CT-ISG: Improving Security and Privacy in Pervasive Healthcare

CT-ISG：提高普及医疗保健的安全性和隐私性

• 批准号: 0831244
• 负责人: Kevin Fu
• 金额: $ 44.97万
• 依托单位: University of Massachusetts Amherst
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2008
• 资助国家: 美国
• 起止时间: 2008-09-01 至 2012-08-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=0831244&HistoricalAwards=false
• 关键词: CT; ISG; Improving; Security; Privacy

ABSTRACT:This research project advances the understanding of security and privacy in pervasive healthcare by testing technological methods of securing implantable medical devices and by evaluating human factors through patient studies. The most fundamental question is how to balance the opposing goals of safety and effectiveness with security and privacy of wireless, implantable medical devices. Future pervasive healthcare devices --- including prescription-based devices like pacemakers, drug pumps, and neurostimulators --- will not only contain long-range wireless capabilities, but will have sophisticated processors and the ability to interact with other devices on the person or in the person's environment. These innovations could vastly improve healthcare, but also introduce unique security and privacy risks not well understood from the perspectives of cyber security, medicine, public policy, and society. A primary challenge is understanding how to overcome the fundamental tension between security and privacy and traditional goals of safety and effectiveness. A second challenge is learning how to design usable, intuitive security mechanisms that patients and doctors will accept and understand. Approaches include novel, zero-power security mechanisms that do not drain the healthcare device's battery, and surveys of patients and other users of pervasive healthcare technologies to learn about patient perceptions and expectations. Blending computer science with healthcare, the project prepares computer science students for interdisciplinary security research via both research and coursework. Further demonstrating broader impact, the project reaches out to under-represented minorities and women in computing at community colleges in Western Massachusetts.

摘要：这项研究项目通过测试确保植入式医疗设备安全的技术方法，并通过患者研究评估人的因素，促进了对普遍医疗保健中安全和隐私的理解。最根本的问题是如何在安全和有效性的对立目标与无线植入式医疗设备的安全和隐私之间取得平衡。未来的无处不在的医疗设备-包括起搏器、药泵和神经刺激器等基于处方的设备--不仅包含远程无线功能，还将拥有复杂的处理器，并能够与人身上或人的环境中的其他设备互动。这些创新可以极大地改善医疗保健，但也会带来独特的安全和隐私风险，从网络安全、医学、公共政策和社会的角度来看，这些风险没有得到很好的理解。一个主要的挑战是理解如何克服安全和隐私与安全和有效性的传统目标之间的根本紧张关系。第二个挑战是学习如何设计患者和医生都能接受和理解的可用的、直观的安全机制。方法包括新颖的零功率安全机制，不会耗尽医疗设备的电池，以及对患者和其他普及医疗技术用户的调查，以了解患者的看法和期望。该项目将计算机科学与医疗保健相结合，通过研究和课程作业为计算机科学专业的学生进行跨学科的安全研究做好准备。该项目进一步展示了更广泛的影响，覆盖了马萨诸塞州西部社区大学计算机专业的少数族裔和女性。