Non-repudiation Of Information Research Articles

Legality for Electronic Signatures in Implementing Electronic Medical Records

An electronic signature is an authentic marker to show a person's responsibility. Electronic signatures also ensure confidentiality, integrity, authorization, access control, and non-repudiation of information in electronic medical records. Therefore, this research was conducted to determine the legal aspects of electronic signatures in administering electronic medical records. This research used a qualitative method with a normative juridical approach. The research sources were based on laws, government regulations, journals, and other tertiary sources related to electronic signatures and electronic medical records in health facilities. Research findings illustrated that Minister of Health Regulation Number 24 of 2022 concerning medical records only defined electronic signatures as an authentication and verification of the security and privacy of medical record information. Electronic signatures are specifically regulated by Constitution Number 11 of 2008 concerning Information and Electronic Transactions and Government Regulation Number 71 of 2019 concerning Electronic Systems and Transaction Operators. Both certified and uncertified electronic signatures have legal legitimacy in their application in electronic medical records. However, how they are supported by evidence is what makes them different. Certified electronic signatures are more trustworthy than uncertified electronic signatures.

Secure Patient Authentication Framework in the Healthcare System Using Wireless Medical Sensor Networks.

Biosensor is a means to transmit some physical phenomena, like body temperature, pulse, respiratory rate, electroencephalogram (EEG), electrocardiogram (ECG), and blood pressure. Such transmission is performed via Wireless Medical Sensor Network (WMSN) while diagnosing patients remotely through Internet-of-Medical-Things (IoMT). The sensitive data transmitted through WMSN from IoMT over an insecure channel is vulnerable to several threats and needs proper attention to be secured from adversaries. In contrast to addressing the security of all associated entities involving patient monitoring in the healthcare system or ensuring the integrity, authorization, and nonrepudiation of information over the communication line, no one can guarantee its security without a robust authentication protocol. Therefore, we have proposed a lightweight and robust authentication scheme for the network-enabled healthcare devices (IoMT) that mitigate all the identified weaknesses posed in the recent literature. The proposed protocol's security has been analyzed formally using BAN logic and ProVerif2.02 and informally using pragmatic illustration. Simultaneously, at the end of the paper, the performance analysis result shows a delicate balance of security with performance that is often missing in the current protocols.

Preface

Information Assurance and Security (IAS) is a field of research that focus on the management and protection of knowledge, information and data. It combines two fields:Information assurance, which focuses on ensuring the availability, integrity, authentication, confidentiality, and non-repudiation of information and systems. These measures may include providing for restoration of information systems by incorporating protection, detection, and reaction capabilities.Information security, which emphasizes on the protection of information and information systems from unauthorized access, use, disclosure, disruption, modification, or destruction in order to provide confidentiality, integrity, and availability.Information systems play an important role in the infrastructure that supports commerce, banking, telecommunications, health care, and national security, driving the need for qualified IAS specialists.This special issue is a platform for Master of Science (Information Security) students to publish their final year project/research findings. The papers published in this issue have been reviewed by at least 3 reviewers or lecturers in the area of IAS. The scopes of research area conducted by the students are:- Information Security Awareness, Evaluation, Maturity Model/Metamodel- Security Issues in Cloud- Spam Email/Review/Web Detection- Biometrics Recognition- Privacy Preserving Data Mining- Cyber Security Analytics and Visualization- Digital Forensics and Investigation- Others

Reducing e-commerce risks using digital certificates

E-commerce means buying and selling goods and services across the Internet. Secured communication in e-commerce, across unsecured medium, such as the Internet, represents one of the major components in a domain of providing necessary security- critical demands, so the flow of information could go in a secure way. The Internet, as a global computer network must provide five major security services: confidentiality, data integrity, authentication, availability, and non-repudiation of information. Without guaranteeing aformentioned security goals, risks may be very high in e-commerce systems. A possible way to reduce these risks is to use digital certificates. Digital certificates provide a means of proving identity in electronic transactions, and from the point of view of computer communication they are irreplacable, but nevertheless they provide a good mechanism for implementing the major part of this security goal, and therefore, their usage in e-commerce is the major topic of this paper.