Towards developing a secure medical image sharing system based on zero trust principles and blockchain technology.
Towards developing a secure medical image sharing system based on zero trust principles and blockchain technology.
复制标题
DOI：
10.1186/s12911-020-01275-y
复制
发表时间：
2020-10-07
影响因子：
3.5
通讯作者：
Islam MN
中科院分区：
文献类型：
--
作者：
Sultana M;Hossain A;Laila F;Taher KA;Islam MN
自从电子健康系统中的数据共享开始以来，数据安全一直是研究和讨论的关键话题。虽然数据数字化提高了效率和速度，但也使数据容易受到网络攻击。尤其是医疗记录，似乎是黑客经常攻击的对象。历史上发生的几起数据泄露事件证明了针对这些威胁的安全措施的发明是合理的。虽然存在各种安全程序，如防火墙、虚拟专用网络、加密等，但为了最大限度地保护医学图像和数据共享，需要使用这些方法的组合。区块链相对较新，已成为保护敏感信息的有效工具。然而，为了确保对医学数据(图像)的全面保护，必须在医学图像的每一步、从开始、在传输过程中甚至在传输之后采取安全措施，这是由零信任安全模型确保的。在本研究中，针对这两个概念进行了大量的研究，并将这两个概念结合起来，提出了一个分散的、不可信的框架来保护医疗数据和图像的传输和存储。研究结果显示，区块链技术通过维护每笔交易的审计跟踪来确保数据完整性，而零信任原则确保医疗数据被加密，只有经过身份验证的用户和设备才与网络交互。因此，提出的模型解决了许多与数据安全相关的漏洞。已经提出了一个应对医疗/健康数据漏洞的系统。该系统利用了区块链的不变性、零信任原则的额外安全性以及使用星际文件系统(IPFS)的离链数据存储的可扩展性。该系统的采用有利于提高医疗或健康数据传输的安全性。
Data security has been a critical topic of research and discussion since the onset of data sharing in e-health systems. Although digitalization of data has increased efficiency and speed, it has also made data vulnerable to cyber attacks. Medical records in particular seem to be the regular victims of hackers. Several data breach incidents throughout history have warranted the invention of security measures against these threats. Although various security procedures like firewalls, virtual private networks, encryption, etc are present, a mix of these approaches are required for maximum security in medical image and data sharing. Relatively new, blockchain has become an effective tool for safeguarding sensitive information. However, to ensure overall protection of medical data (images), security measures have to be taken at each step, from the beginning, during and even after transmission of medical images which is ensured by zero trust security model. In this research, a number of studies that deal with these two concepts were studied and a decentralized and trustless framework was proposed by combining these two concepts for secured medical data and image transfer and storage. Research output suggested blockchain technology ensures data integrity by maintaining an audit trail of every transaction while zero trust principles make sure the medical data is encrypted and only authenticated users and devices interact with the network. Thus the proposed model solves a lot of vulnerabilities related to data security. A system to combat medical/health data vulnerabilities has been proposed. The system makes use of the immutability of blockchain, the additional security of zero trust principles, and the scalability of off chain data storage using Inter Planetary File Systems (IPFS). The adoption of this system suggests to enhance the security of medical or health data transmission.
登录
查看更多内容
DOI：
10.1093/jamia/ocx068
发表时间：
2017-11-01
期刊：
Journal of the American Medical Informatics Association : JAMIA
影响因子：
--
作者：
Kuo TT;Kim HE;Ohno-Machado L
通讯作者：
Ohno-Machado L
影响因子：
3.9
作者：
Dwivedi, Ashutosh Dhar;Srivastava, Gautam;Singh, Rajani
通讯作者：
Singh, Rajani
影响因子：
9.9
作者：
Jung, B;Han, I;Lee, S
通讯作者：
Lee, S
影响因子：
1.8
作者：
Engelhardt, Mark A.
通讯作者：
Engelhardt, Mark A.
影响因子：
5.6
作者：
Hatfield, Joseph M.
通讯作者：
Hatfield, Joseph M.