Handling confidentiality and privacy on cloud-based health information systems. Issue 2 (3rd April 2017)

• Record Type: Journal Article
• Authors: Serrão, Carlos; Cardoso, Elsa
• Is Part Of: Journal of information privacy & security. Volume 13:Issue 2(2017)
• Page Start: 51
• Page End: 68
• Publication Date: 2017-04-03
• Subjects: Privacy, Right of -- Periodicals; Data protection -- Periodicals; Computer security -- Periodicals; Computer security; Data protection; Privacy, Right of; Periodicals; 005.8
• DOI: 10.1080/15536548.2017.1322415
• Languages: English
• ISSNs: 1553-6548

Abstract

ABSTRACT: Health-related data include not only the patient's personal information, but also specific information about the patient health problems, supplementary diagnostic examination results, and much more. All this information is extremely sensitive and should only be accessed by the proper entities and actors, for special specific purposes. Described herein is an approach to address security and privacy of health-related data based on rights management technologies, with an architecture to minimize security risks and privacy conerns. This approach consists of the reutilisation of an open-source and open-specifications rights management system, and designing and adapting the necessary components to address the specific security and privacy requirements that must be faced when managing health and patient data.