A conceptual framework and principles for trusted pervasive health

Journal of Medical Internet Research

Volumn 14, Issue 2, 2012, Pages 3-14

  Ruotsalainen, Pekka Sakari ^a   Blobel, Bernd Gerhard ^b   Seppälä, Antto Veikko ^c   Sorvari, Hannu Olavi ^d   Nykänen, Pirkko Anneli ^c  

^a NATIONAL PUBLIC HEALTH INSTITUTE   (Finland)

^b UNIVERSITY HOSPITAL REGENSBURG   (Germany)

^c TAMPERE UNIVERSITY OF TECHNOLOGY   (Finland)

^d UNIVERSITY OF TURKU   (Finland)

Author keywords

Conceptual modeling; Digital bubbles; Pervasive health; Privacy; Trustworthiness; Ubiquitous computing

Indexed keywords

ARTICLE; HEALTH STATUS; HUMAN; PRIVACY; THEORETICAL MODEL;

HEALTH STATUS; HUMANS; MODELS, THEORETICAL; PRIVACY;

EID: 84862023341     PISSN: None     EISSN: 14388871     Source Type: Journal    
DOI: 10.2196/jmir.1972     Document Type: Article

References (53)

1. Vogenberg FR, Barash CI, Pursel M. Personalized Medicine: Part 1: Evolution and Development into Theranostics. P&T 35 2010 Oct; 35(10):560-576. [Medline: 21037908]
2. Kiefer S. European Commission Information Society. 2007. Personal Health Systems (PHS): Overview and research trends URL: http://ec.europa.eu/ information-society/events/phs-2007/docs/slides/phs2007-kiefer-s1a.pdf [accessed 2012-03-19] [WebCite Cache ID 66HaxmDUN]
3. Bardram JE. Pervasive healthcare as a scientific discipline. Methods Inf Med 2008;47(3):178-185. [doi: 10.3423/ME9197] [Medline: 18473081] (Pubitemid 351723960)
4. Arnrich B, Mayora O, Bardram J, Tröster G. Pervasive healthcare: Paving the way for a pervasive, user-centered and preventive healthcare model. Methods Inf Med 2010;49(1):67-73. [doi: 10.3414/ME09-02-0044] [Medline: 20011810]
5. Varchney U. Pervasive healthcare. Computer 2003;36(12):138-140. [doi: 10.1109/MC.2003.1250897]
6. Codagnone C. European Commission Information Society. 2009 Aug. Reconstructing the whole: Present and future of personal health systems URL: http://ec.europa.eu/information-society/activities/health/docs/projects/phs2020/ phs2020-book-rev16082009.pdf [accessed 2012-03-19] [WebCite Cache ID 66HaL4Eds]
7. Wanigasekera C, Feigenbaum J. Sensitive information in a wired world course (CS457). Newhaven, CT: Yale University; 2003 Dec. 12. Trusted systems: Protecting sensitive information through technological solutions URL: http://zoo.cs.yale.edu/classes/cs457/backup/[accessed 2012-01-27] [WebCite Cache ID 650H14LTe]
8. Lederer S, Deay AK, Mankoff J. UC Berkeley College of Engineering Technical Reports. Berkeley, CA: Computer Science Division, University of California; 2002 Jun. A conceptual model and metaphor of everyday privacy in ubiquitous computing environments URL: http://www.eecs.berkeley.edu/Pubs/ TechRpts/2002/CSD-02-1188.pdf [accessed 2012-03-19] [WebCite Cache ID 66HZyp9vK]
9. Westin AF. Social and political dimensions of privacy. Journal of Social Issues 2003 Jul; 59(2):431-453. (Pubitemid 36775199)
10. Solove D. The Digital Person: Technology and Privacy in the Information Age. New York, NY: New York University Press; 2004.
11. Wohlgemuth S, Muller G. Privacy with delegation of rights by identity management. In: Emerging Trends in Information and Communication Security Lecture Notes in Computer Science, 2006. Germany: Springler Verlang; 2006:175-190. (Pubitemid 44156248)
12. Wassernaar J. www.w3.org. 2006. Privacy rules, a steeple chase for systems architects URL: http://www.w3.org/2006/07/privacy-ws/papers/04-borking- rules/[accessed 2012-01-27] [WebCite Cache ID 650I5cGMn]
13. European Commission. European Commission Justice Data Protection Policies. 1995. Directive 95/46/EC of the European Parliament and of the Council of 24 October 1995 on the protection of individuals with regard to the processing of personal data and on the free movement of such data URL: http://eur-lex.europa.eu/LexUriServ/LexUriServ. do?uri=CELEX:31995L0046:EN:HTML [accessed 2012-01-27] [WebCite Cache ID 650KVEhUK]
14. United Nations. Geneva, Switzherland: United Nations; 2007. Universal Declaration of Human Rights URL: http://www.un.org/events/humanrights/2007/ hrphotos/declaration%20-eng.pdf [accessed 2012-03-19] [WebCite Cache ID 66HYMvMaH]
15. Organisation for Economic Co-operation and Development (OECD). 2002. OECD guidelines for the security of information systems and networks: Towards a culture of security URL: http://www.oecd.org/dataoecd/16/22/15582260.pdf [accessed 2012-01-27] [WebCite Cache ID 650MSPyWi]
16. International Medical Informatics Association (IMIA). International Medical Informatics Association.: IMIA The IMIA Code of Ethics for Health Information Professionals URL: http://www.imia-medinfo.org/new2/pubdocs/Ethics- Eng.pdf [accessed 2012-01-27] [WebCite Cache ID 650N2Zm60]
17. International Organization for Standardization (ISO). ISO/IEC 27799 Health Informatics-Information Security Management in Health Using ISO/IEC 27002. Geneva, Switzerland: ISO; 2008.
18. International Organization for Standardization (ISO). ISO TS 22600 Health Informatics-Privilege Management and Access Control. Geneva, Switzerland: ISO; 2009.
19. Langheimreich M. Swiss Federal Institute of Technology Zurich. Zurich, Switzerland: Swiss Federal Institute of Technology (ETH) Privacy by design: Principles of privacy-aware ubiquitous systems URL: http://www.vs.inf.ethz.ch/ res/papers/privacy-principles.pdf [accessed 2012-03-27] [WebCite Cache ID 66U0efwZR]
20. Coiera E, Clarke R. e-Consent: The design and implementation of consumer consent mechanisms in an electronic environment. J Am Med Inform Assoc 2004 Apr; 11(2):129-140 [FREE Full text] [doi: 10.1197/jamia. M1480] [Medline: 14662803] (Pubitemid 38327502)
21. Anciaux N, Benzine M, Bouganim L, Jacquemin L, Pucheral P, Yin S. Restoring the patient control over her medical history. In: 21st IEEE Symposium on Computer-based Medical Systems. Los Alamitos, CA: IEEE Computer Society Press; 2008:132-137.
22. Ruotsalainen P. Security infrastructure services for patient managed lifelong health record. In: Travel Health Informatics and Telehealth: EFMI Special Topic Conference, Antalya, Turkey, 2009. Istanbul, Turkey: Victor Babes University Publishing House; 2009:51-29.
23. Pallapa G, Kumar M, Das K. Privacy infusion in ubiquitous computing, networking and services. In: Proceedings of MobiQuitous 2007. 2007 Presented at: MobiQuitous 2007; August 6-10, 2007; Philadelphia, PA. [doi: 10.1109/MoBIQ.2007.4451030]
24. Mitseva A, Wardana SA, Pradad NR. Context-aware privacy protection for wireless sensor networks in hybrid hierarchical architecture. In: Proceedings of International Wireless Communications and Mobile Computing 2008 Conference.: IEEE; 2008 Presented at: 2008 International Wireless Communications and Mobile Computing Conference; August 6-8, 2008; Crete Island, Greece. [doi: 10.1109/IWCMC.2008.134]
25. Hu J, Weaver AC. Pervasive Security, Privacy and Trust (PSPT4), August 2005. 2005. Dynamic, context-aware access control for distributed healthcare applications URL: http://www.cs.virginia.edu/~acw/security/doc/Publications/ A%20Dynamic, %20Context-Aware%20Security%20Infrastructure% 20for%20Distri~1.pdf [accessed 2012-03-19] [WebCite Cache ID 66HVhI3rd]
26. Joshi A, Finin T, Kagal L, Parker J, Patwardhan A. Security policies and trust in ubiquitous computing. Philos Transact A Math Phys Eng Sci 2008 Oct. 28;366(1881):3769-3780 [FREE Full text] [doi: 10.1098/rsta.2008.0142] [Medline: 18672450]
27. Stajano F, Kim HJ, Chae J, Kim S. Towards a security policy for ubiquitous healthcare systems (Position paper). In: Ubiquitous Convergence Technology First International Conference, ICUCT 2006, Jeju Island, Korea, December 5-6, 2006: revised selected papers. Berlin, Germany: Springer; 2007.
28. Ball MJ, Gold J. Banking on health: Personal records and information exchange. J Healthcare Inf Management 2006;20(2):71-83. [Medline: 16669591]
29. Kendall DB. Harvard Law and Policy Review. Protecting patient privacy in the information age URL: http://www.hlpronline.com/kendall.pdf [accessed 2012-03-19] [WebCite Cache ID 66HVTSzjj]
30. Haas S, Wohlgemuth S, Echizen I, Sonehara N, Müller G. Aspects of privacy for electronic health records. Int J Med Inform 2011 Feb; 80(2):e26-e31. [doi: 10.1016/j.ijmedinf.2010.10.001] [Medline: 21041113]
31. Brown I, Adams AA. The ethical challenges of ubiquitous healthcare. International Review of Information Ethics 2007;8:53-60 [FREE Full text] [WebCite Cache]
32. Shankar N, Balfanz D. Enabling secure ad-hoc communication using context-aware security services. In: Proceedings of UBICOMP 2002-Workshop on Security in Ubiquitous Computing. 2002 Presented at: UBICOMP 2002;2002; Gothenburg, Sweden URL: http://www.teco.edu/~philip/ubicomp2002ws/organize [WebCite Cache]
33. Bhatti R. X-GTRBAC: An XML-based policy specification framework and architecture for enterprise-wide access control. ACM Transactions on Information and System Security 2005;8(2):187-227. [doi: 10.1145/1065545.1065547] (Pubitemid 41092671)
34. Bhatti R, Moidu K, Ghafoor A. Policy-based security management for federated healthcare databases (or RHIOs). In: HIKM '06 Proceedings of the International Workshop on Healthcare Information and Knowledge Management. New York, NY: ACM; 2006.
35. Mandl KD, Simons WW, Crawford WC, Abbett JM. Indivo: a personally controlled health record for health information exchange and communication. BMC Med Inform Decision Making 2007;7(25) [FREE Full text] [doi: 10.1186/1472-6947-7-25] [Medline: 17850667] (Pubitemid 350046021)
36. Huda MN, Sonehara N, Yamada S. Journal of Engineering Science and Technology (JESTEC). 2009. A privacy management architecture for patient-controlled personal health record systems URL: http://jestec.taylors. edu.my/Vol%25204%2520Issue%25202%2520June%252009/Vol-4-2-154-170-MD-NURUL-HUDA. pdf [accessed 2012-03-19] [WebCite Cache ID 66HUH8rwr]
37. Shabo A. A global socio-economic-medico-legal model for the sustainability of longitudinal electronic health records. Part 1. Methods Inf Med 2006;45(3):240-245. [Medline: 16685331] (Pubitemid 44047725)
38. France F. eHealth in Belgium, a new "secure" federal network: role of patients, health professions and social security services. Int J Med Inform 2011 Feb; 80(2):e12-e16. [doi: 10.1016/j.ijmedinf.2010.10.005] [Medline: 21035383]
39. President's Council of Advisors on Science and Technology (PCAST). The White House. Washington, DC; 2010 Dec. Report to the President and Congress: Designing a digital future: Federally funded research and development in networking and information technology URL: http://www.whitehouse.gov/sites/ default/files/microsites/ostp/pcast-nitrd-report-2010.pdf [accessed 2012-03-19] [WebCite Cache ID 66HipPled]
40. American Health Information Management Association and American Medical Informatics Association. The value of personal health records: A joint position statement for consumers of health care. In: Bos L, Blobel B, Marsh A, Carroll D, editors. Medical and Care Compunetics 5 (Technology and Informatics). Amsterdam, Netherlands: IOS Press; 2008.
41. Kapadia A, Henderson T, Fielding JJ, Kotz D. Virtual walls: Protecting privacy in pervasive environments. In: Proceedings Pervasive Computing, 5th International Conference, PERVASIVE 2007. Berlin: Springler Verlag; 2007 Presented at: The 5th International Conference on Pervasive Computing; May 13-16, 2007; Toronto, Ontario. [doi: 10.1007/978-3-540-72037-9-10]
42. Institute of Electrical and Electronics Engineers (IEEE) Computer Society. IEEE Standard 1471-2000: Recommended Practice for Architectural Description of Software-Intensive Systems. Piscataway, NJ: IEEE; 2000.
43. National Electronic Health Records Taskforce, Commonwealth of Australia. A health information network for Australia. In: Report to Health Ministers by the National Electronic Health Records Taskforce. Australia: Minister of Health; 2000.
44. US Department of Health and Human Services. National Committee on Vital and Health Statistics. 2006. Personal health records and personal health record systems: A report and recommendations from the National Committee on Vital and Health Statistics URL: http://ncvhs.hhs.gov/0602nhiirpt.pdf [accessed 2012-03-19] [WebCite Cache ID 66HRqyKAr]
45. Tang PC, Ash JS, Bates DW, Overhage JM, Sands DZ. Personal health records: definitions, benefits, and strategies for overcoming barriers to adoption. J Am Med Inform Assoc 2006;13(2):121-126 [FREE Full text] [doi: 10.1197/jamia. M2025] [Medline: 16357345] (Pubitemid 43332901)
46. Detmer D, Bloomrosen M, Raymond B, Tang P. Integrated personal health records: transformative tools for consumer-centric care. BMC Med Inform Decis Mak 2008;8:45 [FREE Full text] [doi: 10.1186/1472-6947-8-45] [Medline: 18837999]
47. Samarati P, Bertino E, Jajodia S. An authorisation model for distributed hypertext system. IEEE Transactions on Knowledge and Data Engineering 1996;8(4):555-562. [doi: 10.1109/69.536249] (Pubitemid 126774378)
48. Safran C, Bloomrosen M, Hammond WE, Labkoff S, Markel-Fox S, Tang PC, Expert Panel. Toward a national framework for the secondary use of health data: an American Medical Informatics Association White Paper. J Am Med Inform Assoc 2007;14(1):1-9 [FREE Full text] [doi: 10.1197/jamia. M2273] [Medline: 17077452] (Pubitemid 44909487)
49. Becker MY. A formal security policy for an NHS electronic health record service. In: University of Cambridge, Technical Report number 628, March 2005. London, UK: University of Cambridge; Mar. 01, 2005.
50. Ruotsalainen P, Blobel B, Nykänen P, Seppälä A, Sorvari H. Framework model and principles for trusted information sharing in pervasive health. Stud Health Technol Inform 2011;169:497-501. [Medline: 21893799]
51. Blobel B, Nordberg R, Davis JM, Pharow P. Modelling privilege management and access control. Int J Med Inform 2006 Aug; 75(8):597-623. [doi: 10.1016/j.ijmedinf.2005.08.010] [Medline: 16199198] (Pubitemid 43928839)
52. European Commission. Brussels, Belgium: European Commission; 2010 Apr. 11. Communication from the Commission to the European parliament, the council, the economic and social committee and the committee of the regions: A comprehensive approach on personal data protection in the European Union URL: http://ec.europa.eu/justice/news/consulting-public/0006/com-2010-609-en.pdf [accessed 2012-03-27] [WebCite Cache ID 66U8qB7LI]
53. Hussain S, Yang LT, Laforest F, Verdier C. Pervasive health care services and technologies. Int J Telemed Appl 2008;946082 [FREE Full text] [doi: 10.1155/2008/946082] [Medline: 18825271]