TC: Large:Self Protecting Electronic Medical Records

电子医疗记录（emr）的潜在好处，包括实验室测试、图像、诊断、处方和病史，是前所未有的。患者和保险公司可以避免重复研究，例如，使人们暴露在额外的辐射中并产生不必要的费用。提供者可以立即访问患者的病史，患者可以拥有自己的医疗记录，这可能会提高隐私性，并在需要时更好地访问他们的记录。然而，尽管电子病历有很多承诺，但从纸质系统转向电子系统并非没有风险。例如，对于攻击者来说，从医院（或数据中心）溜出去时，口袋里装着一个包含8000个病人记录的u盘要比带着同等数量的纸质记录容易得多。将电子记录转移到网上使它们特别容易受到基于互联网的攻击。随着攻击变得越来越复杂，这些威胁变得越来越严重。该项目将重点开发新的安全技术，通过利用新的加密技术和建立一个试点系统在大型医院内部署，实现安全电子病历的部署。该试点项目将允许在分布式环境中存储受保护的记录，包括不可信的外包数据库和移动设备。患者将能够与谷歌Health和Microsoft Health Vault等公共医疗记录（PHR）系统或其他云服务进行交互。该项目包括开发一个密钥管理方案，该方案能够支持该模型和算法的独特需求，包括审计、密钥撤销和叛逆者跟踪。

The potential benefits from electronic medical records (EMRs), including lab tests, images, diagnoses, prescriptions, and medical histories are without precedent. Patients and insurers can avoid repeating studies that, for example, expose people to additional radiation and incur unnecessary costs. Providers can instantly access patient histories , and patients can take ownership of their medical records, with the potential for greater privacy, and better access to their records when they are needed. However, while the promises of EMRs are many, moving from paper-based systems to electronic ones is not without risk. For example, it is a lot easier for an attacker to sneak out of a hospital (or data center) with a USB stick in their pocket containing 8,000 patient records, than with the equivalent paper records. Moving electronic records online makes them particularly vulnerable to Internet-based attacks. These threats are getting worse, as attacks grow in sophistication. This project will focus on developing new security technologies to enable deployment of secure EMRs by utilizing new cryptographic techniques and building a pilot system to deploy within a major hospital. The pilot will enable storage of protected records across a distributed environment that includes untrusted outsourced databases and mobile devices. Patients will be able to interface with Public Healthcare Record (PHR) systems such as Google Health and Microsoft Health Vault or other cloud services. The project includes developing a key management scheme that is able to support the unique requirements of this model and algorithms, including auditing, key revocation, and traitor tracing.