an architecture for enhanced assurance in e-health systems

《an architecture for enhanced assurance in e-health systems》由会员上传分享，免费在线阅读，更多相关内容在工程资料-天天文库。

1、ANARCHITECTUREFORENHANCEDASSURANCEINE-HEALTHSYSTEMSYin-MiaoVickyLiuBachelorofBusinessComputing,QUT1993MasterofInformationTechnology(Research),QUT2005InformationSecurityInstituteFacultyofScienceandTechnologyQueenslandUniversityofTechnologyAthesissubmittedtotheQuee

2、nslandUniversityofTechnologyinaccordancewiththeregulationsforDegreeofDoctorofPhilosophyMay2011DeclarationTheworkcontainedinthisthesishasnotbeensubmittedforadegreeordiplomaatanyotherhighereducationinstitution.Tothebestofmyknowledgeandbelief,thisthesiscontainsnomat

3、erialpreviouslypublishedorwrittenbyanotherpersonexceptwhereduereferenceismade.Signature:Date:iAbstractNotwithstandingtheobviouspotentialadvantagesofinformationandcommunicationstechnology(ICT)intheenhancedprovisionofhealthcareservices,therearesomeconcernsassociate

4、dwithintegrationofandaccesstoelectronichealthrecords.Asecurityviolationinhealthrecords,suchasanunauthoriseddisclosureorunauthorisedalterationofanindividual‘shealthinformation,cansignificantlyunderminebothhealthcareproviders‘andconsumers‘confidenceandtrustine-heal

5、thsystems.Acrisisinconfidenceinanynationallevele-healthsystemcouldseriouslydegradetherealisationofthesystem‘spotentialbenefits.Inresponsetotheprivacyandsecurityrequirementsfortheprotectionofhealthinformation,thisresearchprojectinvestigatednationalandinternational

6、e-healthdevelopmentactivitiestoidentifythenecessaryrequirementsforthecreationofatrustedhealthinformationsystemarchitectureconsistentwithlegislativeandregulatoryrequirementsandrelevanthealthinformaticsstandards.Theresearchexaminedtheappropriatenessandsustainabilit

7、yofthecurrentapproachesfortheprotectionofhealthinformation.Itthenproposedanarchitecturetofacilitatetheviableandsustainableenforcementofprivacyandsecurityinhealthinformationsystemsundertheprojecttitle―OpenandTrustedHealthInformationSystems(OTHIS)‖.OTHISaddressesne

8、cessarysecuritycontrolstoprotectsensitivehealthinformationwhensuchdataisatrest,duringprocessingandintransitwiththreeseparateandachievablesecurityfunction-based