANAGEMENT; SIGNAL ENCODING; TELEPHONE; TELEPHONE SETS;

HEALTH RISKS;

EID: 79960154386     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (35)

1. Aggarwal, M. and Vennon, T. (2010). Study of BlackBerry proof-of-concept malicious applications. Technical Report White paper, SMobile Global Threat Center.
2. Agreiter, B., Alam, M., Hafner, M., Seifert, J. P., and Zhang, X. (2007). Model driven configuration of secure operating systems for mobile applications in healthcare. In Proceedings of the 1st International Workshop on Mode-Based Trustworthy Health Information Systems.
3. Alves, T. and Felton, D. (2004). TrustZone: Integrated hardware and software security. Technical report, ARM.
4. Anderson, J. (1972). Computer security technology planning study. Technical Report ESD-TR-73-51, AFSC, Hanscom AFB, Bedford, MA. AD-758 206, ESD/AFSC.
5. Android Open Source Project (2010). Project website. http://www.android. com.
6. Apple Inc. (2010). iOS website. http://www.apple.com/iphone/ios4.
7. Azema, J. and Fayad, G. (2008). M-Shield™ mobile security technology: making wireless secure. Texas Instruments White Paper. focus.ti.com/pdfs/wtbu/ti-mshield-whitepaper.pdf.
8. Benelli, G. and Pozzebon, A. (2010). Near field communication and health: Turning a mobile phone into an interactive multipurpose assistant in healthcare scenarios. In Biomedical Engineering Systems and Technologies, International Joint Conference, BIOSTEC 2009, Revised Selected Papers, volume 52 of Communications in Computer and Information Science, pages 356-368. Springer.
9. Brygier, J., Fuchsen, R., and Blasum, H. (2009). PikeOS: Safe and secure virtualization in a separation microkernel. Technical report, Sysgo.
10. EMSCB Project Consortium (2005-2008). The European Multilaterally Secure Computing Base (EMSCB) project. http://www.emscb.org.
11. Fraim, L. (1983). SCOMP: A solution to the multilevel security problem. In IEEE Computer, pages 26-34.
12. Gajek, S., Löhr, H., Sadeghi, A.-R., and Winandy, M. (2009). TruWallet: Trustworthy and migratable wallet-based web authentication. In The 2009 ACM Workshop on Scalable Trusted Computing (STC'09), pages 19-28. ACM.
13. Google Android (2010). Security and permissions. http://developer. android.com/intl/de/guide/topics/security/security.html.
14. Han, D., Park, S., and Lee, M. (2008). THE-MUSS: Mobile u-health service system. In Biomedical Engineering Systems and Technologies, International Joint Conference, BIOSTEC 2008, Revised Selected Papers, volume 25 of Communications in Computer and Information Science, pages 377-389. Springer.
15. Hildon Application Framework (2010). Project website. http://live.gnome.org/Hildon.
16. Iozzo, V. and Weinmann, R.-P. (2010). Ralf-Philipp Weinmann & Vincenzo Iozzo own the iPhone at PWN20WN. http://blog.zynamics.com/2010/03/24/ ralf-philippweinmann-vincenzo-iozzo-own-the-iphone-at-pwn2own/.
17. Karger, P. A., Zurko, M. E., Bonin, D. W., Mason, A. H., and Kahn, C. E. (1990). A VMM security kernel for the VAX architecture. In Proceedings of the IEEE Symposium on Research in Security and Privacy, pages 2-19, Oakland, CA. IEEE Computer Society, Technical Committee on Security and Privacy, IEEE Computer Society Press.
18. Klein, G., Elphinstone, K., Heiser, G., Andronick, J., Cock, D., Derrin, P., Elkaduwe, D., Engelhardt, K., Kolanski, R., Norrish, M., Sewell, T., Tuch, H., and Winwood, S. (2009). seL4: Formal verification of an OS kernel. In Proceedings of the 22nd ACM Symposium on Operating Systems Principles, Big Sky, MT, USA. ACM Press. To appear.
19. Kostiainen, K., Dmitrienko, A., Ekberg, J.-E., Sadeghi, A.-R., and Asokan, N. (2010). Key attestation from trusted execution environments. In TRUST 2010: Proceedings of the 3rd International Conference on Trust and Trustworthy Computing, pages 30-46. Springer.
20. Kostiainen, K., Ekberg, J.-E., Asokan, N., and Rantala, A. (2009). On-board credentials with open provisioning. In ASIACCS '09: Proceedings of the 4th International Symposium on Information, Computer, and Communications Security, pages 104-115. ACM.
21. Liedtke, J. (1995). On microkernel construction. In Proceedings of the 15th ACM Symposium on Operating Systems Principles (SOSP'95), Copper Mountain Resort, Colorado. Appeared as ACM Operating Systems Review 29.5.
22. Loscocco, P. and Smalley, S. (2001). Integrating flexible support for security policies into the Linux operating system. In Proceedings of the FREENIX Track: 2001 USENIX Annual Technical Conference, pages 29-42. USENIX Association.
23. Lua(2010). Project website. http://www.lua.org.
24. Maemo(2010). Project website. http://maemo.org.
25. Microsoft (2010). Windows mobile website. http://www.microsoft.com/ windowsmobile.
26. Open Kernel Labs (2010). OKL4 project website. http://okl4.org.
27. Paros (2010). Project website. http://www.parosproxy.org.
28. Selhorst, M., Stüble, C., Feldmann, F., and Gnaida, U. (2010). Towards a trusted mobile desktop. In Trust and Trustworthy Computing (TRUST 2010), volume 6101 of LNCS, pages 78-94. Springer.
29. Sunyaev, A., Leimeister, J. M., and Krcmar, H. (2010). Open security issues in german healthcare telematics. In HEALTHINF 2010 - Proceedings of the 3rd International Conference on Health Informatics, pages 187-194. INSTICC.
30. Symbian Foundation Community (2010). Project website. http://www.symbian.org.
31. The OpenTC Project Consortium (2005-2009). The Open Trusted Computing (OpenTC) project. http://www.opentc.net.
32. Tiago Alves, D. F. (2004). TrustZone: Integrated Hardware and Software Security. http://www.arm.com/pdfs/TZ.
33. Trusted Computing Group (2009). TPM Main Specification. http://www.trustedcomputinggroup.org.
34. Vennon, T. (2010). Android malware. A study of known and potential malware threats. Technical Report White paper, SMobile Global Threat Center.
35. Vouyioukas, D., Kambourakis, G., Maglogiannis, I., Rouskas, A., Kolias, C., and Gritzalis, S. (2008). Enabling the provision of secure web based m-health services utilizing xml based security models. Security and Communication Networks, 1(5):375-388.