Access control management in electronic health records: A systematic literature review;Gestión del control de acceso en historiales clínicos electrónicos: Revisión sistemática de la literatura

Gaceta Sanitaria

Volumn 26, Issue 5, 2012, Pages 463-468

  Carrión Señor, Inmaculada ^a   Fernández Alemán, José Luis ^a   Toval, Ambrosio ^a  

^a UNIVERSITY OF MURCIA   (Spain)

Author keywords

Electronic health records; Gatekeeping; Privacy; Safety; Systematic review; Wireless technology

Indexed keywords

CONFIDENTIALITY; ELECTRONIC MEDICAL RECORD; HUMAN; ORGANIZATION AND MANAGEMENT; SHORT SURVEY;

CONFIDENTIALITY; ELECTRONIC HEALTH RECORDS; HUMANS;

EID: 84865392413     PISSN: 02139111     EISSN: 15781283     Source Type: Journal    
DOI: 10.1016/j.gaceta.2011.11.019     Document Type: Short Survey

References (32)

1. Hesse B.W., Hansen D., Finholt T., et al. Social participation in health 2.0. Computer 2010, 43:45-52.
2. Carnicero J. Desarrollo de la eSalud en Europa 2011, Disponible en: http://www.cepal.org/dds/noticias/paginas/2/41012/salude-Europa-Javier-Carnicero.pdf.
3. Carrión Señor I., Fernández Alemán J.L., Toval A., et al. Seguridad y privacidad en historiales clínicos electrónicos: una revisión sistemática de la literatura. Revista eSalud com 2011, 7:1-11.
4. Liberati A., Altman D.G., Tetzlaff J., et al. The PRISMA statement for reporting systematic reviews and meta-analyses of studies that evaluate health care interventions: explanation and elaboration. J Clin Epidemiol 2009, 62:e1-e34.
5. Norma ISO/CEN 13606 [Internet]. (Actualizado el 1/8/2011; consultado el 20/7/2011.) Disponible en: http://www.aenor.es/.
6. Falcao-Reis F., Costa-Pereira A., Correia M.E. Access and privacy rights using web security standards to increase patient empowerment. Stud Health Technol Inform 2008, 137:275-285.
7. Röstad L. An initial model and a discussion of access control in patient controlled health records. Proceedings of the 2008 Third International Conference on Availability, Reliability and Security 2008, IEEE Computer Society, Washington, DC, p. 935-42.
8. Daglish D., Archer N. Electronic personal health record systems: a brief review of privacy, security, and architectural issues. Proceedings of the 2009 World Congress on Privacy, Security, Trust and the Management of e-Business 2009, IEEE Computer Society, Washington, DC, p. 110-20.
9. Kahn S., Sheshadri V. Medical record privacy and security in a digital environment. IT Professional 2008, 10:46-52.
10. Benaloh J., Chase M., Horvitz E., et al. Patient controlled encryption: ensuring privacy of electronic medical records. Proceedings of the 2009 ACM Workshop on Cloud Computing Security 2009, ACM, New York, p. 103-14.
11. Farzandipour M., Sadoughi F., Ahmadi M., et al. Security requirements and solutions in electronic health records: lessons learned from a comparative study. J Med Syst 2009, 34:629-642.
12. Hu J., Chen H.H., Hou T.W. A hybrid public key infrastructure solution (HPKI) for HIPAA privacy/security regulations. Computer Standards & Interfaces 2010, 32:274-280.
13. Win K.T., Susilo W., Mu Y. Personal health record systems and their security protection. J Med Syst 2006, 30:309-315.
14. van der Linden H., Kalra D., Hasman A., et al. Inter-organizational future proof EHR systems: a review of the security and privacy related issues. Int J Med Inform 2009, 78:141-160.
15. Lovis C., Spahni S., Cassoni N., et al. Comprehensive management of the access to the electronic patient record: towards trans-institutional networks. Int J Med Inform 2007, 76:466-470.
16. Riedl B., Neubauer T., Goluch G., et al. A secure architecture for the pseudonymization of medical data. Proceedings of the The Second International Conference on Availability, Reliability and Security 2007, 318-324. IEEE Computer Society, Washington, DC.
17. Rostad L., Edsberg O. A study of access control requirements for healthcare systems based on audit trails from access logs. Proceedings of the 22nd Annual Computer Security Applications Conference 2006, IEEE Computer Society, Washington, DC, p. 175-86.
18. Choe J., Yoo S.K. Web-based secure access from multiple patient repositories. Int J Med Inform 2008, 77:242-248.
19. Agrawal R., Johnson C. Securing electronic health records without impeding the flow of information. Int J Med Inform 2007, 76:471-479.
20. Elger B.S., Iavindrasana J., Lo Iacono L., et al. Strategies for health data exchange for secondary, cross-institutional clinical research. Comput Methods Programs Biomed 2010, 99:230-251.
21. Narayan S., Gagné M., Safavi-Naini R. Privacy preserving EHR system using attribute-based infrastructure. Proceedings of the 2010 ACM Workshop on Cloud Computing Security Workshop 2010, ACM, New York, p. 47-52.
22. Hembroff G.C., Muftic S. SAMSON: Secure Access for Medical Smartcards Over Networks. Proceedings of the 2010 IEEE International Symposium on a World of Wireless, Mobile and Multimedia Networks (WoWMoM) 2010, IEEE Computer Society, Washington, DC, p. 1-6.
23. Zhang R., Liu L. Security models and requirements for healthcare application clouds. Proceedings of the 2010 IEEE 3rd International Conference on Cloud Computing 2010, IEEE Computer Society, Washington, DC, p. 268-75.
24. Sun J., Fang Y. Cross-domain data sharing in distributed electronic health record systems. IEEE Transactions on Parallel and Distributed Systems 2010, 21:754-764.
25. Al Faresi A., Wijesekera D., Moidu K. A comprehensive privacy-aware authorization framework founded on HIPAA privacy rules. Proceedings of the 1st ACM International Health Informatics Symposium 2010, ACM, NewYork, p. 637-46.
26. Haas S., Wohlgemuth S., Echizen I., et al. Aspects of privacy for electronic health records. Int J Med Inform 2011, 80:e26-e31.
27. Ardagna C.A., di Vimercati S.D.C., Foresti S., et al. Access control for smarter healthcare using policy spaces. Computers & Security 2010, 29:848-858.
28. Jafari M., Safavi-Naini R., Saunders C., et al. Using digital rights management for securing data in a medical research environment. Proceedings of the 10th Annual ACM Workshop on Digital Rights Management 2010, ACM, New York, p. 55-60.
29. Quantin C., Jaquet-Chiffelle D.O., Coatrieux G., et al. Medical record search engines, using pseudonymised patient identity: an alternative to centralized medical records. Int J Med Inform 2011, 80:e6-e11.
30. Microsoft. Microsoft HealthVault. 2007. Disponible en: http://www.microsoft.com/en-us/healthvault/.
31. Tachakra S., Wang X.H., Istepanian R.S., et al. Mobile e-health: the unwired evolution of telemedicine. Telemed J E Health 2003, 9:247-257.
32. Kyriacou E.C., Pattichis C.S., Pattichis M.S. An overview of recent healthcare support systems for eEmergency and mHealth applications. En: Conf Proc IEEE. Eng Med Biol Soc 2009, 1246-1249.