Research on User Privacy Protection Mechanisms and Value-Added Data Security Model for Cloud Telecare Medical Information System

View Statistics Email Alert RSS Feed

Information

Details

Project title

Code/計畫編號

MOST103-2221-E019-001

Translated Name/計畫中文名

雲端醫療照護系統的使用者隱私保護機制與資料安全加值模型之研究

Project Coordinator/計畫主持人

Han-Yu Lin

Department/Unit

Department of Computer Science and Engineering

Website

https://www.grb.gov.tw/search/planDetail?id=8362763

Year

2014

Start date/計畫起

01-08-2014

Expected Completion/計畫迄

31-07-2015

Bugetid/研究經費

484千元

ResearchField/研究領域

資訊科學--軟體

隨著國人平均壽命增加，台灣逐漸邁向高齡化的社會，不僅增加各項醫療與家庭照護的社會成本，對國家的整體發展及資源分配應用更是影響甚鉅。面對高齡化社會的來臨，唯有提供更完善的醫療與照護整合資訊服務，才能減少社會成本的支出並提高國人的生活品質。目前仍有許多地區醫療院所仍停留在紙本書寫的形式，因此很難與其他相關機構作有效的整合，同時也會造成病患只要到一家新的醫療院所看病，就必須再次登錄或填寫個人資訊。其次，病歷資料如果沒有經過安全的控管、加密和存放，很容易遭受有心人士竊取利用，或者因為沒有適當的備份而遺失所有檔案。如何透過現代化的科技建立電子醫療紀錄，結合處方、消費者健康資訊、健康保健系統等，以便於使用和降低各項成本，是世界各國目前重要的發展趨勢。雲端化的醫療照護服務可以讓病人享有更即時、更快速的服務品質。對醫療院所而言，可以利用雲端架構虛擬化的特性將伺服器等硬體外包給雲端供應商，進而節省相關的建置成本，與省卻管理上的人力及負擔。此外，透過資料安全加值模型與雲端系統之建置，可以讓民眾隨時取得健康相關資料，並可透過雲端技術與其他機關進行資料交換，進而創造出更多的加值服務。然而，隨著雲端化改善了這些醫療照護服務的可用性，電子醫療紀錄轉移到雲端上也會帶來額外的安全性風險，如使用者醫療隱私的保護。欲同時維護雲端服務的品質並保障使用者隱私的前提下，對於不同機密程度的使用者病歷資料則應採取不同的處理程序。在本研究計劃中，我們考量上述的醫療使用者隱私保護需求，完成了雲端醫療照護系統的使用者隱私保護機制與資料安全加值模型研究之分析、設計及系統建置。我們應用動態身分識別於e-Health伺服器身分認證程序，以降低通訊過程中資訊洩漏的風險。此外，我們實作Speed、Hybrid、Security三種不同安全層級的資料隱私保護機制，以提供系統功能操作時的彈性。病人亦可以自行授權其特定病歷檔案開放加值型應用服務功能，供第三方的研究人員取得。不同機密檔案存放於本系統之容錯能力則由後端的雲端儲存備份系統提供。以上對於發展及強化雲端醫療照護服務之使用者隱私保護皆有實質之幫助。 With the increasing life expectancy, Taiwan gradually move towards an aging society, which not only increases the social costs, but also has a huge impact on our nation’s overall development. There are still a lot of medical institutions are still using the form of hand-written papers, making it difficult to achieve effective integration with other related agencies. How to utilize modern technology to create an electronic medical record, combined with consumer health information, for easier use and lower costs, are currently important trends around the world. Cloud telecare medical information services can allow patients to have more real-time service quality. For hospitals, they can take advantage of the cloud infrastructure virtualization to save associated establishment costs. In addition, by the establishment of value-added data security model and cloud systems, it allows people to have ready access to health-related information. However, as the cloud computing improves the availability of telecare medical information services, the transfer of electronic medical records to the cloud also brings an additional risk such as the protection of medical privacy. In this research project, we completed the analyses, design and system implementation of user privacy protection mechanisms and value-added data security model for cloud telecare medical information system. We implemented three different security levels of data privacy protection mechanisms for providing the flexibility of system functional operations. Patients can enable the value-added application service for their authorized specific medical history data, making it accessible to third-party research staffs. The back-end cloud storage backup system provides the ability of fault-tolerance for different confidential files stored in our system. All of the above has practical benefits for developing and strengthening the user privacy protection of cloud telecare medical information services.

Keyword(s)

雲端醫療照護系統
隱私保護
資料安全加值模型
公開資料
使用者定義存取
cloud telecare medical information system
privacy protection
value-added data security model
open data
user-defined access

DSpace CRIS

Research on User Privacy Protection Mechanisms and Value-Added Data Security Model for Cloud Telecare Medical Information System

Details

Description