Designing Privacy-Aware Personal Health Record Systems

Authors:
Reza Samavi;Thodoros Topaloglou
Affiliations:
University of Toronto, Toronto, Canada M5S3G8;University of Toronto, Toronto, Canada M5S3G8
Venue:
ER '08 Proceedings of the ER 2008 Workshops (CMLSA, ECDM, FP-UML, M2AS, RIGiM, SeCoGIS, WISM) on Advances in Conceptual Modeling: Challenges and Opportunities
Year:
2008

Citing 7
Cited 2

A Privacy Policy Model for Enterprises

CSFW '02 Proceedings of the 15th IEEE workshop on Computer Security Foundations
Towards Modeling and Reasoning Support for Early-Phase Requirements Engineering

RE '97 Proceedings of the 3rd IEEE International Symposium on Requirements Engineering
Goal-Oriented Requirements Engineering: A Guided Tour

RE '01 Proceedings of the Fifth IEEE International Symposium on Requirements Engineering
Tropos: An Agent-Oriented Software Development Methodology

Autonomous Agents and Multi-Agent Systems
Designing information systems in social context: a goal and scenario modelling approach

Information Systems - Special issue: The 14th international conference on advanced information systems engineering (CAiSE*02)
Modeling Security Requirements Through Ownership, Permission and Delegation

RE '05 Proceedings of the 13th IEEE International Conference on Requirements Engineering
Security and trust requirements engineering

Foundations of Security Analysis and Design III

Social Modeling and i*

Conceptual Modeling: Foundations and Applications
A privacy framework for the personal web

The Personal Web

Quantified Score

Hi-index	0.00

Visualization

Abstract

Implementation of Personal Health Record (PHR) systems involves multiple stakeholders with different interpretations and expectations; more importantly it involves changes in the custody of data, patient privacy, and consent management. In PHR analysis we need to answer questions such as: Who is the provider of PHR? Who has access to the patient data and why? And how the system can empower the patient? And how can the patient privacy be managed. This paper exploits techniques from Goal and Agent-oriented Requirements Engineering and proposes a methodological framework for dealing with concerns surrounding PHR systems. The framework is illustrated through an example that emphasizes the privacy aspects of PHRs.