Securing a web-based EPR: An approach to secure a centralized EPR within a hospital

• Type: Article in International Conference Proceedings Book
• Date: 2004

Authors

ferreira, a (Author) FMUP; correia, r (Author) FMUP; costa-pereira, a (Author) FMUP

Conference proceedings International

Title: ICEIS 2004 - Proceedings of the Sixth International Conference on Enterprise Information Systems

Pages: 54-59

ICEIS 2004 - Proceedings of the Sixth International Conference on Enterprise Information Systems

Porto, 14 April 2004 through 17 April 2004

Indexing

ISI Web of Knowledge

Scopus - 8 Citations

Other information

Authenticus ID: P-008-1PA

Abstract (EN): The introduction of new technologies such as the EPR stresses the importance of healthcare information security. The Biostatistics and Medical Informatics Department of Porto's Faculty of Medicine is developing a centralized Electronic Patient Record at Hospital S. João, in Portugal, the HSJ.ICU. The main objective is to electronically integrate heterogeneous departmental information in a secure way, using Internet technology. The methodology used takes into consideration user-driven security issues in terms of confidentiality, integrity and availability of information. This was achieved using CEN/TC251 prestandards, Internet security protocols (e.g. TLS) and digital signature protocols. Having in mind the CIA (Confidentiality, Integrity and Availability) structure helps organizing and in a way, separating concepts that can be assessed in a more direct and efficient way. Security issues are already rooted and constitute a good basis for any enhancements that will be made in the future.

Language: English

Type (Professor's evaluation): Scientific