Healthcare Information Security Research Articles

Enhancement of Cloud Stationed Healthcare Information Security by Dimensionality Reduction

The security of healthcare information can be secured by the use of cloud environment, and takes finite estimating power. The security of patient’s data shared over the internet can be distressed by healthcare institutions because of growing high popularity. The Eigen decomposition (ED) and Single Value Decomposition (SVD) of a matrix are relevant to maintain the security and the study of Dimension Reduction and its advantages are also applicable. To reduce the data without loss, Principal Component Analysis (PCA) is used. Fast retrieval methods are critical for many large-scale and data-driven vision applications. Recent work has explored ways to embed highdimensional features or complex distance functions into a lowdimensional space where items can be efficiently searched. However, existing methods do not apply for high-dimensional kernel based data The proposed method covers how to generalize locality-sensitive hashing and the implementation of Kernel PCA based methods for Dimensionality Reduction can be applied to Medical data provides high security and utilize the resources of the cloud to inhibit data efficiently.

Intelligent Security and Privacy of Electronic Health Records Using Biometric Images.

In the presence of Cloud Environment and the migration of Electronic Health Systems and records to the Cloud, patient privacy has become an emergent problem for healthcare institutions. Government bylaws, electronic health documentation, and innovative internet health services generate numerous security issues for healthcare conformity and information security groups. To deal with these issues, healthcare institutes must protect essential IT infrastructure from unauthorized use by insiders and hackers. The Cloud Computing archetype allows for EHealth methods that improve the features and functionality of systems on the cloud. On the other hand, sending patients' medical information and records to the Cloud entails a number of risks in the protection and privacy of the health records during the communication process. In this paper, a solution is proposed for the security of Electronic Health Records (EHRs) in cloud environment during the process of sending the data to the cloud. In addition, the proposed method uses biometric images that allow for unified patient identification across cloud-based EHRs and across medical institutions. To protect the privacy of patients' information and streamline the migration process, a watermarking-based method is proposed for health care providers to ensure that patients' data are only accessible to authorized personnel. Patients' information, such as name, id, symptoms, diseases, and previous history, is secured in biometric images of patients as an encrypted watermark. Quality and impeccability analysis and robustness were performed to test the proposed method. The PSNR values show that the proposed method produced excellent results. The robustness and impressibility of the proposed method were tested by subjecting the watermarked images to different simulated attacks. The watermarks were largely impermeable to varied and repeated attacks.

Intelligent Neighborhood Indexing Sequence Model for Healthcare Data Encoding

Recently, information security in the healthcare sector has become essential to ensure confidentiality in medical data. At the same time, automated disease diagnosis using deep learning (DL) models also gained considerable attention to accomplish enhanced classification performance. This paper designs an intelligent neighborhood indexing sequence based on encoding with a classification model for healthcare information security (INISEC-HIS). The proposed INISEC-HIS technique aims to accomplish security in medical data transmission and diagnosis. The neighborhood indexing sequence (NIS) technique is applied to securely transmit the data, which transforms the medical data into an encoded format. Besides, a novel artificial fish swarm algorithm (AFSA) with deep neural networks (DNN) model is used for the classification process. The design of AFSA to optimally adjust the hyperparameters of the DNN model shows the study's novelty. An extensive simulation analysis takes place to examine the improved outcomes of the INISEC-HIS technique, and the obtained results highlighted the supremacy over the other techniques.

Hyperchaos for improving the security of medical data

Because of the widespread use of medical images and signals in hospitals and healthcare communities, information security and medical data encryption are becoming more important. Cryptography has a specific role, is to protect data against unauthorized access. In this paper, we propose an efficient encryption scheme for medical data using a new hyperchaotic system applied with two algorithms: the first based on random key generation from initial conditions to encrypt a brain MRI and the second algorithm using chaotic masking technique to encrypt the heartbeat signal. The scheme achieves secure encryption and his robustness is measured by various metrics such as histogram analysis, key sensitivity, correlation coefficient and PSNR test. We conclude from the experimental results that the scheme promises stronger resistance against diverse forms of common attacks and high sensitivity to the security keys.

Secured and memory overhead controlled data authentication mechanism in cloud computing

Cloud based intelligent health monitoring system (CIHMS) is smart equipment which facilitates the patients to repossess the health care information without going to the hospital. By recording the health care information of the patients in the cloud environment, this could be attained. Nevertheless, while coming to the part of security of healthcare information is a difficult issue. Cloud computing gives a means of storing and distributing the huge amount of data’s from the several users. Storing and distributing data contents via third party server will bring about more security problems. The care should be taken on those contents that are dealing via the cloud storage and the illegal access made by malevolent users must be observed and retracted. In the previous research, Bi-directional storage verification in cloud storage (BD-SVCS) is presented for the cloud environment that will validate each user beforehand giving them authentication. Nevertheless, this technique still found to be short of the safe and competent authentication. Here encryption information could be hacked simply. These issues are eliminated in the proposed methodology called scalable and enhanced key-aggregate cryptosystem (SE-KAC), in which the safe and consistent dealing of data contents is guaranteed. It gives competent security for healthcare information. This technique deals with the issue of outflow of sensitive information and implements a safe CIHMS for giving the security of the related parties and their data. By utilizing this technique, the patient and healthcare institutions could record the health and medical prescription data in encrypted format. For encryption, the double encryption technique with cipher text id known as classes for enhancing the security. The key owner contains a master secret key which is utilized to extract the secret keys for various classes. The extracted key is accumulated and forwards as a single aggregate key to the patient for the purpose of decryption. In addition, unique data shared by numerous users are found out that would be given via the similar set of resources with the intention of evading the annoying resource wastage. This is accomplished by taking the similar data contents needed by the users in the identical virtual machine. An experimental result proves that proposed research methodology SE-KAC attains higher security and less complexity.

Electronic Medical Record Integration for Streamlined DXA Reporting.

Dual-energy X-ray absorptiometry (DXA) is the most frequently performed examination to assess bone mineral density in clinical practice. Aside from images and graphical displays, many numerical values are part of DXA reports. These values are typically manually entered into the formal report through the electronic medical record or PACS workstation. The process takes time and is prone to errors. Exporting the DXA numerical data via HL7 engine to the electronic medical record was proposed to improve reporting efficiency and accuracy. The output from the DXA unit computer was reconfigured to export the report content via the HL7 interface engine into the electronic medical record. Radiology interpretive reporting was subsequently done directly in the electronic medical record. In the evaluation of errors, 100 preliminary DXA reports before the change and 100 after the change were examined. These reports were analyzed for errors that included decimal change, number transposition, negative number issue, other incorrect number error, and failure to include prior exam for comparison. In addition, report turnaround times were evaluated before and after the changes were made. Reporting time evaluations included 1-year volume prior to change (3915 reports) and 1month post-change (206 reports). Of 100 DEXA exams before the change, 15 final reports contained 25 numerical errors. After the change, no numerical errors in the reports were identified. Exam end to final report time decreased from 2159 to 625min on average. Automating data transmittal from the DXA modality for report generation improves accuracy and turnaround time. This approach did not require any third party software, and healthcare information security concerns were negated since we are using our standard workstations. Secondary to the affordability and applicability to the large percentage of the population using electronic medical record systems, this type of automated workflow is recommended.

Using Simulation to Teach Security and Encryption to Non-Technical Healthcare Professionals

This paper intends to simplify challenging concepts through role-play demonstrations and serve as a foundation for understanding the basis of securing healthcare data. Disparity exists between the rising need for security of electronic healthcare information and the number of healthcare leaders who understand the concepts behind ensuring privacy and accuracy of such data. Healthcare managers with a basic understanding of data encryption and how it safeguards health information are vital to the success of Electronic Health Records. They often are responsible for proper oversight of such systems and should instill confidence in medical providers and patients that electronic medical data is safe and accurate. However, data security and privacy are complex concepts and remain foreign to many healthcare managers. This paper reviews the benefits of simulation learning and outlines a workshop and simulation game developed in response to difficulties teaching the technology of encryption. The results are validated with anecdotal and indirect statistical evidence.

An Intelligent System to Improve Quality of Service in Healthcare Monitoring Over WSN

Objectives: This paper emphasizes on the security and privacy ofthe healthcare data with the help of encryption techniques and to control congestion in the data and study of various techniques which are helpful for maintenance and safety of the data. Methods/Statistical Analysis: Thereare various kinds of methods adapted by researchers for improving congestion mechanism and the security of healthcare information. Every method varies on the basis of the different parameters and their requirements. Methods are enhanced by using different encryption techniques and by developing secure key exchange data system in which data is transferred from patient to doctor through keys. Findings: This research manuscript shows the secure healthcare system is required to be developed or maintained. As healthcare has important role in day to day life particularly just in case of adulthood those that suffers from diseases like mental issues, vital sign, diabetes, heart issues, etc. For developing secure system secure key exchange between information is required developing keys that exchange information between consumer and the server could do this. These keys can take information from server and send it to a consumer by secure path using cryptography techniques so cannot be browse by an unauthorized user and what is more, and thesehealthcare systems areplanned for the case so immediate treatment is given to a patient when required. This paper provides the method to record health information of patients by the Health Record Management System (HRMS). Application/Improvements: To work in such cases, there is a need to develop a system which improves QOS (quality of service), efficiency, throughput, end to end time delay, etc.

Cloud based Information Security and Privacy in Healthcare

computing is emerging as a promising prototype for computing and is drawing the attention from both academia and industry. The cloud-computing model is transferring the computing infrastructure to third-party service providers that manage the hardware and software resources with important cost reductions. It is emerging as a new computing example in the medical field apart from other business domains. Wide number of health firms has started shifting electronic health information to the cloud environment. Initiating cloud services in health sector will not only simplify the exchange of electronic medical records between the hospitals and clinics, but also enables the cloud to act as a medical record storage center. Besides, moving to cloud environment eases the healthcare organizations from the monotonous tasks of infrastructure management and also reduces development and maintenance costs. The medical data stored in cloud makes the treatment systematic by retrieving patient's medical history from the database before going for the treatment and get to know about the health issues of the patient.

The Roundup

The Roundup

Informatics in Medical Imaging

Informatics in Medical Imaging presents a comprehensive overview of concepts and principles of medical imaging informatics. The book has 23 chapters divided into six major sections: Introduction to Informatics in Medicine, Standard Protocols in Imaging Informatics, Key Technologies, Information Systems in Healthcare Informatics, Operational Issues, and Medical Informatics beyond the Radiology Department. The book is 367 pages long and is written by 33 contributing authors from around the world, including many well-known experts in their respective fields. Today's technologies of medical imaging and radiation oncology are so complex and computer-driven in the digital era, it is difficult for medical specialists and technologists responsible for their clinical use to know exactly what is happening at the point of patient care. Medical physicists are facing these new challenges too. They are best trained to understand the technologies involved and their applications and are taking more clinical responsibilities than before to ensure that the best patient care is delivered safely and effectively. Medical imaging informatics is about medical image and healthcare information management, integration, storage, transmission, distribution, and security during these processes. In this book, the authors tried to provide an integrated publication dealing with the fundamental and updated issues within the scope of medical imaging informatics. Readers will understand the principal components of modern computing, networks, storage systems, and their extensive applications in medical imaging informatics after reading each focused chapter which give a broad overview. The field of medical imaging informatics is still changing rapidly. Because of the comprehensive nature of this book with many topics in medical imaging informatics, the targeted readers include professionals in medical physics and biomedical imaging, as well as students and researchers. It may also be used as a helpful reference guide for medical physicists, radiologists, and administrative staff seeking additional information on medical imaging informatics. The book discusses basic concepts in medical imaging informatics, data representation and transmission, primary imaging informatics protocols, picture archiving and communication systems (PACS), and the electronic medical record. It also details key instrumentation and data mining technologies used in medical imaging informatics, typical information systems used within imaging departments such as orders and result systems, acquisition systems, reporting systems, archives, and information-display systems, as well as practical operational issues. For HL7, DICOM, and IHE that are fundamental communication protocols used to support various aspects of information in the health care enterprise, not only basic concepts are discussed but also in-depth information is covered, making them useful for readers with different backgrounds in medical imaging informatics. Readers with administrative responsibilities may be interested in special topics discussions about equipment procurement, operational issues, and ethics in the radiology department. In addition to radiology, issues concerning other medical specialties such as pathology, cardiology, dermatology, surgery, and radiation oncology that use digital imaging are also addressed in the book. Although these 23 chapters are written by many authors, unlike an integrated one by only a few authors, most chapters are well written and easy to read even for readers without much prior knowledge in medical imaging informatics. Since this book is one volume of the series “Imaging in Medical Diagnosis and Therapy,” some chapters may have been better included in other volumes of the series. With abundant respective information from various resources, this book is an attempt to cover fundamental principles and state-of-the-art technologies as well as major challenges for future advances with the radiology and radiation oncology community in mind. From background information in medical informatics including a detailed overview of key technologies such as operating systems, networks, standard protocols, digital storage, and image compression in Sections I–III, to principles of PACS, display technologies, hospital information systems, and special topics about operational issues in medical imaging and beyond the radiology department in Sections IV–VI, the book provides a comprehensive survey of the field of medical imaging informatics. Overall, this book is well written by experts in their respective fields and has good coverage. Readers may also obtain a wealth of information in medical imaging informatics from references listed at the end of each chapter which supplement materials discussed in this book. Yu Liu is a Senior Imaging Physicist certified by the American Board of Radiology in the Radiology Department at St. Luke's Medical Center of Aurora Healthcare, Milwaukee, Wisconsin. He has been involved in PACS implementation, operation, and quality control since 1997. His expertise and current interests are in PACS and MRI physics.

Review of the Distributed Computing and EMR: Can EDI Solve the Problem?

The impact of distributed computing in healthcare is just beginning to be realized. The goal of wide scale integration of electronic medical records while meeting stringent security, confidentiality and privacy requirements for the patient is a grand-challenge scale problem of global proportions with farreaching social benefits. Healthcare organizations have to protect private information pertaining to the individuals they serve. As more and more healthcare organizations implement computer-based Enterprise Resource Planning (ERPs), telemedicine, EDI, data warehouses and other network-based information systems, information security in healthcare gains importance more than ever before. In this paper we are proposing two clinical services based systems, the ontology based data gleaning system, the gleaned data is sent to which has an in-built generalization privacy technique and the agent-based intelligent decision support system.

Grounding information security in healthcare

Purpose The objective of this paper is to show that grounded theory (GT), together with mixed methods, can be used to involve healthcare professionals in the design and enhancement of access control policies to Electronic Medical Record (EMR) systems. Methods The mixed methods applied for this research included, in this sequence, focus groups (main qualitative method that used grounded theory for the data analysis) and structured questionnaires (secondary quantitative method). Results Results showed that the presented methodology can be used to involve healthcare professionals in the definition of access control policies to EMR systems and explore these issues in a diversified and integrated way. The methodology allowed for the generation of great amounts of data in the beginning of the study and in a short time span. Results from the applied methodology revealed a first glimpse of the theories to be generated and integrated, with future research, into access control policies. Conclusions The methodological research described in this paper is very rarely, if ever, applied in developing security tools such as access control. Nevertheless, it can be an effective way of involving healthcare professionals in the definition and enhancement of access control policies and in making information security more grounded into their workflows and daily practices.

Information security and privacy in healthcare: current state of research

Information security and privacy in the healthcare sector is an issue of growing importance. The adoption of digital patient records, increased regulation, provider consolidation and the increasing need for information exchange between patients, providers and payers, all point towards the need for better information security. We critically survey the literature on information security and privacy in healthcare, published in information systems journals as well as many other related disciplines including health informatics, public health, law, medicine, the trade press and industry reports. In this paper, we provide a holistic view of the recent research and suggest new areas of interest to the information systems community.

Standards for information security and processes in healthcare

PurposeRegardless of who or where we are and when we get sick, we expect healthcare to make us well and to handle us and our information with care and respect. Today, most healthcare institutions work separately, making the flow of patient information sub‐optimal and the use of common standards practically unheard of. The purpose of this paper is to emphasise the use for standards to improve information security in process‐oriented distributed healthcare.Design/methodology/approachThe paper introduces a real‐life case which is analysed to highlight how and where standards can and should be used in order to improve information security in process‐oriented distributed healthcare.FindingsIn total, 11 flaws or problems in information security and process‐orientation are identified. From these, six changes are suggested which address how information is handled, and how organizational routines should be standardized.Research limitations/implicationsThe case setting is Swedish healthcare, but problems can be shared across international borders. The purpose is to highlight the issues at hand.Practical implicationsIf suggested changes are implemented, healthcare processes will be more streamlined and focused on patients. Routines will be standardized and uncertainties thus removed in terms of how to act in certain situations.Originality/valueHealthcare and academia has yet to address both document and process issues concerning standardization in distributed healthcare. There are also few actual cases from a patient perspective. This paper provides lessons learned from a real‐life case, where results may impact how standardization is addressed in healthcare organizations.

Coding and consent: moral challenges of the database project in Iceland.

A major moral problem in relation to the deCODE genetics database project in Iceland is that the heavy emphasis placed on technical security of healthcare information has precluded discussion about the issue of consent for participation in the database. On the other hand, critics who have emphasised the issue of consent have most often demanded that informed consent for participation in research be obtained. While I think that individual consent is of major significance, I argue that this demand for informed consent is neither suitable nor desirable in this case. I distinguish between three aspects of the database and show that different types of consent are appropriate for each. In particular, I describe the idea of a written authorisation based on general information about the database as an alternative to informed consent and presumed consent in database research.

HIPAA Security Compliance from an Auditor's Perspective

The Health Insurance Portability and Accountability Act (HIPAA) of 1996, spearheaded by the U.S. Department of Health and Human Services, was originally established to ease the administrative and financial burdens on the healthcare industry. In addition, a specific subsection called Administrative Simplification addresses, among other things, the privacy and security of confidential patient healthcare information. The specific requirements are addressed in two separate, yet interdependent, rules: the HIPAA Privacy Rule and the HIPAA Security Rule. This article examines the interdependency between the Privacy Rule and the Security Rule, explores what the Security Rule is and is not about, and focuses on some key areas when performing HIPAA security audits. Before moving forward, certain key HIPAA terms must be defined: Protected health information (PHI): PHI is defined as any individually identifiable information created, received, or maintained in any form relating to past, present, or future physical or mental health condition, treatment, or payment of an individual. Covered entity: A covered entity is any healthcare entity that deals with PHI and must comply with the HIPAA Administrative Simplification regulations. This includes healthcare providers, health plans, and healthcare clearinghouses. Business associates: This term refers to any business associate who receives and performs a function or service using PHI for, or on behalf of, a covered entity. This includes accountants, auditors, attorneys, outside management, and financial services organizations, consultants, etc. It is the responsibility of covered entities to ensure that their business associates will protect the privacy and confidentiality of PHI.

HIPAA Compliance in the OR

Many current information management practices in the OR will have to change to comply with the Health Insurance Portability and Accountability Act and meet Joint Commission on Accreditation of Healthcare Organizations standards for managing health care information. Demands for accurate, timely, confidential, and secure data make an integrated automated system for information management imperative. Delivering health care in today's OR environment results in enormous amounts of data. Caregivers must transform this data into useable information, while protecting patient privacy, confidentiality, and the security of health care information.

Digital Signature Technology for Health Care Applications

The personal computer and the Internet have provided many useful services to both health care professionals and the general public. However, security remains a key factor that could limit their further growth potential. We reviewed and assessed the potential use of the cryptographic technique to resolve security issues. We also analyzed services available in the current market environment and determined their viability in supporting health care applications. While the cryptographic application has a great potential in protecting security of health care information transmitted over the Internet, a nationwide security infrastructure is needed to support deployment of the technology. Although desirable, it could be cost prohibitive to build a national system to be dedicated for the health care purpose. A hybrid approach that involves the government's development of a dedicated security infrastructure for health care providers and the use of commercial off-the-shelf products and services by the general public offers the most cost-effective and viable approach.

Towards a secure EPR: cultural and educational issues

The broader adoption of the EPR in healthcare settings has brought with it much greater attention to the significant issues regarding security, confidentiality and privacy of healthcare information. The economic, social and political impact of these issues is also of major concern. In this paper, it is suggested that the application of contemporary evolutionary game theory has high utility for understanding the actual behaviour of stakeholders in such settings. Contemporary evolutionary game theory can explain the effects of cultural norms, institutional policies and economics on behavior. I also suggest that contemporary evolutionary game theory is sufficiently robust as to be useful in the rational design of a policy to encourage certain socially desired behaviour in this area.