Abstract
Electronic Health Records (EHRs) have become increasingly popular in recent years, providing a convenient way to store, manage and share relevant information among healthcare providers. However, as EHRs contain sensitive personal information, ensuring their security and privacy is most important. This paper reviews the key aspects of EHR security and privacy, including authentication, access control, data encryption, auditing, and risk management. Additionally, the paper discusses the legal and ethical issues surrounding EHRs, such as patient consent, data ownership, and breaches of confidentiality. Effective implementation of security and privacy measures in EHR systems requires a multi-disciplinary approach involving healthcare providers, IT specialists, and regulatory bodies. Ultimately, the goal is to come upon a balance between protecting patient privacy and ensuring timely access to critical medical information for feature healthcare delivery.
Access this chapter
Tax calculation will be finalised at checkout
Purchases are for personal use only
Similar content being viewed by others
References
Ahmed, M.I., Kannan, G.: Secure and lightweight privacy preserving internet of things integration for remote patient monitoring. J. King Saud Univ.-Comput. Inform. Sci. 34(9), 6895–6908 (2022)
Alam, M.A., Al Riyami, K.: Shear strengthening of reinforced concrete beam using natural fibre reinforced polymer laminates. Constr. Build. Mater. 162, 683–696 (2018)
Alloghani, M., Al-Jumeily, D., Hussain, A., Aljaaf, A.J., Mustafina, J., Petrov, E.: Healthcare services innovations based on the state of the art technology trend industry 4.0. In: 2018 11th International Conference on Developments in eSystems Engineering (DeSE), pp. 64–70. IEEE (2018)
Bhowmik, T., Banerjee, I.: Eeppda-edge-enabled efficient privacy-preserving data aggregation in smart healthcare internet of things network. Inter. J. Network Manag. e2216 (2023)
Chae, B.: Mapping the evolution of digital business research: a bibliometric review. Sustainability 14(12), 6990 (2022)
Chen, C.M., Chen, Z., Kumari, S., Lin, M.C.: Lap-ioht: a lightweight authentication protocol for the internet of health things. Sensors 22(14), 5401 (2022)
Dagher, G.G., Mohler, J., Milojkovic, M., Marella, P.B.: Ancile: privacy-preserving framework for access control and interoperability of electronic health records using blockchain technology. Sustain. Urban Areas 39, 283–297 (2018)
Dang, T.K., Lan, X., Weng, J., Feng, M.: Federated learning for electronic health records. ACM Trans. Intell. Syst. Technol. (TIST) 13(5), 1–17 (2022)
Das, D., Banerjee, S., Chatterjee, P., Ghosh, U., Biswas, U.: A secure blockchain enabled v2v communication system using smart contracts. IEEE Trans. Intell. Trans. Syst. (2022)
Das, D., Banerjee, S., Chatterjee, P., Ghosh, U., Mansoor, W., Biswas, U.: Design of a blockchain enabled secure vehicle-to-vehicle communication system. In: 2021 4th International Conference on Signal Processing and Information Security (ICSPIS), pp. 29–32. IEEE (2021)
Das, D., Banerjee, S., Chatterjee, P., Ghosh, U., Mansoor, W., Biswas, U.: Design of an automated blockchain-enabled vehicle data management system. In: 2022 5th International Conference on Signal Processing and Information Security (ICSPIS), pp. 22–25. IEEE (2022)
Das, D., Banerjee, S., Dasgupta, K., Chatterjee, P., Ghosh, U., Biswas, U.: Blockchain enabled sdn framework for security management in 5g applications. In: 24th International Conference on Distributed Computing and Networking, pp. 414–419 (2023)
Das, S., Namasudra, S.: Lightweight and efficient scpprivacy-preserving/scp mutual authentication scheme to secure scpinternet of things/scp-based smart healthcare. Trans. Emerging Telecommun. Technol. (2023)
Dutta, K., Guin, R.B., Chakrabarti, S., Banerjee, S., Biswas, U.: A smart job scheduling system for cloud computing service providers and users: modeling and simulation. In: 2012 1st international conference on recent advances in information technology (rait), pp. 346–351. IEEE (2012)
Garg, N., Wazid, M., Das, A.K., Singh, D.P., Rodrigues, J.J., Park, Y.: Bakmp-iomt: design of blockchain enabled authenticated key management protocol for internet of medical things deployment. IEEE Access 8, 95956–95977 (2020)
Herrmann, M., Boehme, P., Mondritzki, T., Ehlers, J.P., Kavadias, S., Truebel, H.: Digital transformation and disruption of the health care sector: Internet-based observational study. J. Med. Internet Res. 20(3), e104 (2018)
Kigera, J., Kipkorir, V.: Electronic health records-the ethical and legal issues. Annals African Surgery 20(1), 1–2 (2023)
Kumar, V., Mahmoud, M.S., Alkhayyat, A., Srinivas, J., Ahmad, M., Kumari, A.: Rapchi: robust authentication protocol for iomt-based cloud-healthcare infrastructure. J. Supercomput. 78(14), 16167–16196 (2022)
Lahiri, P.K., Das, D., Mansoor, W., Banerjee, S., Chatterjee, P.: A trustworthy blockchain based framework for impregnable iov in edge computing. In: 2020 IEEE 17th International Conference on Mobile Ad Hoc and Sensor Systems (MASS), pp. 26–31. IEEE (2020)
Lahiri, P.K., Mandal, R., Banerjee, S., Biswas, U.: An approach towards developments of smart covid-19 patient’s management and triaging using blockchain framework (2020)
Li, H., et al.: Review on security of federated learning and its application in healthcare. Futur. Gener. Comput. Syst. 144, 271–290 (2023)
Mandal, R., Banerjee, S., Islam, M.B., Chatterjee, P., Biswas, U.: Qos and energy efficiency using green cloud computing. In: Intelligent Internet of Things for Healthcare and Industry, pp. 287–305. Springer (2022). https://doi.org/10.1007/978-3-030-81473-1_14
Manogaran, G., Thota, C., Lopez, D., Sundarasekar, R.: Big data security intelligence for healthcare industry 4.0. Cybersecurity for Industry 4.0: Analysis for Design and Manufacturing, pp. 103–126 (2017)
Parker, M.: Managing threats to health data and information: toward security. In: Health Information Exchange, pp. 149–196. Elsevier (2023)
Rahman, M.A., Hossain, M.S., Islam, M.S., Alrajeh, N.A., Muhammad, G.: Secure and provenance enhanced internet of health things framework: a blockchain managed federated learning approach. IEEE Access 8, 205071–205087 (2020)
Roski, J., Bo-Linn, G.W., Andrews, T.A.: Creating value in health care through big data: opportunities and policy implications. Health Aff. 33(7), 1115–1122 (2014)
Roy, R., Haldar, P., Das, D., Banerjee, S., Biswas, U.: A blockchain enabled trusted public distribution management system using smart contract. In: International Conference on Electronic Governance with Emerging Technologies, pp. 25–35. Springer (2022). https://doi.org/10.1007/978-3-031-22950-3_3
Ryu, J., et al.: Secure ecc-based three-factor mutual authentication protocol for telecare medical information system. IEEE Access 10, 11511–11526 (2022)
Singh, R., Dwivedi, A.D., Srivastava, G., Chatterjee, P., Lin, J.C.W.: A privacy preserving internet of things smart healthcare financial system. IEEE Internet of Things J. (2023)
Sonkamble, R.G., Bongale, A.M., Phansalkar, S., Sharma, A., Rajput, S.: Secure data transmission of electronic health records using blockchain technology. Electronics 12(4), 1015 (2023)
Tertulino, R., Antunes, N., Morais, H.: Privacy in electronic health records: a systematic mapping study. J. Public Health, 1–20 (2023)
Tiwari, S., et al.: Applications of machine learning approaches to combat covid-19: a survey. In: Lessons from COVID-19, pp. 263–287 (2022)
Wang, S., Kirillova, K., Lehto, X.: Travelers’ food experience sharing on social network sites. J. Travel Tourism Market. 34(5), 680–693 (2017)
Wang, W., Li, X., Qiu, X., Zhang, X., Zhao, J., Brusic, V.: A privacy preserving framework for federated learning in smart healthcare systems. Inform. Proc. Manag. 60(1), 103167 (2023)
Xu, J., Glicksberg, B.S., Su, C., Walker, P., Bian, J., Wang, F.: Federated learning for healthcare informatics. J. Healthcare Inform. Res. 5, 1–19 (2021)
Yang, C., Everitt, J.H., Murden, D.: Evaluating high resolution spot 5 satellite imagery for crop identification. Comput. Electron. Agric. 75(2), 347–354 (2011)
Yin, X., Zhu, Y., Hu, J.: A comprehensive survey of privacy-preserving federated learning: a taxonomy, review, and future directions. ACM Comput. Surv. (CSUR) 54(6), 1–36 (2021)
Yu, S., Park, Y.: A robust authentication protocol for wireless medical sensor networks using blockchain and physically unclonable functions. IEEE Internet Things J. 9(20), 20214–20228 (2022). https://doi.org/10.1109/JIOT.2022.3171791
Zhao, Y., et al.: Growth traits and sperm proteomics analyses of myostatin gene-edited Chinese yellow cattle. Life 12(5), 627 (2022)
Acknowledgement
This work was supported by the National Science Foundation, under award number 2219741.
Author information
Authors and Affiliations
Corresponding author
Editor information
Editors and Affiliations
Rights and permissions
Copyright information
© 2024 IFIP International Federation for Information Processing
About this paper
Cite this paper
Banerjee, S., Barik, S., Das, D., Ghosh, U. (2024). EHR Security and Privacy Aspects: A Systematic Review. In: Puthal, D., Mohanty, S., Choi, BY. (eds) Internet of Things. Advances in Information and Communication Technology. IFIPIoT 2023. IFIP Advances in Information and Communication Technology, vol 683. Springer, Cham. https://doi.org/10.1007/978-3-031-45878-1_17
Download citation
DOI: https://doi.org/10.1007/978-3-031-45878-1_17
Published:
Publisher Name: Springer, Cham
Print ISBN: 978-3-031-45877-4
Online ISBN: 978-3-031-45878-1
eBook Packages: Computer ScienceComputer Science (R0)