Logo eprints

A standard-driven communication protocol for disconnected clinics in rural areas

Masi, Massimiliano and Pugliese, Rosario and Tiezzi, Francesco A standard-driven communication protocol for disconnected clinics in rural areas. In: Proceedings of 13th IEEE International Conference on e-Health Networking, Application Services (Healthcom). IEEE, pp. 304-311. ISBN 978-1-61284-696-5 (2011)

Download (820kB) | Preview


The importance of the Electronic Health Record (EHR), which stores all healthcare-related data belonging to a patient, has been recognized in recent years by governments, institutions, and industry. Initiatives like Integrating the Healthcare Enterprise (IHE) have been developed for the definition of standard methodologies for secure and interoperable EHR exchanges among clinics and hospitals. Using the requisites specified by these initiatives, many large-scale projects have been set up to enable healthcare professionals to handle patients' EHRs. Applications deployed in these settings are often considered safety-critical, thus ensuring such security properties as confidentiality, authentication, and authorization is crucial for their success. In this paper, we propose a communication protocol, based on the IHE specifications, for authenticating healthcare professionals and assuring patients' safety in settings where no network connection is available, such as in rural areas of some developing countries. We define a specific threat model, driven by the experience of use cases covered by international projects, and prove that an intruder cannot cause damages to the safety of patients and their data by performing any of the attacks falling within this threat model. To demonstrate the feasibility and effectiveness of our protocol, we have fully implemented it.

Item Type: Book Section
Identification Number: 10.1109/HEALTH.2011.6026770
Uncontrolled Keywords: e-Health systems in developing countries, information se- curity, healthcare technology standards, e-Health experiences
Subjects: Q Science > QA Mathematics > QA75 Electronic computers. Computer science
Research Area: Computer Science and Applications
Depositing User: Users 31 not found.
Date Deposited: 02 May 2013 12:39
Last Modified: 02 May 2013 12:39
URI: http://eprints.imtlucca.it/id/eprint/1579

Actions (login required)

Edit Item Edit Item