C-PHIS: A Concept Map-Based Knowledge Base Framework to Develop Personal Health Information Systems

The information maintained by Health Information Systems (HIS) is often faced with security threats from a wide range of sources. Some government's regulations require healthcare organizations and custodians of personal health information to take practical steps to address the security and privacy needs of personal health information. Standards help to ensure an adequate level of security is attained, resources are used efficiently and the best security practices are adopted. In this paper, the authors survey security standards applicable to healthcare industry including Control OBjective for Information and related Technology (COBIT), ISO/IEC 27002:2005, ISO/IEC 27001:2005, NIST Special Publication 800-53, ISO 27799:2008, HITRUST Common Security Framework (CSF), ISO 17090:2008, ISO/TS 25237:2008, etc. This survey informs the audience currently available standards that can guide the implementation of information security programs in healthcare organizations, and provides a starting point for IT management in healthcare organizations to select a standard suitable for their organizations.

Download Full-text

Health Information Systems in the Digital Health Ecosystem—Problems and Solutions for Ethics, Trust and Privacy

International Journal of Environmental Research and Public Health ◽

10.3390/ijerph17093006 ◽

2020 ◽

Vol 17 (9) ◽

pp. 3006

Author(s):

Pekka Ruotsalainen ◽

Bernd Blobel

Keyword(s):

Information Systems ◽

Intellectual Property ◽

Health Information ◽

Digital Health ◽

Health Information Systems ◽

Personal Health Information ◽

Intellectual Property Right ◽

Ethical Principles ◽

Computational Trust ◽

Trust Models

Digital health information systems (DHIS) are increasingly members of ecosystems, collecting, using and sharing a huge amount of personal health information (PHI), frequently without control and authorization through the data subject. From the data subject’s perspective, there is frequently no guarantee and therefore no trust that PHI is processed ethically in Digital Health Ecosystems. This results in new ethical, privacy and trust challenges to be solved. The authors’ objective is to find a combination of ethical principles, privacy and trust models, together enabling design, implementation of DHIS acting ethically, being trustworthy, and supporting the user’s privacy needs. Research published in journals, conference proceedings, and standards documents is analyzed from the viewpoint of ethics, privacy and trust. In that context, systems theory and systems engineering approaches together with heuristic analysis are deployed. The ethical model proposed is a combination of consequentialism, professional medical ethics and utilitarianism. Privacy enforcement can be facilitated by defining it as health information specific contextual intellectual property right, where a service user can express their own privacy needs using computer-understandable policies. Thereby, privacy as a dynamic, indeterminate concept, and computational trust, deploys linguistic values and fuzzy mathematics. The proposed solution, combining ethical principles, privacy as intellectual property and computational trust models, shows a new way to achieve ethically acceptable, trustworthy and privacy-enabling DHIS and Digital Health Ecosystems.

Download Full-text

Privacy and Security: Are Your Health Information Systems up to Standard?

Health Information Management ◽

10.1177/183335839702600409 ◽

1996 ◽

Vol 26 (4) ◽

pp. 197-201 ◽

Cited By ~ 1

Author(s):

Tina Magennis ◽

Jennifer Mitchell

Keyword(s):

Health Care ◽

Information Systems ◽

Health Information ◽

Health Information Systems ◽

Health Data ◽

Human Behaviour ◽

Personal Health ◽

Privacy And Security ◽

Patient Health ◽

Privacy And Confidentiality

As electronic patient health information systems become more fully developed and widespread, there are persistent concerns about the privacy and confidentiality of the personal health data being stored and disseminated. Standards Australia has released two Standards which provide useful guidelines for the organisational, technological and human behaviour solutions required to protect privacy and confidentiality in health care organisations. The major requirements of these Standards are outlined and the implications of the Standards for health information managers are discussed.

Download Full-text

Cloud Data Privacy Preserving Model for Health Information Systems Based on Multi Factor Authentication

International Journal of Recent Technology and Engineering - 2 ◽

10.35940/ijrte.c4458.099320 ◽

2020 ◽

Vol 9 (3) ◽

pp. 360-367

Keyword(s):

Cloud Computing ◽

Information Systems ◽

Health Information ◽

Data Privacy ◽

Clinical Information System ◽

Health Information Systems ◽

Healthcare Services ◽

Cost Utility ◽

Personal Health Information ◽

Patient Side

With cloud computing (CC) becoming popular in recent years, variety of institutions, organizations, businesses and individual users are creating interest. They are adopting the technology in order to take advantage of shared web applications, low infrastructure cost, utility and distributed computing, cluster computing as well as reliable IT architecture. In the area of health, Cloud Health Information Systems (CHIS) play a key role not only on the healthcare businesses but patients as well. On the patient side, CHIS aid in sharing of medical data and health information, timely access of critical patient information and coordination of clinical services. Patients, who continue to demand for instantaneous and quality healthcare services are now able to access the services from experts even when they are not necessarily in the same physical location. This is being aided by proliferation of telemedicine through hosted cloud architecture. From the business perspective, CC has helped to cut down operational expenses by way of cost-effective clinical information system infrastructure through the implementation of a distributed platform. The platform has therefore saved businesses millions of dollars that would have gone to infrastructural and human resource investment. Even with these immense opportunities, cloud computing uptake has been serious inhibited by the privacy and security concerns. Due to the sensitivity of personal health information, businesses and individuals are apprehensive when it comes to adopting the technology or releasing the data to the cloud. This study is a results discussion of an enhanced model for attainment of data privacy on the cloud through use of multi factor authentication.

Download Full-text

Health Information Systems New Shifts and Emerging Trends in Health IT Infrastructures

Yearbook of Medical Informatics ◽

10.1055/s-0038-1638641 ◽

2009 ◽

Vol 18 (01) ◽

pp. 71-74

Author(s):

C. Bréant ◽

Keyword(s):

Information Systems ◽

Health Information ◽

Information Management ◽

Health Information Systems ◽

It Outsourcing ◽

Personal Health ◽

Health It ◽

Health Records ◽

Wireless Monitoring ◽

Emerging Trends

Summary Objectives Summarize excellent current research in the field of Health Information Systems. Method Synopsis of the articles selected for the IMIA Yearbook 2009. ResultsFive papers from international peer reviewed journals have been selected for the section on health information systems. They concentrate on topics such as personal health records, the comparison of IT infrastructures in hospitals from different countries, hospital to hospital IT outsourcing partnership, and the wireless monitoring of patients. Conclusions The elected articles highlight the new shifts in health information management and challenges faced by hospitals regarding IT infrastructures.

Download Full-text