A privacy management architecture for patient-controlled personal health record system
A privacy management architecture for patient-controlled personal health record system
复制标题
DOI：
--
复制
发表时间：
2009-06
影响因子：
0.6
通讯作者：
Nurul Huda;N. Sonehara;S. Yamada
中科院分区：
文献类型：
--
作者：
Nurul Huda;N. Sonehara;S. Yamada
患者控制的个人健康记录系统可以使医疗保健更安全、更便宜、更方便，因为患者可以1)允许任何医疗服务提供者随时随地访问他们完整的个人健康记录，2)避免重复检查，3)透明地控制他们的隐私。在本文中，我们介绍了我们设计的具有隐私意识的患者控制的个人健康记录（PHR）系统的体系结构，通过该系统，患者可以查看她的综合健康史，并透明地与他人（例如医疗保健提供者）共享她的健康信息。访问特定患者的健康信息完全由该患者控制。考虑到不同类型的安全攻击，我们还对PHR系统架构进行了直观的安全和隐私分析。最后，我们描述了我们开发的一个反映日本社会特殊观点的PHR系统的原型实现。与其他现有系统相比，PHR系统最重要的优点是，PHR系统很可能在不丢失数据准确性的情况下提供完整的隐私保护。与传统的部分匿名的健康记录（例如，使用kanonymity或l-diversity）不同，PHR中的健康记录更接近于完全匿名，同时保持了数据的准确性。我们的方法使得攻击者不太可能从PHR系统中的匿名健康记录中识别出患者。
Patient-controlled personal health record system can help making health care safer, cheaper, and more convenient by facilitating patients to 1) grant any care provider to access their complete personal health records anytime from anywhere, 2) avoid repeated tests and 3) control their privacy transparently. In this paper, we present the architecture of our devised Privacy-aware Patient-controlled Personal Health Record (PHR) system through which a patient can view her integrated health history, and share her health information transparently with others (e.g., healthcare providers). Access to the health information of a particular patient is completely controlled by that patient. We also carry out intuitive security and privacy analysis of the PHR system architecture considering different types of security attacks. Finally, we describe a prototype implementation of PHR system that we developed reflecting the special view of Japanese society. The most important advantage of PHR system over other existing systems is that most likely PHR system provides complete privacy protection without losing data accuracy. Unlike traditional partially anonymized health records (e.g., using kanonymity or l-diversity), the health records in PHR are closer to completely anonymity, yet preserve data accuracy. Our approach makes it very unlikely patients could be identified by an attacker from their anonymous health records in PHR system.