Evidence map›Paper›PMID 23965254›Full record

ArticleJournal of medical Internet research2013

Analysis of the security and privacy requirements of cloud-based electronic health records systems.

Joel J P C Rodrigues, Isabel de la Torre, Gonzalo Fernández, Miguel López-Coronado

Abstract read
In one paragraph

Article in Journal of medical Internet research, 2013. The graph could read no effect estimate from its abstract, so it casts no vote on the map. Cited by 34 papers, 1 of them a synthesis that pooled it.

0numbers the graph read from it
0cells of the map it votes in
34citing papers in PubMed, 1 pooled it
–field-weighted citation impact
1 · What the graph read from it

What it found

Each row is one number read from the abstract, on the scale the paper reported it, with its interval. Left of the dashed line favours the treatment, right favours the comparator. Under each row is the sentence it came from. New to these charts? A ten-minute tutorial.

The abstract states no effect estimate the extractor could read, or names no intervention and outcome on the map, so this paper lights no cell and moves no belief. It is still indexed, cited and linked below.

2 · The registry

The trial behind it

Trials whose registry record cites this paper, or whose number appears in the abstract. A trial that started after this paper was published is citing it as background, not reporting it.

Neither the registry nor the abstract names a trial number. If this is a trial report, that itself is worth knowing.

3 · Its place in the literature

Who cites it

34 citing papers in PubMed, 1 synthesis or guideline pooled it.

  1. Pooled it
  2. Review
  3. Article
  4. Article
  5. Article
  6. Review
  7. Article
  8. Article
  9. A new privacy framework for the management of chronic diseases via mHealth in a post-Covid-19 world.Zeitschrift fur Gesundheitswissenschaften = Journal of public health · 2022
    Article
  10. Article
  11. Privacy of electronic health records: a review of the literature.The journal of the Canadian Health Libraries Association · 2021
    Review
  12. Article
  13. Article
  14. Review
  15. Review
  16. Increasing the Impact of JMIR Journals in the Attention Economy.Journal of medical Internet research · 2019
    Article
  17. Article
  18. Article
  19. Privacy Policy and Technology in Biomedical Data Science.Annual review of biomedical data science · 2018
    Article
  20. Article
4 · The record

Corrections and comments

PubMed lists nothing against this paper. Absence here is not a guarantee, only a check that was made.

5 · Who and what money

Authors and funding

4 authors.

Joel J P C RodriguesInstituto de Telecomunicações, University of Beira Interior, Covilha, Portugal. joeljr@ieee.orgORCID 0000-0001-8657-3800
Isabel de la Torre
Gonzalo Fernández
Miguel López-Coronado

Funding

No grant is acknowledged in the PubMed record.

6 · The paper itself

Abstract

backgroundThe Cloud Computing paradigm offers eHealth systems the opportunity to enhance the features and functionality that they offer. However, moving patients' medical information to the Cloud implies several risks in terms of the security and privacy of sensitive health records. In this paper, the risks of hosting Electronic Health Records (EHRs) on the servers of third-party Cloud service providers are reviewed. To protect the confidentiality of patient information and facilitate the process, some suggestions for health care providers are made. Moreover, security issues that Cloud service providers should address in their platforms are considered.

objectiveTo show that, before moving patient health records to the Cloud, security and privacy concerns must be considered by both health care providers and Cloud service providers. Security requirements of a generic Cloud service provider are analyzed.

methodsTo study the latest in Cloud-based computing solutions, bibliographic material was obtained mainly from Medline sources. Furthermore, direct contact was made with several Cloud service providers.

resultsSome of the security issues that should be considered by both Cloud service providers and their health care customers are role-based access, network security mechanisms, data encryption, digital signatures, and access monitoring. Furthermore, to guarantee the safety of the information and comply with privacy policies, the Cloud service provider must be compliant with various certifications and third-party requirements, such as SAS70 Type II, PCI DSS Level 1, ISO 27001, and the US Federal Information Security Management Act (FISMA).

conclusionsStoring sensitive information such as EHRs in the Cloud means that precautions must be taken to ensure the safety and confidentiality of the data. A relationship built on trust with the Cloud service provider is essential to ensure a transparent process. Cloud service providers must make certain that all security mechanisms are in place to avoid unauthorized access and data breaches. Patients must be kept informed about how their data are being managed.

Indexed as

Computer SecurityMedical Records Systems, ComputerizedPrivacyInformation Managementcloud-computingeHealthelectronic health records (EHRs)privacysecurity

Identifiers

PMID23965254
PMCPMC3757992

What OpenQuestion holds

Textmetadata
LicenceCC BY
Read underepoch 390

Registered trials

None linked

Read under generation 80e0d062 · epoch 390. Bibliography from PubMed, PubMed Central and OpenAlex; grants from NIH RePORTER; trial links from ClinicalTrials.gov; estimates, votes and beliefs from the OpenQuestion graph.