Towards accountability for electronic patient records

Authors:
Ana Ferreira;Simon Shiu;Adrian Baldwin
Affiliations:
Trusted Systems Laboratory, HP Labs Bristol, UK;Trusted Systems Laboratory, HP Labs Bristol, UK;Trusted Systems Laboratory, HP Labs Bristol, UK
Venue:
CBMS'03 Proceedings of the 16th IEEE conference on Computer-based medical systems
Year:
2003

Citing 2
Cited 2

Encryption and Key management in a SAN

SISW '02 Proceedings of the First International IEEE Security in Storage Workshop
Practical server privacy with secure coprocessors

IBM Systems Journal - End-to-end security

Accountability in organisations

International Journal of Information and Computer Security
Temporal accountability and anonymity in medical sensor networks

Mobile Networks and Applications - Special issue on Wireless and Personal Communications

Quantified Score

Hi-index	0.00

Visualization

Abstract

The Electronic Patient Record (EPR) is a fundamental part of health information technology and its use is growing quickly. There is an urgent need to record and trust events related with healthcare procedures. Accountability is, therefore, essential but still very difficult to achieve in terms of information security. This paper suggests an accountability model suitable for healthcare environments and describes how the model can be efficiently realized using secure hardware. This approach can be applied across heterogeneous infrastructures providing a separation of duties between people, processes and organizations whilst ensuring the confidentiality and integrity of information.