Improving Security and Privacy for Health Information and Images

Abstract

Recently, the wireless devices and information technology have been evolved greatly and used in many sectors such as health and military. Employing these technologies in health system require to transmitting the patient’s information over the Internet. Hence, there is an urgent need to provide a high degree of security and privacy for patient information. This paper presents new encryption method to protect the information that are transmitted and stored in electronic health records (EHR) with maintaining its privacy. The proposal employs AES and ECC algorithms for security purpose and HMAC-SHA3 algorithm for privacy purpose. The suggested strategy was applied in different stages. ECC algorithm had been used to provides very fast key generation, and fast key agreement. A different key is generated for each session where both sender and receiver has the ability to generate the same private key. The obtained results show high level of security in both ends(Sender & receiver) as they have the role of encryption and decoding according to the query. The results were analyzed and tested according to the NIST test group and thirteen steps have been successfully passed.