Rights management technologies: A good choice for securing electronic healthrecords?

M. Petkovic; S. Katzenbeisser; K. Kursawe

doi:10.1007/978-3-8348-9418-2_19

Rights management technologies: A good choice for securing electronic healthrecords?

M. Petkovic, S. Katzenbeisser, K. Kursawe

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › Academic › peer-review

11 Citations (Scopus)

383 Downloads (Pure)

Abstract

Advances in healthcare IT bring new concerns with respect to privacy and security. Security critical patient data no longer resides on mainframes physically isolated within an organization, where physical security measures can be taken to defend the data and the system. Modern solutions are heading towards open, interconnected environments where storage outsourcing and operations on untrusted servers happen frequently. In order to allow secure sharing of health records between different healthcare providers, Rights Management Techniques facilitating a datacentric protection model can be employed: data is cryptographically protected and allowed to be outsourced or even freely float on the network. Rather than relying on different networks to provide confidentiality, integrity and authenticity, data is protected at the end points of the communication. In this paper we compare Enterprise/Digital Rights Management with traditional security techniques and discuss how Rights Management can be applied to secure Electronic Health Records.

Original language	English
Title of host publication	Highlights of the Information Security Solutions Europe Conference on Securing Electronic Business Processes (ISSE/SECURE 2007) 25-27 September 2007, Warsaw, Poland
Editors	N. Pohlmann, H. Reimer, W. Schneider
Place of Publication	Wiesbaden, Germany
Publisher	Vieweg
Pages	178-187
ISBN (Print)	978-3-83480346-7
DOIs	https://doi.org/10.1007/978-3-8348-9418-2_19
Publication status	Published - 2007
Event	conference; ISSE/SECURE 2007, Warsaw, Poland; 2007-09-25; 2007-09-27 - Duration: 25 Sept 2007 → 27 Sept 2007

Conference

Conference	conference; ISSE/SECURE 2007, Warsaw, Poland; 2007-09-25; 2007-09-27
Period	25/09/07 → 27/09/07
Other	ISSE/SECURE 2007, Warsaw, Poland

Access to Document

10.1007/978-3-8348-9418-2_19

Metis223767Final published version, 338 KB

Cite this

Petkovic, M., Katzenbeisser, S., & Kursawe, K. (2007). Rights management technologies: A good choice for securing electronic healthrecords? In N. Pohlmann, H. Reimer, & W. Schneider (Eds.), Highlights of the Information Security Solutions Europe Conference on Securing Electronic Business Processes (ISSE/SECURE 2007) 25-27 September 2007, Warsaw, Poland (pp. 178-187). Vieweg. https://doi.org/10.1007/978-3-8348-9418-2_19

Petkovic, M. ; Katzenbeisser, S. ; Kursawe, K. / Rights management technologies: A good choice for securing electronic healthrecords?. Highlights of the Information Security Solutions Europe Conference on Securing Electronic Business Processes (ISSE/SECURE 2007) 25-27 September 2007, Warsaw, Poland. editor / N. Pohlmann ; H. Reimer ; W. Schneider. Wiesbaden, Germany : Vieweg, 2007. pp. 178-187

@inproceedings{71cc16515394461db55f65663291250e,

title = "Rights management technologies: A good choice for securing electronic healthrecords?",

abstract = "Advances in healthcare IT bring new concerns with respect to privacy and security. Security critical patient data no longer resides on mainframes physically isolated within an organization, where physical security measures can be taken to defend the data and the system. Modern solutions are heading towards open, interconnected environments where storage outsourcing and operations on untrusted servers happen frequently. In order to allow secure sharing of health records between different healthcare providers, Rights Management Techniques facilitating a datacentric protection model can be employed: data is cryptographically protected and allowed to be outsourced or even freely float on the network. Rather than relying on different networks to provide confidentiality, integrity and authenticity, data is protected at the end points of the communication. In this paper we compare Enterprise/Digital Rights Management with traditional security techniques and discuss how Rights Management can be applied to secure Electronic Health Records.",

author = "M. Petkovic and S. Katzenbeisser and K. Kursawe",

year = "2007",

doi = "10.1007/978-3-8348-9418-2_19",

language = "English",

isbn = "978-3-83480346-7",

pages = "178--187",

editor = "N. Pohlmann and H. Reimer and W. Schneider",

booktitle = "Highlights of the Information Security Solutions Europe Conference on Securing Electronic Business Processes (ISSE/SECURE 2007) 25-27 September 2007, Warsaw, Poland",

publisher = "Vieweg",

address = "Germany",

note = "conference; ISSE/SECURE 2007, Warsaw, Poland; 2007-09-25; 2007-09-27 ; Conference date: 25-09-2007 Through 27-09-2007",

}

Petkovic, M, Katzenbeisser, S & Kursawe, K 2007, Rights management technologies: A good choice for securing electronic healthrecords? in N Pohlmann, H Reimer & W Schneider (eds), Highlights of the Information Security Solutions Europe Conference on Securing Electronic Business Processes (ISSE/SECURE 2007) 25-27 September 2007, Warsaw, Poland. Vieweg, Wiesbaden, Germany, pp. 178-187, conference; ISSE/SECURE 2007, Warsaw, Poland; 2007-09-25; 2007-09-27, 25/09/07. https://doi.org/10.1007/978-3-8348-9418-2_19

Rights management technologies: A good choice for securing electronic healthrecords? / Petkovic, M.; Katzenbeisser, S.; Kursawe, K.
Highlights of the Information Security Solutions Europe Conference on Securing Electronic Business Processes (ISSE/SECURE 2007) 25-27 September 2007, Warsaw, Poland. ed. / N. Pohlmann; H. Reimer; W. Schneider. Wiesbaden, Germany: Vieweg, 2007. p. 178-187.

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › Academic › peer-review