end to end security for personal
play

End-to-End Security for Personal Telehealth Asim, M., Koster, P ., - PowerPoint PPT Presentation

Feb 25, 2023 •555 likes •694 views

End-to-End Security for Personal Telehealth Asim, M., Koster, P ., Petkovic, M. Healthcare Information Management, Philips Research Europe Outline Introduction to Continua Continua E2E architecture Security in Continua 2010

  1. End-to-End Security for Personal Telehealth Asim, M., Koster, P ., Petkovic, M. Healthcare Information Management, Philips Research Europe

  2. Outline • Introduction to Continua • Continua E2E architecture • Security in Continua 2010 specifications • E2E security and privacy requirements • Consent management in the Continua architecture • Conclusions 2 Asim, M.

  3. Continua Health Alliance Interoperable personal tele-health 3 Asim, M.

  4. Continua E2E Architecture Health Record PAN Device PAN Device Application WAN Device Health Record (HRN) Device Hosting Device (HRN) Device (AHD) PAN-IF WAN-IF HRN-IF PHRs/EHRs LAN Device Disease LAN-IF care Management profs Organization (DMO) Physician EMRs 4 Asim, M.

  5. Security in Continua 2010 specification confidentiality + integrity • TLS • IHE XDM à S-MIME HR auditability • IHE ATNA Device * HRN-IF * WAN confidentiality + integrity • WS-I BSP à TLS v1.0 Device authentication • WS-I BSP à * WS-Security Header + SAML 2.0 WAN-IF auditability • IHE ATNA * Application Hosting Device confidentiality • Zigbee security * * + integrity PAN-IF LAN-IF * * PAN LAN Device Device authentication + • Bluetooth security confidentiality 5 Asim, M.

  6. E2E security and privacy requirements • Identity management – Unambiguously linking measurements to the patient – Interoperable protocols for identity linkage and cross-referencing • Integrity and data origin authentication – Measurements are being taken in an uncontrolled environment – Authenticate data sources e.g. users and devices – Prevent or detect unauthorized data modification • Consent management – Patient expectation? (Participation, accountability, specification of purpose , limits on data collection/use, transparency – Ability to specify and revoke consent preferences – Enforcement of patient consent along the care path 6 Asim, M.

  7. Design for the consent management at the HRN-IF • Specification of consent • Consent Directive as CDA document – Implementation Guide for HL7 CDA R2 Consent Directive • Semantically interoperable • Encoded using standard terminology • Successor to the IHE BPPC (Basic Patient Privacy Consent) profile 7 Asim, M.

  8. Specification of patient consent Patient- Alice Alice is presented with a default consent policy: Nurse@DMO may disclose her information to Dr. Bob for the purpose of treatment. 8 Asim, M.

  9. Consent Directive Analysis Model Consent specification - allow/disallow action - purpose of consent Medical Record Reference Privacy Policy - effective period - Patient Identification Reference - additional conditions - Medical Record Identification Action Specification - hierarchy of operations applied to information Information Sender Health Information Affected - Organization Information Receiver - Related to a diagnosis - Role - Data Sensitivity - Coverage Type - Identity - Type of information (e.g., results) 9 Asim, M.

  10. Consent Directives Reference in CDA Doc 10 Asim, M.

  11. Design for the consent management at the HRN-IF HRN Sender HRN Receiver Provide(Health Document , Patient Consent Document (optional) ) (a) Query(Patient Consent Document) Query Response (b) Retrieve(Patient Consent Document, Requestor Token) Response(Patient Consent Document ) Consent management at the HRN interface 11 Asim, M.

  12. Questions 12 Asim, M.

Recommend

Personal Security and Privacy in Personal Security and Privacy in Ubiquitous Computing Marc

Personal Security and Privacy in Personal Security and Privacy in Ubiquitous Computing Marc

Personal Security and Privacy in Personal Security and Privacy in Ubiquitous Computing Marc Langheinrich Institute for Pervasive Computing Institute for Pervasive Computing ETH Zurich, Switzerland Approaches to Security & Privacy in

749 views • 39 slides
Privacy & Security Matters: Privacy & Security Matters: Protecting Personal Data

Privacy & Security Matters: Privacy & Security Matters: Protecting Personal Data

Privacy & Security Matters: Privacy & Security Matters: Protecting Personal Data Protecting Personal Data Privacy & Security Project HIPAA: What it is Health Insurance Portability and Accountability Act of 1996 Also known as

445 views • 26 slides
WiFi security Joeri de Ruiter Agenda WiFi security WPA(2) Personal Enterprise

WiFi security Joeri de Ruiter Agenda WiFi security WPA(2) Personal Enterprise

Advanced Network Security WiFi security Joeri de Ruiter Agenda WiFi security WPA(2) Personal Enterprise WPA3 Key reinstallaton aaacas 2 WiFi IEEE 802.11 standard Some terminology: Staton (STA) is a

479 views • 46 slides
An Garda Sochna Holiday Security/Personal Safety Community Policing HOLIDAY SECURITY This

An Garda Sochna Holiday Security/Personal Safety Community Policing HOLIDAY SECURITY This

An Garda Sochna Holiday Security/Personal Safety Community Policing HOLIDAY SECURITY This presentation addresses three key areas relating to your holiday security as follows - Preparation plans and securing your property Safety when

397 views • 20 slides
Personal Cyber Security Matters! Who are we? Multinational Company We are operating in

Personal Cyber Security Matters! Who are we? Multinational Company We are operating in

Personal Cyber Security Matters! Who are we? Multinational Company We are operating in Bangladesh, Turkey, USA, UK, Canada, Europe , Middle East and providing our services to over 54+ countries. Domain We mainly provide Cyber Security &

300 views • 18 slides
A personal perspective Ross Anderson Cambridge The birth of security economics Why

A personal perspective Ross Anderson Cambridge The birth of security economics Why

Security Economics A personal perspective Ross Anderson Cambridge The birth of security economics Why Information Security is Hard An Economic Perspective, ACSAC, Dec 2001 Now: a field with over 100 active researchers and one

245 views • 20 slides
Personal Internet Security Basics Dan Ficker Twin Cities DrupalCamp 2018 Overview Security

Personal Internet Security Basics Dan Ficker Twin Cities DrupalCamp 2018 Overview Security

Personal Internet Security Basics Dan Ficker Twin Cities DrupalCamp 2018 Overview Security is an aspiration, not a state. Encryption is your friend. Passwords are very important. Make a back-up plan. About Me

386 views • 35 slides
PROTECTION OF PERSONAL DATA IN SECURITY ALERT SHARING PLATFORMS Friday 1 st September, 2017

PROTECTION OF PERSONAL DATA IN SECURITY ALERT SHARING PLATFORMS Friday 1 st September, 2017

PROTECTION OF PERSONAL DATA IN SECURITY ALERT SHARING PLATFORMS Friday 1 st September, 2017 Martin Husk Vclav Stupka Martin Hork Introduction Collaborative Security Emerging trend in cyber security, popular among CSIRT/CERT teams,

335 views • 15 slides
Disclaimers My personal views and opinions may not represent the position(s) of my employers.

Disclaimers My personal views and opinions may not represent the position(s) of my employers.

How to stop worrying about Application Container Security (v2) Brian Andrzejewski Information System Security Architect Twitter: @DevSecOpsGeer LinkedIn: https://www.linkedin.com/in/bandrzej Disclaimers My personal views and opinions may

526 views • 24 slides
For personal use only Cloud security through cloud gateway intelligence FCT July Update Innovate

For personal use only Cloud security through cloud gateway intelligence FCT July Update Innovate

For personal use only Cloud security through cloud gateway intelligence FCT July Update Innovate Create Execute July 2017 1 For personal use only AGENDA Executive Summary Steve OBrien, MD Financial & Operational Update

549 views • 30 slides
For personal use only Cloud Security Solutions for the Enterprise Half Year 2017 Results

For personal use only Cloud Security Solutions for the Enterprise Half Year 2017 Results

For personal use only Cloud Security Solutions for the Enterprise Half Year 2017 Results Presentation Innovate Create Execute February 2017 Update to Financial Presentation For personal use only Please note: This is an updated

950 views • 19 slides
PERSONAL PERSONAL PREPAREDNESS PREP AREDNESS PERSONAL PERSONAL Know the hazards around

PERSONAL PERSONAL PREPAREDNESS PREP AREDNESS PERSONAL PERSONAL Know the hazards around

5/24/2017 PERSONAL PERSONAL PREPAREDNESS PREP AREDNESS PERSONAL PERSONAL Know the hazards around you PREPAREDNESS PREP AREDNESS Make a plan Stay informed Take action Civil Defense Receiver CAN YOU GUESS WHATS SO SPECIAL

398 views • 7 slides
BUSINESS AND SECURITY Chris Klimek TALKING POINTS PERSONAL BUSINESS IMPORTANCE EXTERNAL

BUSINESS AND SECURITY Chris Klimek TALKING POINTS PERSONAL BUSINESS IMPORTANCE EXTERNAL

BUSINESS AND SECURITY Chris Klimek TALKING POINTS PERSONAL BUSINESS IMPORTANCE EXTERNAL BRAND UNDERSTANDI OF FACTORS NG SECURITY LOOKING FOR THE RIGHT FIT Walk me through the process of how you would start looking for a job or

916 views • 45 slides
Employees Have Diversified Retirement Pension, Social Security and Personal Savings Four state

Employees Have Diversified Retirement Pension, Social Security and Personal Savings Four state

Budget Presentation to the Senate Finance Committee for Fiscal Years 2020-2021 Porter Wilson, Executive Director Employees Retirement System of Texas January 23, 2019 Employees Have Diversified Retirement Pension, Social Security and Personal

462 views • 15 slides
Pocketbook Sub-indice which tracks personal finances and job security in Canada hits a 12 month

Pocketbook Sub-indice which tracks personal finances and job security in Canada hits a 12 month

Pocketbook Sub-indice which tracks personal finances and job security in Canada hits a 12 month low submitted by Nanos, February 1, 2019 (Project 2013-284) Confidential 1 Summary Economic sentiment continues to be muted ago. The Bloomberg

460 views • 13 slides
DoD Export-Controlled Personal Property and Trade Security Controls IND 105 LESSON 13 DoD

DoD Export-Controlled Personal Property and Trade Security Controls IND 105 LESSON 13 DoD

DoD Export-Controlled Personal Property and Trade Security Controls IND 105 LESSON 13 DoD Export-Controlled Personal Property and Trade Security Controls TLO 13- Given the need to transfer DoD export-controlled personal property to parties

662 views • 29 slides
Compliance Workshop Privacy & Security Protecting Personal Information & SNAP Program

Compliance Workshop Privacy & Security Protecting Personal Information & SNAP Program

3/27/2015 Compliance Workshop Privacy & Security Protecting Personal Information & SNAP Program Considerations August 14, 2014 Presentation by: Jennifer L. Cox, J.D. Cox & Osowiecki, LLC Hartford, Connecticut 1 Todays Privacy &

475 views • 24 slides
Licensing and Regulation: A Personal Perspective Peter Webster, Chief Executive, Corps Security

Licensing and Regulation: A Personal Perspective Peter Webster, Chief Executive, Corps Security

Licensing and Regulation: A Personal Perspective Peter Webster, Chief Executive, Corps Security 14 March 2017 Industry Regulation I fully support regulation for the security industry I dont believe the industry has ever wanted total

784 views • 8 slides
A critical look at sensor network security A personal odyssey Naveen Sastry (nks@cs.berkeley.edu)

A critical look at sensor network security A personal odyssey Naveen Sastry (nks@cs.berkeley.edu)

A critical look at sensor network security A personal odyssey Naveen Sastry (nks@cs.berkeley.edu) November 17, 2005 Outline 1. Claim: conventional wisdom 2. Counter-claim: my view 3. Tools 4. Design example 5. The real worry 6. Recap &

580 views • 23 slides
So You Want to Be an Information Security Officer? Presented by: Art Bakke Information Security

So You Want to Be an Information Security Officer? Presented by: Art Bakke Information Security

So You Want to Be an Information Security Officer? Presented by: Art Bakke Information Security Officer Background Personal Starion Bank Arts Goals Highlight the typical responsibilities of an Information Security Officer from

778 views • 22 slides
Your Presentation You Where Youre From Date of Presentation What is privacy? What is

Your Presentation You Where Youre From Date of Presentation What is privacy? What is

Your Presentation You Where Youre From Date of Presentation What is privacy? What is personal data? What is sensitive personal data? Images and videos Short about Security Privacy VS Security Need a balance while benefiting from

367 views • 21 slides
The Applications of the Patient and Personal Security DEMET HAYAL YILDIRIM SPECIALIST Quality

The Applications of the Patient and Personal Security DEMET HAYAL YILDIRIM SPECIALIST Quality

Trkiye Kamu Hastaneleri Kurumu zmir Kamu Hastaneleri Birlii Gney Sekreterlii Tbbi Hizmetler Daire Bakanl The Applications of the Patient and Personal Security DEMET HAYAL YILDIRIM SPECIALIST Quality Coordinator 0

531 views • 49 slides
For personal use only Firstwave Cloud Technology Limited (FCT) FY19 Results FCTs Cloud

For personal use only Firstwave Cloud Technology Limited (FCT) FY19 Results FCTs Cloud

For personal use only Firstwave Cloud Technology Limited (FCT) FY19 Results FCTs Cloud Content Security Platform (CCSP) is a unique SaaS email, web & firewall security services orchestration platform for Telco / Service Providers that

883 views • 25 slides
PPOs and Security Ian Gunn Personal Financial Planning Ltd Warren Buffet Put all your eggs

PPOs and Security Ian Gunn Personal Financial Planning Ltd Warren Buffet Put all your eggs

PPOs and Security Ian Gunn Personal Financial Planning Ltd Warren Buffet Put all your eggs in one basket and watch that basket! Reasonably secure? Spot the difference Damages (Investment Returns and Periodical Payments) Damages

391 views • 20 slides

More recommend