TC: Large:Self Protecting Electronic Medical Records

电子病历(EMR)的潜在好处是史无前例的，包括实验室测试、图像、诊断、处方和病历。患者和保险公司可以避免重复研究，例如，让人们暴露在额外的辐射中，并招致不必要的费用。提供者可以立即访问患者历史记录，患者可以获得他们的医疗记录的所有权，从而有可能获得更大的隐私，并在需要时更好地访问他们的记录。然而，尽管EMR的承诺很多，但从纸质系统转向电子系统并不是没有风险。例如，对于攻击者来说，将装有8000份患者记录的U盘偷偷溜出医院(或数据中心)要比带着同等的纸质记录容易得多。将电子记录转移到网上使它们特别容易受到基于互联网的攻击。随着攻击变得越来越复杂，这些威胁变得越来越严重。该项目将侧重于开发新的安全技术，通过利用新的加密技术和建立一个试验系统来部署安全的急救人员，并在一家大型医院内部署。试点将能够在包括不受信任的外包数据库和移动设备在内的分布式环境中存储受保护的记录。患者将能够与公共医疗记录(PHR)系统交互，如Google Health和Microsoft Health Vault或其他云服务。该项目包括开发能够支持该模型和算法的独特要求的密钥管理方案，包括审计、密钥撤销和叛逆者追踪。

The potential benefits from electronic medical records (EMRs), including lab tests, images, diagnoses, prescriptions, and medical histories are without precedent. Patients and insurers can avoid repeating studies that, for example, expose people to additional radiation and incur unnecessary costs. Providers can instantly access patient histories , and patients can take ownership of their medical records, with the potential for greater privacy, and better access to their records when they are needed. However, while the promises of EMRs are many, moving from paper-based systems to electronic ones is not without risk. For example, it is a lot easier for an attacker to sneak out of a hospital (or data center) with a USB stick in their pocket containing 8,000 patient records, than with the equivalent paper records. Moving electronic records online makes them particularly vulnerable to Internet-based attacks. These threats are getting worse, as attacks grow in sophistication. This project will focus on developing new security technologies to enable deployment of secure EMRs by utilizing new cryptographic techniques and building a pilot system to deploy within a major hospital. The pilot will enable storage of protected records across a distributed environment that includes untrusted outsourced databases and mobile devices. Patients will be able to interface with Public Healthcare Record (PHR) systems such as Google Health and Microsoft Health Vault or other cloud services. The project includes developing a key management scheme that is able to support the unique requirements of this model and algorithms, including auditing, key revocation, and traitor tracing.