Analysis of the security and privacy requirements of cloud-based electronic health records systems

Journal of Medical Internet Research

Volumn 15, Issue 8, 2013, Pages

  Rodrigues, Joel J P C ^a   De La Torre, Isabel ^b   Fernández, Gonzalo ^b   López Coronado, Miguel ^b  

^a UNIVERSITY OF BEIRA INTERIOR   (Portugal)

^b UNIVERSITY OF VALLADOLID   (Spain)

Author keywords

Cloud computing; EHealth; Electronic health records (EHRs); Privacy; Security

Indexed keywords

ARTICLE; CLOUD-COMPUTING; COMPUTER SECURITY; ELECTRONIC HEALTH RECORDS (EHRS); ELECTRONIC MEDICAL RECORD; INFORMATION SYSTEM; PRIVACY; SECURITY; TELEHEALTH;

CLOUD-COMPUTING; EHEALTH; ELECTRONIC HEALTH RECORDS (EHRS); PRIVACY; SECURITY;

COMPUTER SECURITY; INFORMATION MANAGEMENT; MEDICAL RECORDS SYSTEMS, COMPUTERIZED; PRIVACY;

EID: 84883426914     PISSN: None     EISSN: 14388871     Source Type: Journal    
DOI: 10.2196/jmir.2494     Document Type: Article

References (27)

1. Furth B, Escalante A. Handbook of Cloud Computing 1st Edition. London: Springer; 2010.
2. Chen YY, Lu JC, Jan JK. A secure EHR system based on hybrid clouds. J Med Syst 2012 Oct;36(5):3375-3384. [doi: 10.1007/s10916-012-9830-6] [Medline: 22351166]
3. Low C, Hsueh Chen Y. Criteria for the evaluation of a cloud-based hospital information system outsourcing provider. J Med Syst 2012 Dec;36(6):3543-3553. [doi: 10.1007/s10916-012-9829-z] [Medline: 22366976]
4. Poulymenopoulou M, Malamateniou F, Vassilacopoulos G. Emergency healthcare process automation using mobile computing and cloud services. J Med Syst 2012 Oct;36(5):3233-3241. [doi: 10.1007/s10916-011-9814-y] [Medline: 22205383]
5. Buyya R, Ranjan R. Special section: Federated resource management in grid and cloud computing systems. Future Generation Comput Syst 2010;26(8):1189- 1191.
6. Bateman A, Wood M. Cloud computing. Bioinformatics 2009;25(12):1475.
7. Armbrust M, Fox A, Griffith R, Joseph AD, Katz R, Konwinski A. A view of cloud computing. Commun ACM 2010;53(4):50-58.
8. Creeger M. CTO roundtable: cloud computing. Commun ACM 2009;52(8):50-56.
9. Kuo AM. Opportunities and challenges of cloud computing to improve health care services. J Med Internet Res 2011;13(3):e67 [FREE Full text] [doi: 10.2196/jmir.1867] [Medline: 21937354]
10. Anderson NR, Lee ES, Brockenbrough JS, Minie ME, Fuller S, Brinkley J, et al. Issues in biomedical research data management and analysis: needs and barriers. J Am Med Inform Assoc 2007;14(4):478-488 [FREE Full text] [doi: 10.1197/jamia.M2114] [Medline: 17460139]
11. Svantesson D, Clarke R. Privacy and consumer risks in cloud computing. Comput Law Secur Rev 2010;26(4):391-397.
12. Fernández-CardeñosaG, De la Torre-Díez I, López-Coronado M. Rodrigues JJPC.Analysis of cloud-based solutions on EHRs systems in different scenarios. J Med Syst 2012;36(6):3777-3782.
13. Fernández-Cardeñosa G, De la Torre-Díez I, Rodrigues J. Analysis of the Cloud Computing Paradigm on Mobile Health Records Systems. In: Proceedings of the Sixth International Conference on Innovative Mobile and Internet Services in Ubiquitous Computing. 2012 Presented at: Sixth International Conference on Innovative Mobile and Internet Services in Ubiquitous Computing; July 2012; Palermo, Italy.
14. De la Torre-Díez I, Díaz-Pernas FJ, Fernández- Cardeñosa G, Antón-Rodríguez M, Martínez-Zarzuela M, González-Ortega D, et al. Analysis of the benefits and constraints for the implementation of Cloud Computing over an EHRs system. In: Proceedings of the 6th Euro American Conference on Telematics and Information. 2012 Presented at: 6th Euro American Conference on Telematics and Information Systems; May 2012; Valencia, Spain.
15. Yellowlees PM, Marks SL, Hogarth M, Turner S. Standards-based, open-source electronic health record systems: a desirable future for the U.S. health industry. Telemed J E Health 2008 Apr;14(3):284-288. [doi: 10.1089/tmj.2007.0052] [Medline: 18570554]
16. Blanchet KD. Electronic health records: are consumers riding or driving the car? Telemed J E Health 2008 Apr;14(3):210-214. [doi: 10.1089/tmj.2008.9982] [Medline: 18570543]
17. Hargreaves JS. Will electronic personal health records benefit providers and patients in rural America? Telemed J E Health 2010 Mar;16(2):167-176. [doi: 10.1089/tmj.2009.0063] [Medline: 20082592]
18. Coles-Kemp L, Reddington J, Williams P. Looking at clouds from both sides: The advantages and disadvantages of placing personal narratives in the cloud. Information Security Technical Report 2011;16:115-122.
19. Piette JD, Mendoza-Avelares MO, Ganser M, Mohamed M, Marinec N, Krishnan S. A preliminary study of a cloud-computing model for chronic illness self-care support in an underdeveloped country. Am J Prev Med 2011 Jun;40(6):629-632. [doi: 10.1016/j.amepre.2011.02.014] [Medline: 21565655]
20. HIPAA General Information. URL: http://www.cms.gov/Regulations-and- Guidance/HIPAA-Administrative-Simplification/ HIPAAGenInfo/index.html?redirect=/ HIPAAGenInfo/ [accessed 2013-07-10] [WebCite Cache ID 6I11USrUj]
21. Tejero A, de la Torre I. Advances and current state of the security and privacy in electronic health records: survey from a social perspective. J Med Syst 2012 Oct;36(5):3019-3027. [doi: 10.1007/s10916-011-9779-x] [Medline: 21947856]
22. Saquero-Rodríguez A, De la Torre-Díez I, Durango-Pascual A. Análisis de Aspectos de Interés sobre Privacidad y Seguridad en la Historia Clínica Electrónica. Revistaesalud.com 2011;7(27).
23. Zhang R, Liu L. Security Model and Requirements for Healthcare Application Clouds. In: Proceedings of the IEEE 3rd International Conference on Cloud Computing. 2010 Presented at: IEEE 3rd International Conference on Cloud Computing; July 2010; Miami, Florida.
24. Cloud Computing: Top 5 Security Concerns. 2012 Feb 23. Health Information Technology, Implementation, Insight, News, Spotlight, Today URL: http://www.ehrscope.com/blog/cloud-computing-top-5-security-concerns/ [accessed 2013-07-10] [WebCite Cache ID 6I11rOzss]
25. Amazon Web Services: Overview of Security Processes. 2011 May. URL: http://d36cz9buwru1tt.cloudfront.net/pdf/ AWS-Security-Whitepaper.pdf [accessed 2013-07-10] [WebCite Cache ID 6I11tBPdk]
26. Force.com Security Resources. URL: http://wiki.developerforce.com/page/ Security [accessed 2013-07-10] [WebCite Cache ID 6I11uoLos]
27. Fledel Y. Google Android: A Comprehensive Security Assessment. IEEE Security & Privacy 2013 (forthcoming). [doi: 10.1109/MSP.2010.2. ]