eprintid: 1579
rev_number: 8
eprint_status: archive
userid: 31
dir: disk0/00/00/15/79
datestamp: 2013-05-02 12:39:11
lastmod: 2013-05-02 12:39:11
status_changed: 2013-05-02 12:39:11
type: book_section
metadata_visibility: show
creators_name: Masi, Massimiliano
creators_name: Pugliese, Rosario
creators_name: Tiezzi, Francesco
creators_id: 
creators_id: 
creators_id: francesco.tiezzi@imtlucca.it
title: A standard-driven communication protocol for disconnected clinics in rural areas
ispublished: pub
subjects: QA75
divisions: CSA
full_text_status: public
keywords: e-Health systems in developing countries, information se-
curity, healthcare technology standards, e-Health experiences
abstract: The importance of the Electronic Health Record (EHR), which stores all healthcare-related data belonging to a patient, has been recognized in recent years by governments, institutions, and industry. Initiatives like Integrating the Healthcare Enterprise (IHE) have been developed for the definition of standard methodologies for secure and interoperable EHR exchanges among clinics and hospitals. Using the requisites specified by these initiatives, many large-scale projects have been set up to enable healthcare professionals to handle patients' EHRs. Applications deployed in these settings are often considered safety-critical, thus ensuring such security properties as confidentiality, authentication, and authorization is crucial for their success. In this paper, we propose a communication protocol, based on the IHE specifications, for authenticating healthcare professionals and assuring patients' safety in settings where no network connection is available, such as in rural areas of some developing countries. We define a specific threat model, driven by the experience of use cases covered by international projects, and prove that an intruder cannot cause damages to the safety of patients and their data by performing any of the attacks falling within this threat model. To demonstrate the feasibility and effectiveness of our protocol, we have fully implemented it.
date: 2011
date_type: published
publisher: IEEE
pagerange: 304-311
id_number: 10.1109/HEALTH.2011.6026770
refereed: TRUE
isbn: 978-1-61284-696-5
book_title: Proceedings of 13th IEEE International Conference on e-Health Networking, Application Services (Healthcom)
official_url: http://ieeexplore.ieee.org/stamp/stamp.jsp?tp=&arnumber=6026770&isnumber=6026719
citation:   Masi, Massimiliano and Pugliese, Rosario and Tiezzi, Francesco  A standard-driven communication protocol for disconnected clinics in rural areas.   In:  Proceedings of 13th IEEE International Conference on e-Health Networking, Application Services (Healthcom).   IEEE, pp. 304-311.  ISBN 978-1-61284-696-5      (2011)  
document_url: http://eprints.imtlucca.it/1579/1/MPT_healthcom2011.pdf