Exploring a New Security Framework for Remote Patient Monitoring Devices
Exploring a New Security Framework for Remote Patient Monitoring Devices
复制标题
DOI：
10.3390/computers6010011
复制
发表时间：
2017-03-01
期刊：
影响因子：
2.8
通讯作者：
Mapp, Glenford
中科院分区：
文献类型：
--
作者：
Ondiege, Brian;Clarke, Malcolm;Mapp, Glenford
在医疗保健领域，安全一直是一个有争议的问题。对医疗保健的不熟悉和糟糕的安全实施使患者的数据容易受到攻击者的攻击。主要问题是评估我们如何在RPM基础设施中提供安全性。文献中的发现表明，关于适当实施安全措施的经验证据很少。因此，迫切需要解决医疗器械的网络安全问题。通过回顾远程患者监护和微软威胁建模工具的相关文献，我们识别和探讨了IEEE 11073标准设备中当前的漏洞和威胁，提出了一种新的远程患者监护设备的安全框架。此外，当前的RPM设备对可以共享一台设备的人数有限制，因此，我们建议在多用户环境中的远程患者监护(RPM)设备中使用NFC进行身份识别，以减少与不正确的用户身份识别相关的错误。最后，我们展示了如何使用几种技术来构建所建议的框架。
Security has been an issue of contention in healthcare. The lack of familiarity and poor implementation of security in healthcare leave the patients' data vulnerable to attackers. The main issue is assessing how we can provide security in an RPM infrastructure. The findings in literature show there is little empirical evidence on proper implementation of security. Therefore, there is an urgent need in addressing cybersecurity issues in medical devices. Through the review of relevant literature in remote patient monitoring and use of a Microsoft threat modelling tool, we identify and explore current vulnerabilities and threats in IEEE 11073 standard devices to propose a new security framework for remote patient monitoring devices. Additionally, current RPM devices have a limitation on the number of people who can share a single device, therefore, we propose the use of NFC for identification in Remote Patient Monitoring (RPM) devices for multi-user environments where we have multiple people sharing a single device to reduce errors associated with incorrect user identification. We finally show how several techniques have been used to build the proposed framework.