A rights management approach to protection of privacy in a cloud of electronic health records

Proceedings of the ACM Conference on Computer and Communications Security

Volumn , Issue , 2011, Pages 23-29

  Jafari, Mohammad ^a   Safavi Naini, Reihaneh ^a   Sheppard, Nicholas Paul ^b  

^a UNIVERSITY OF CALGARY   (Canada)

^b QUEENSLAND UNIVERSITY OF TECHNOLOGY   (Australia)

Author keywords

Cloud; Digital rights management; Health records

Indexed keywords

AUTHORIZED USERS; CONTROL SOLUTIONS; DIGITAL RIGHTS MANAGEMENT; ELECTRONIC HEALTH RECORD; HEALTH RECORDS; PROTECTION OF PRIVACY; RIGHTS MANAGEMENT; SERVICE PROVIDER;

ACCESS CONTROL; CLOUD COMPUTING; CLOUDS; COMPUTER PRIVACY; ELECTRONIC DOCUMENT EXCHANGE; HEALTH; MEDICAL COMPUTING;

COPYRIGHTS;

EID: 81055140902     PISSN: 15437221     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/2046631.2046637     Document Type: Conference Paper

References (17)

1. Google Health. http://www.google.com/health.
2. Microsoft Active Directory Rights Management Service. http://technet.microsoft.com/en-ca/windowsserver/dd448611.aspx.
3. Microsoft HealthVault. http://www.healthvault.com.
4. eXtensible Rights Markup Language version 1.2. http://www.xrml.org/XrML- 12.asp, 2001.
5. R. Kailar and V. Muralidhar. A security architecture for health information networks. In AMIA Annual Symposium Proc., pages 379-383, 2007.
6. S. Kenny and L. Korba. Applying digital rights management systems to privacy rights management. Computers & Security, 21(7):648-664, 2002. (Pubitemid 35355525)
7. Q. Liu, R. Safavi-Naini, and N. P. Sheppard. Digital rights management for content distribution. In ACSW Frontiers '03: Proc. of the Australasian Information Security Workshop Conference on ACSW, pages 49-58, 2003.
8. K. D. Mandl, W. W. Simons, W. C. Crawford, and J. M. Abbett. Indivo: a personally controlled health record for health information exchange and communication. BMC Medical Informatics and Decision Making, 7(25), 2007.
9. A. Mohan, D. Bauer, D. M. Blough, M. Ahamad, B. Bamba, R. Krishnan, L. Liu, D. Mashima, and B. Palanisamy. A patient-centric, attribute-based, source-verifiable framework for health record sharing. Technical report, Georgia Institute of Technology, Center for Experimental Research in Computer Systems, GIT-CERCS-09-11, 2009.
10. Organisation for the Advancement of Structured Information Standards (OASIS). Assertions and protocols for the OASIS Security Assertion Markup Language (SAML) v2.0. http://docs.oasis-open.org/security/saml/v2.0/saml-core-2. 0-os.pdf, 2005.
11. B. C. Popescu, B. Crispo, A. S. Tanenbaum, and F. L. Kamperman. A DRM security architecture for home networks. In DRM '04: Proc. of the 4th ACM Workshop on Digital Rights Management, pages 1-10, Washington DC, USA, 2004. (Pubitemid 40681753)
12. T. C. Rindfleisch. Privacy, information technology, and health care. Commun. ACM, 40(8):92-100, 1997.
13. F. Salim, N. P. Sheppard, and R. Safavi-Naini. Enforcing P3P policies using a digital rights management system. In PET'07: Proc. of the 7th international conference on Privacy enhancing technologies, pages 200-217, Ottawa, Canada, 2007.
14. N. P. Sheppard and R. Safavi-Naini. Protecting Privacy with the MPEG-21 IPMP Framework. In PETS'06: The Proc. of the 6th Workshop on Privacy Enhancing Technologies, pages 152-171, Cambridge, UK, 2006.
15. P. C. Tang and D. Lansky. The Missing Link: Bridging The Patient-Provider Health Information Gap. Health Affairs, 24(5), 2005.
16. L. M. Vaquero, L. Rodero-Merino, J. Caceres, and M. Lindner. A break in the clouds: towards a cloud definition. SIGCOMM Comput. Commun. Rev., 39(1):50-55, 2009.
17. World-Wide Web Consortium. The Platform for Privacy Preferences 1.1 (P3P1.1) Specification, 2006.