Reference Hub1
Improving Security Policy Coverage in Healthcare

Improving Security Policy Coverage in Healthcare

Rafae Bhatti, Tyrone Grandison
ISBN13: 9781616928957|ISBN10: 1616928956|EISBN13: 9781616928971
DOI: 10.4018/978-1-61692-895-7.ch004
Cite Chapter Cite Chapter

MLA

Bhatti, Rafae, and Tyrone Grandison. "Improving Security Policy Coverage in Healthcare." Certification and Security in Health-Related Web Applications: Concepts and Solutions, edited by Anargyros Chryssanthou, et al., IGI Global, 2011, pp. 66-83. https://doi.org/10.4018/978-1-61692-895-7.ch004

APA

Bhatti, R. & Grandison, T. (2011). Improving Security Policy Coverage in Healthcare. In A. Chryssanthou, I. Apostolakis, & I. Varlamis (Eds.), Certification and Security in Health-Related Web Applications: Concepts and Solutions (pp. 66-83). IGI Global. https://doi.org/10.4018/978-1-61692-895-7.ch004

Chicago

Bhatti, Rafae, and Tyrone Grandison. "Improving Security Policy Coverage in Healthcare." In Certification and Security in Health-Related Web Applications: Concepts and Solutions, edited by Anargyros Chryssanthou, Ioannis Apostolakis, and Iraklis Varlamis, 66-83. Hershey, PA: IGI Global, 2011. https://doi.org/10.4018/978-1-61692-895-7.ch004

Export Reference

Mendeley
Favorite

Abstract

With the adoption of Electronic Medical Records (EMRs), an increasing number of health-related Web applications are now available to consumers, providers and partners. While this transformation offers huge benefits, there are security and privacy concerns integral to the process of electronic healthcare delivery. In this work, the authors first survey the body of evidence to emphasize the design of appropriate security solutions for electronic healthcare applications. The successful solutions will always comply with the prime directive of healthcare - “nothing should interfere with delivery of care” (Grandison and Davis, 2007). The authors then formally present the problem of reconciling security and privacy policies with the actual healthcare workflow, which we refer to as the policy coverage problem. They outline a technical solution to the problem based on the concept of policy refinement, and develop a privacy protection architecture called PRIMA. They also offer guidelines for electronic healthcare applications to ensure adequate policy coverage. The ultimate goal is that electronic healthcare applications should be made secure without compromising usability.

Request Access

You do not own this content. Please login to recommend this title to your institution's librarian or purchase it from the IGI Global bookstore.