Information security of patient-centred services utilising the german nationwide health information technology infrastructure

Authors:
Tobias Dehling;Ali Sunyaev
Affiliations:
Economics and Social Sciences, University of Cologne, Germany;Economics and Social Sciences, University of Cologne, Germany
Venue:
HealthSec'12 Proceedings of the 3rd USENIX conference on Health Security and Privacy
Year:
2012

Citing 9
Cited 0

A Client-Transparent Approach to Defend Against Denial of Service Attacks

SRDS '06 Proceedings of the 25th IEEE Symposium on Reliable Distributed Systems
The Impact of Automation of Systems on Medical Errors: Evidence from Field Research

Information Systems Research
Managing Emerging Infectious Diseases with Information Systems: Reconceptualizing Outbreak Management Through the Lens of Loose Coupling

Information Systems Research
Better medicine through machine learning

Communications of the ACM
The state of phishing attacks

Communications of the ACM
Supporting chronic disease care quality: Design and implementation of a health service and its integration with electronic health records

Journal of Data and Information Quality (JDIQ)
Defending against Cross-Site Scripting Attacks

Computer
SP 800-27 Rev. A. Engineering Principles for Information Technology Security (A Baseline for Achieving Security), Revision A

SP 800-27 Rev. A. Engineering Principles for Information Technology Security (A Baseline for Achieving Security), Revision A
Defending against Web Application Vulnerabilities

Computer

Quantified Score

Hi-index	0.00

Visualization

Abstract

Health information technology can have positive impacts on healthcare delivery and is utilised for various applications. Patient-centred services are a special kind of health information technology and are designed to cater to patients' needs. They manage personal medical information and utilise such information to offer personalised, advantageous services as well as information for patients. Due to the sensitivity of medical information and the gravity of possible consequences, if medical information falls into the wrong hands, patient-centred services need to employ security measures to ensure the privacy of patients. The German Nationwide Health Information Technology Infrastructure (HTI), which is currently being established, could serve as a fit and proper foundation for securely offering patient-centred services. In this paper, we illustrate the past developments and current status of the HTI introduction with a focus on security aspects related to patient-centred services. We depict how security features of the HTI can be applied to improve secure provision of patient-centred services. Furthermore, we present additional security measures that should be implemented by providers of patient-centred services.