City Research Online

Abstract

Patient Health Records (PHRs) shift the ownership of health data from health providers to patients. Such a shift poses important challenges from the data privacy point of view. Patients would like to be able to selectively reveal information to other stakeholders and, at the same time, be assured that their health information will not be used improperly once shared. Current PHR systems partially fail to satisfy these requirements. In this paper, we show that both requirements can be satisfied fully when adopting a novel cloud-based PHR system architecture.We expain the role of remote virtual machines in this architecture and use interaction models to reason about privacy implications. Finally, we evaluate MyPHRMachines, a prototypical implementation of the architecture: we demonstrate that the system enables the execution of third party genome analysis services on patientowned genome data while ensuring that (1) such services cannot maliciously store this data and (2) patients can show the analysis results to experts without sharing along their full genome.

Publication Type:	Conference or Workshop Item (Paper)
Additional Information:	© 2012 IEEE. Personal use of this material is permitted. Permission from IEEE must be obtained for all other uses, in any current or future media, including reprinting/republishing this material for advertising or promotional purposes, creating new collective works, for resale or redistribution to servers or lists, or reuse of any copyrighted component of this work in other works.
Publisher Keywords:	Patient Health Record, Privacy, Security, Cloud Computing
Subjects:	Q Science > QA Mathematics > QA75 Electronic computers. Computer science R Medicine > RA Public aspects of medicine T Technology > T Technology (General)
Departments:	School of Science & Technology > Computer Science

Export

Downloads