CT-ISG: Improving Security and Privacy in Pervasive Healthcare

摘要：该研究项目通过测试保护植入式医疗器械的技术方法和通过患者研究评估人为因素，促进了对普及医疗保健中安全性和隐私性的理解。 最根本的问题是如何平衡安全性和有效性与无线植入式医疗设备的安全性和隐私性的对立目标。 未来普及的医疗设备--包括基于处方的设备，如心脏起搏器，药物泵和神经刺激器--不仅包含远程无线功能，而且将具有复杂的处理器以及与人身上或人的环境中的其他设备交互的能力。 这些创新可以极大地改善医疗保健，但也会带来独特的安全和隐私风险，这些风险从网络安全、医学、公共政策和社会的角度来看还没有得到很好的理解。 一个主要的挑战是了解如何克服安全和隐私与安全和有效性的传统目标之间的根本紧张关系。 第二个挑战是学习如何设计患者和医生都能接受和理解的可用、直观的安全机制。 方法包括不消耗医疗设备电池的新颖的零功率安全机制，以及对患者和普及医疗技术的其他用户进行调查以了解患者的看法和期望。 该项目将计算机科学与医疗保健相结合，为计算机科学专业的学生通过研究和课程进行跨学科的安全研究做好准备。 该项目进一步展示了更广泛的影响，它接触到了马萨诸塞州西部社区学院中在计算方面代表性不足的少数民族和妇女。

ABSTRACT:This research project advances the understanding of security and privacy in pervasive healthcare by testing technological methods of securing implantable medical devices and by evaluating human factors through patient studies. The most fundamental question is how to balance the opposing goals of safety and effectiveness with security and privacy of wireless, implantable medical devices. Future pervasive healthcare devices --- including prescription-based devices like pacemakers, drug pumps, and neurostimulators --- will not only contain long-range wireless capabilities, but will have sophisticated processors and the ability to interact with other devices on the person or in the person's environment. These innovations could vastly improve healthcare, but also introduce unique security and privacy risks not well understood from the perspectives of cyber security, medicine, public policy, and society. A primary challenge is understanding how to overcome the fundamental tension between security and privacy and traditional goals of safety and effectiveness. A second challenge is learning how to design usable, intuitive security mechanisms that patients and doctors will accept and understand. Approaches include novel, zero-power security mechanisms that do not drain the healthcare device's battery, and surveys of patients and other users of pervasive healthcare technologies to learn about patient perceptions and expectations. Blending computer science with healthcare, the project prepares computer science students for interdisciplinary security research via both research and coursework. Further demonstrating broader impact, the project reaches out to under-represented minorities and women in computing at community colleges in Western Massachusetts.