Anytime, anywhere access to secure, privacy-aware healthcare services: Issues, approaches and challenges

Health Policy and Technology

Volumn 4, Issue 4, 2015, Pages 299-311

  Anwar, Mohd ^a   Joshi, James ^b   Tan, Joseph ^c  

^a North Carolina Agricultural and Technical State University   (United States)

^b UNIVERSITY OF PITTSBURGH   (United States)

^c MCMASTER UNIVERSITY   (Canada)

Author keywords

E Health m health; Integrated healthcare; Privacy; Security; Telehealth

Indexed keywords

ARTICLE; CAREGIVER; FACTORIAL ANALYSIS; HEALTH CARE ACCESS; HEALTH SERVICE; HUMAN; MEDICAL INFORMATICS; MOBILE PHONE; MONITORING; PATIENT INFORMATION; PRIORITY JOURNAL; PRIVACY; SELF CARE; SOCIAL ASPECT; SOCIAL SECURITY; SOCIAL SUPPORT; WIRELESS COMMUNICATION;

EID: 84947461295     PISSN: 22118837     EISSN: 22118845     Source Type: Journal    
DOI: 10.1016/j.hlpt.2015.08.007     Document Type: Article

References (70)

1. Whole System Demonstrator Programme. Available from: 2015 [accessed on June 10, 2015]. https://www.gov.uk/government/uploads/system/uploads/attachment_data/file/215264/dh_131689.pdf.
2. Katz S, Downs TD, Cash HR, Grotz RC. Progress in development of the index of ADL. Gerontologist 1970, 10(1):20-30. Spring.
3. Enthoven AC. Integrated delivery systems: the cure for fragmentation. Am J Manage Care 2009, 15(10 Suppl.):S284-90. Dec.
4. Nationwide Health Information Network Exchange. Available from: 2015 [accessed on May 15, 2015). https://www.healthit.gov/sites/default/files/pdf/fact-sheets/nationwide-health-information-network-exchange.pdf.
5. McGowan P Self care behavior. Encyclopedia of public health 2002, Macmillan Reference, USA. L. Breslo (Ed.).
6. Kaelber DC, Jha AK, Johnston D, Middleton B, Bates DW. A research agenda for personal health records (PHRs). J Am Med Inf Assoc 2008, 15(6):729-736.
7. Lorig K, Ritter PL, Laurent DD, Plant K, Green M, Jernigan VB, et al. Online diabetes self-management program: a randomized study. Diabetes Care 2010 Jun, 33(6):1275-1281.
8. Medical Library Association. Health Information Literacy. Available from: 2015 [accessed on May 15, 2015]. https://www.mlanet.org/resources/healthlit/index.html.
9. Harvard Health. Available from: 2015 [accessed on May 15, 2015]. http://www.health.harvard.edu.
10. [Internet]. Available from: 2015 [accessed on July10, 2015]. http://helpguide.org.
11. Run Keeper. Available from: 2015 [accessed on July 10, 2015]. http://runkeeper.com/running-app.
12. Power D. What is Social Media? Available from: 2015 [accessed on June 10, 2015]. http://dssresources.com/faq/index.php?action=artikel&id=226.
13. BodySpace. 2015 [accessed on June 10, 2015]. http://bodyspace.bodybuilding.com.
14. Twitter Inc. http://twitter.com/.
15. Domingo M. Managing healthcare through social networks. IEEE Comput 2010, 43(7):20-25.
16. Fat Secret. Available from: 2015 [accessed on June 10, 2015). http://fatsecret.com/.
17. Scottie-Pilot Healthcare Project. Available from: 2015 [accessed on May 15, 2015]. https://waag.org/en/project/pilot-healthcare-gate.
18. Office of the press secy. Remarks by the president on medical privacy. Press Release: the white house; December 2000.
19. Berendt B, Gurnther O, Spiekermann S. Privacy in e-commerce: stated preferences vs. actual behavior. Commun ACM 2005, 48(4):101-106.
20. Pew Internet and American Life Project. Available from: 2015 [accessed on May 15, 2015]. http://www.pewinternet.org/2011/02/01/health-topics-4/.
21. Poulsen K. Hackers assault epilepsy patients via computer. WIRED News 2008, http://www.wired.com/politics/security/news/2008/03/epilepsy.
22. Thrum S, Kane Y. Your apps are watching you. Wall Street J 2010, Online, December.
23. Google Privacy & Terms. 2015 [accessed on June 10, 2015]. http://www.google.com/policies/privacy/partners/.
24. Ongtang M, McLaughlin S, Enck W, McDaniel P. Semantically rich application-centric security in android. In: Proceedings of 2009 annual computer security applications conference. IEEE; 2009. p. 340-49.
25. Cheng Z. Mobile malware: threats and preventions. McAfee Avert Lab, Tech. Rep; Sep 2007.
26. Au K, Zhou Y, Huang Z, Gill P, Lie D. Short paper: a look at smartphone permission models. In: Proceedings of the first ACM workshop on Security and privacy in smartphones and mobile devices, ser. SPSM'11 2011, 63-68. ACM, New York, NY, USA.
27. Henry A. Facebook is tracking your every move on the web; here's how to stop it. LIFEHACKER 2011 Sept. 26. Available from: 2011. http://lifehacker.com/5843969/facebook-is-tracking-your-%20every-move-on-the-web-heres-how-to-stop-it.
28. Omre AH, Keeping S. Bluetooth low energy: wireless connectivity for medical monitoring. J Diabetes Sci Technol 2010, 4(2):457-463.
29. Mare S, Kotz D. Is Bluetooth the right technology for mhealth? In: Proceedings of USENIX workshop on health security and privacy (HealthSec); August, 2010.
30. Li C, Raghunathan A, Jha N. Hijacking an insulin pump: security attacks and defenses for a diabetes therapy system. In: 13th IEEE international conference on e-health networking applications and services (Healthcom); June 2011. p. 150-56.
31. Halperin D, Heydt-Benjamin TS, Ransford B, Clark SS, Defend B, Morgan W, et al. Pacemakers and implantable cardiac defibrillators: software radio attacks and zero-power defenses. In: 2008 IEEE symposium on security and privacy. IEEE; 2008, p. 129-42.
32. Ashar BS, Ferriter A. Radiofrequency identification technology in health care: benefits and potential risks. JAMA 2007, 298(19):2305-2307.
33. MANAGED CARE, 2014 Aug, Available from: 2015 [accessed on June 10, 2015]. http://www.managedcaremag.com/archives/2014/8/medical-device-market-hit-133-billion-2016.
34. Stanton J, Stam K, Mastrangelo P, Jolton J. Analysis of end user security behaviors. Comput Secur 2005, 24(2):124-133.
35. Gollakota S, Hassanieh H, Ransford B, Katabi D, Fu K. They can hear your heartbeats: non-invasive security for implantable medical devices. SIGCOMM Comput Commun Rev 2011, 41(4):2-13.
36. Yang Y, Lewis E, Brown L. Cultural and social aspects of security and privacy: the critical elements of trusted online service. In: Proceedings of the second international conference on usability and internationalization, ser. UI-HCII'07. Berlin, Heidelberg: Springer-Verlag; 2007. p. 546-53.
37. Strengthening Health Information Infrastructure for Health Care Quality Governance: good practices, new opportunities and data privacy protection challenges. OCED 30 May 2013. http://www.oecd.org/els/health-systems/strengthening-health-information-infrastructure.htm 2013 [accessed April 19, 2015].
38. Arkin B, Stender S, McGraw G. Software penetration testing. IEEE Secur Privacy 2005, 3(1):84-87.
39. Nico PL, Turner CS, Nico KK. Insecurity by contract. In: Proceedings of the eighth IASTED international conference on software engineering and applications (SEA 2004), November 2004. p. 269-74.
40. Saltzer J, Schroeder M. The protection of information in computer systems. Proc IEEE 1975, 63(9):1278-1308.
41. Davi L, Dmitrienko A, Sadeghi AR, Winandy M. Privilege escalation attacks on android. Proceedings of information security, ser. lecture notes in computer science 2011, 6531:346-360. Springer, Berlin/Heidelberg.
42. Motiee S, Hawkey K, Beznosov K. Do windows users follow the principle of least privilege?: investigating user account control practices. Proceedings of the sixth symposium on usable privacy and security 2010, ser. SOUPS '10, ACM, New York, NY, USA, 1:1-1:13.
43. Ardagna CA, di Vimercati SDC, Foresti S, Grandison TW, Jajodia S, Samarati P. Access control for smarter healthcare using policy spaces. Comput Secur 2010, 29(8):848-858.
44. Aggarwal CC. On k-anonymity and the curse of dimensionality. In: Proceedings of the 31st international conference on very large data bases, ser. VLDB '05. VLDB Endowment; 2005. p. 901-09.
45. Oganian A, Domingo-Ferrer J. On the complexity of optimal micro-aggregation for statistical disclosure control. Stat J United Nations Econ Comm Eur 2001, 18(4):345-353.
46. Benaloh J, Chase M, Horvitz E, Lauter K. Patient controlled encryption: ensuring privacy of electronic medical records. In: The ACM cloud computing security workshop (CCSW'09). ACM; 2009.
47. Ibraimi L, Asim M, Petkovic M. Secure management of personal health records by applying attribute-based encryption. In: Wearable micro and nanotechnologies for personalized health (pHealth), 2009 sixth international workshop on; June 2009. p 71-74.
48. Narayan S, Gagne D.M, Safavi-Naini R. Privacy preserving EHR system using attribute-based infrastructure. Proceedings of the 2010 ACM workshop on Cloud computing security workshop 2010, 47-52. ser. CCSW '10, ACM, New York, NY, USA.
49. Akinyele JA, Pagano MW, Green MD, Lehmann CU, Peterson ZN, Rubin AD. Securing electronic medical records using attribute-based encryption on mobile devices. Proceedings of the first ACM workshop on Security and privacy in smartphones and mobile devices 2011, 75-86. ser. SPSM '11, ACM, New York, NY, USA.
50. Dhamija R, Tygar JD, Hearst M. Why phishing works. Proceedings of the SIGCHI conference on Human Factors in computing systems 2006, 581-590. ser. CHI '06, ACM, New York, NY, USA.
51. Kumaraguru P, Sheng S, Acquisti A, Cranor LF, Hong J. Lessons from a real world evaluation of anti-phishing training. IEEE eCrime Res Summit 2008, 1-12.
52. Gorling S. The myth of user education. In: Proceedings of the 16th virus bulletin int. conference; 2006.
53. Park S, Matthews B, D'Amours D, McIver WJ. Characterizing the impacts of VPN security models on streaming video. Proceedings of the 2010 eighth annual communication networks and services research conference 2010, 152-159. ser. CNSR '10, IEEE Computer Society, Washington, DC, USA.
54. Shieh YY, Tsai FY, Wang MD, Lin CM. Mobile health care: opportunities and challenges. In: International conference on the management of mobile business (ICMB '07); July 2007.
55. Giani A, Roosta T, Sastry S. Integrity checker for wireless sensor networks in health care applications. In: Second international conference on pervasive computing technologies for healthcare (PervasiveHealth '08); Feb. 2008. p. 135-38.
56. Arazi B. Message authentication in computationally constrained environments. IEEE Trans Mob Comput 2009, 8(7):968-974.
57. Rosales MS, Garcia GG, Sanchez GD. Efficient message authentication protocol for WSN. WSEAS Trans Comput 2009, 8(6):895-904.
58. Xu F, Qin Z, Tan C, Wang B, Li Q. IMDGuard: securing implantable medical devices with the external wearable guardian. In: IEEE proceedings of INFOCOM; April 2011. p. 1862-70.
59. Schechter S. Security that is meant to be skindeep using ultraviolet micropigmentation to store emergency-access keys for implantable medical devices. In: First USENIX workshop on health security and privacy (HealthSec); 2010.
60. Cherukuri S, Venkatasubramanian K, S. Gupta. Biosec: a biometric based approach for securing communication in wireless networks of biosensors implanted in the human body. In: Proceedings of the international conference on parallel processing workshops; Oct. 2003. p. 432-39.
61. Denning T, Fu K, Kohno T. Absence makes the heart grow fonder: new directions for implantable medical device security. Proceedings of the third conference on Hot topics in security 2008, 1-7. USENIX Association, Berkeley, CA, USA.
62. Rae A, Fidge C. Information flow analysis for fail-secure devices. Comput J 2005, 48(1):17-26.
63. Bussard L, Roudier Y, Kilian-kehr R, Crosta S. Trust and authorization in pervasive b2e scenarios. In: The fifth international conference on ubiquitous computing (UbiComp) 2003, Springer.
64. Wicks P, Massagli M, Frost J, Brownstein C, Okun S, Vaughan T, et al. Sharing health data for better outcomes on PatientsLikeMe. J Med Internet Res 2010, 12(2):e19.
65. MyOSCAR. Available from: 2015 [accessed on July 12, 2015]. http://myoscar.org.
66. Novant Health MyChart. Available from: 2015 [accessed on July 12, 2015]. https://novantmychart.org/.
67. NextGen Healthcare Patient Portal. Available from: 2015 [accessed on July 12, 2015]. https://www.nextmd.com/.
68. HealthVault. Available from: 2015 [accessed on July 12, 2015]. https://www.healthvault.com/.
69. Ackerman MS, Cranor LF, Reagle J. Privacy in e-commerce: examining user scenarios and privacy preferences. In: Proceedings of the ACM conference on electronic commerce EC'99, Denver, CO; Nov. 1999. p. 1-8.
70. U.S. Food and Drug Administration.Medical device recall report. Available from: 2015 [accessed on June 10, 2015). http://www.fda.gov/downloads/AboutFDA/CentersOffices/OfficeofMedicalProductsandTobacco/CDRH/CDRHTransparency/UCM388442.pdf.