Security and privacy in electronic health records: a systematic literature review.
Open accessAbstract
Objective To report the results of a systematic literature review concerning the security and privacy of electronic health record (EHR) systems.Data sources Original articles written in English found in MEDLINE, ACM Digital Library, Wiley InterScience, IEEE Digital Library, Science@Direct, MetaPress, ERIC, CINAHL and Trip Database.Study selection Only those articles dealing with the security and privacy of EHR systems.Data extraction The extraction of 775 articles using a predefined search string, the outcome of which was reviewed by three authors and checked by a fourth.Results A total of 49 articles were selected, of which 26 used standards or regulations related to the privacy and security of EHR data. The most widely used regulations are the Health Insurance Portability and Accountability Act (HIPAA) and the European Data Protection Directive 95/46/EC. We found 23 articles that used symmetric key and/or asymmetric key schemes and 13 articles that employed the pseudo anonymity technique in EHR systems. A total of 11 articles propose the use of a digital signature scheme based on PKI (Public Key Infrastructure) and 13 articles propose a login/password (seven of them combined with a digital certificate or PIN) for authentication. The preferred access control model appears to be Role-Based Access Control (RBAC), since it is used in 27 studies. Ten of these studies discuss who should define the EHR systems' roles. Eleven studies discuss who should provide access to EHR data: patients or health entities. Sixteen of the articles reviewed indicate that it is necessary to override defined access policies in the case of an emergency. In 25 articles an audit-log of the system is produced. Only four studies mention that system users and/or health staff should be trained in security and privacy.Conclusions Recent years have witnessed the design of standards and the promulgation of directives concerning security and privacy in EHR systems. However, more work should be done to adopt these regulations and to deploy secure EHR systems.
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Integrity signals
Registry
Cites
Statistics
Claims the paper makes
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Claims other papers make about this one
Each is checked against this paper’s own text: does it say what the citing paper says it does?
AI and robotics in healthcare promise enhanced diagnostics, streamlined processes, and improved patient care.
“Integrating Artificial Intelligence (AI) and robotics in healthcare heralds a new era of medical innovation, promising enhanced diagnostics, streamlined processes, and improved patient care.”
From Ethical implications of AI and robotics in healthcare: A review (2023) · cites this paper as [1]
The Introduction discusses benefits expected from electronic health records, including improved quality of care, but does not attribute those benefits to AI or robotics. Searches for AI, robotics, diagnostics, and healthcare innovation found no passage addressing the claimed promise of those technologies. (LLM, conf=0.76)
Experimental — accuracy not yet measured
Self-check
Percentages, sums and reported differences re-computed from the paper’s own numbers.
The self-check needs the paper’s full text.
Cites
Liberati, A., Altman, D. G., Tetzlaff, J., Mulrow, C., Gøtzsche, P. C., Ioannidis, J. P. A., Clarke, M., Devereaux, P. J., Kleijnen, J., & Moher, D. (2009) · PLoS Medicine · doi:10.1371/journal.pmed.1000100 · Cited by 28,164 · see citing works
Shamir, A. (1979) · Communications of the ACM · doi:10.1145/359168.359176 · Cited by 13,756 · see citing works
Liberati, A., Altman, D. G., Tetzlaff, J., Mulrow, C., Gøtzsche, P. C., Ioannidis, J. P. A., Clarke, M., Devereaux, P. J., Kleijnen, J., & Moher, D. (2009) · Journal of Clinical Epidemiology · doi:10.1016/j.jclinepi.2009.06.006 · Cited by 10,578 · see citing works
k-ANONYMITY: A MODEL FOR PROTECTING PRIVACY
SWEENEY, L. (2002) · International Journal of Uncertainty, Fuzziness and Knowledge-Based Systems · doi:10.1142/s0218488502001648 · Cited by 8,571 · see citing works
Ciphertext-Policy Attribute-Based Encryption
Bethencourt, J., Sahai, A., & Waters, B. (2007) · 2007 IEEE Symposium on Security and Privacy (SP '07) · doi:10.1109/sp.2007.11 · Cited by 5,131 · see citing works
Proposed NIST standard for role-based access control
Ferraiolo, D. F., Sandhu, R. S., Gavrila, S. I., Kuhn, D. R., & Chandramouli, R. (2001) · ACM Transactions on Information and System Security · doi:10.1145/501978.501980 · Cited by 2,553 · see citing works
Certificateless Public Key Cryptography
Al-Riyami, S. S., & Paterson, K. G. (2003) · Lecture notes in computer science · doi:10.1007/978-3-540-40061-5_29 · Cited by 2,218 · see citing works
Role of Computerized Physician Order Entry Systems in Facilitating Medication Errors
Koppel, R. (2005) · JAMA · doi:10.1001/jama.293.10.1197 · Cited by 2,126 · see citing works
Westin, A. F. (1967) · Cited by 1,908 · see citing works
Westin, A. F. (1970) · CERN Document Server (European Organization for Nuclear Research) · Cited by 1,184 · see citing works
Security Models and Requirements for Healthcare Application Clouds
Zhang, R., & Liu, L. (2010) · IEEE ... International Conference on Cloud Computing · doi:10.1109/cloud.2010.62 · Cited by 393 · see citing works
Benaloh, J., Chase, M., Horvitz, E., & Lauter, K. (2009) · doi:10.1145/1655008.1655024 · Cited by 358 · see citing works
Greenhalgh, T., Hinder, S., Stramer, K., Bratan, T., & Russell, J. (2010) · BMJ · doi:10.1136/bmj.c5814 · Cited by 343 · see citing works
Human factors in information security: The insider threat – Who can you trust these days?
Colwill, C. (2009) · Information Security Technical Report · doi:10.1016/j.istr.2010.04.004 · Cited by 319 · see citing works
Privacy, Confidentiality, and Electronic Medical Records
Barrows, R. C., & Clayton, P. D. (1996) · Journal of the American Medical Informatics Association · doi:10.1136/jamia.1996.96236282 · Cited by 309 · see citing works
Wang, Y., Hu, J., & Phillips, D. (2007) · IEEE Transactions on Pattern Analysis and Machine Intelligence · doi:10.1109/tpami.2007.1003 · Cited by 282 · see citing works
From Template to Image: Reconstructing Fingerprints from Minutiae Points
Ross, A., Shah, J., & Jain, A. K. (2007) · IEEE Transactions on Pattern Analysis and Machine Intelligence · doi:10.1109/tpami.2007.1018 · Cited by 273 · see citing works
Privacy preserving EHR system using attribute-based infrastructure
Narayan, S., Gagné, M., & Safavi-Naini, R. (2010) · Proceedings of the 2010 ACM workshop on Cloud computing security workshop · doi:10.1145/1866835.1866845 · Cited by 257 · see citing works
Horvath, M. M., Winfield, S., Evans, S., Slopek, S., Shang, H., & Ferranti, J. M. (2010) · Journal of Biomedical Informatics · doi:10.1016/j.jbi.2010.11.008 · Cited by 183 · see citing works
Aspects of privacy for electronic health records
Haas, S., Wohlgemuth, S., Echizen, I., Sonehara, N., & Müller, G. (2010) · International Journal of Medical Informatics · doi:10.1016/j.ijmedinf.2010.10.001 · Cited by 183 · see citing works
Wiljer, D., Urowitz, S., Apatu, E., DeLenardo, C., Eysenbach, G., Harth, T., Pai, H. H., & Leonard, K. J. (2008) · Journal of Medical Internet Research · doi:10.2196/jmir.1061 · Cited by 180 · see citing works
Kushida, C. A., Nichols, D. A., Jadrnicek, R., Miller, R., Walsh, J. K., & Griffin, K. S. (2012) · Medical Care · doi:10.1097/mlr.0b013e3182585355 · Cited by 172 · see citing works
Authorisation and access control for electronic health record systems
Blobel, B. G. M. E. (2004) · International Journal of Medical Informatics · doi:10.1016/j.ijmedinf.2003.11.018 · Cited by 167 · see citing works
Giving Patients Access to Their Medical Records via the Internet: The PCASSO Experience
Masys, D. R. (2002) · Journal of the American Medical Informatics Association · doi:10.1197/jamia.m1005 · Cited by 156 · see citing works
A methodology for the pseudonymization of medical data
Neubauer, T., & Heurix, J. (2010) · International Journal of Medical Informatics · doi:10.1016/j.ijmedinf.2010.10.016 · Cited by 146 · see citing works
Barriers to the adoption and use of personal health record systems
Liu, L. S., Shih, P. C., & Hayes, G. R. (2011) · iConference · doi:10.1145/1940761.1940811 · Cited by 139 · see citing works
Protection of privacy by third-party encryption in genetic research in Iceland
Gulcher, J. R., Kristjánsson, K., Guðbjartsson, H., & Stefánsson, K. (2000) · European Journal of Human Genetics · doi:10.1038/sj.ejhg.5200530 · Cited by 138 · see citing works
McGuire, A. L., Fisher, R. E., Cusenza, P., Hudson, K., Rothstein, M. A., McGraw, D., Matteson, S., GLASER, J. P., & Henley, D. E. (2008) · Genetics in Medicine · doi:10.1097/gim.0b013e31817a8aaa · Cited by 138 · see citing works
Securing electronic health records without impeding the flow of information
Agrawal, R., & Johnson, C. M. (2007) · International Journal of Medical Informatics · doi:10.1016/j.ijmedinf.2006.09.015 · Cited by 128 · see citing works
Electronic health record: Wiring Europe’s healthcare
Kierkegaard, P. (2011) · Computer law & security review · doi:10.1016/j.clsr.2011.07.013 · Cited by 122 · see citing works
Hoerbst, A., Kohl, C. D., Knaup, P., & Ammenwerth, E. (2009) · International Journal of Medical Informatics · doi:10.1016/j.ijmedinf.2009.11.002 · Cited by 122 · see citing works
A role-based delegation framework for healthcare information systems
Zhang, L., Ahn, G., & Chu, B.-T. B. (2002) · ACM Symposium on Access Control Models and Technologies (SACMAT) · doi:10.1145/507711.507731 · Cited by 121 · see citing works
Cross-Domain Data Sharing in Distributed Electronic Health Record Systems
Sun, J., & Fang, Y. M. (2009) · IEEE Transactions on Parallel and Distributed Systems · doi:10.1109/tpds.2009.124 · Cited by 118 · see citing works
Critical areas of national electronic health record programs—Is our focus correct?
Deutsch, E., Duftschmid, G., & Dorda, W. (2010) · International Journal of Medical Informatics · doi:10.1016/j.ijmedinf.2009.12.002 · Cited by 117 · see citing works
A hybrid public key infrastructure solution (HPKI) for HIPAA privacy/security regulations
Hu, J., Chen, H., & Hou, T. (2009) · Computer Standards & Interfaces · doi:10.1016/j.csi.2009.04.005 · Cited by 115 · see citing works
Inter-organizational future proof EHR systems
van der Linden, H., Kalra, D., Hasman, A., & Talmon, J. L. (2008) · International Journal of Medical Informatics · doi:10.1016/j.ijmedinf.2008.06.013 · Cited by 115 · see citing works
Ueckert, F., Goerz, M., Ataian, M., Tessmann, S., & Prokosch, H. (2003) · International Journal of Medical Informatics · doi:10.1016/s1386-5056(03)00052-2 · Cited by 111 · see citing works
A contextual role-based access control authorization model for electronic patient record
Motta, G. H. M. B., & Furuie, S. S. (2003) · IEEE Transactions on Information Technology in Biomedicine · doi:10.1109/titb.2003.816562 · Cited by 106 · see citing works
Situation-Based Access Control: Privacy management via modeling of patient data access scenarios
Mor Peleg, B., Beimel, D., Dori, D., & Denekamp, Y. (2008) · Journal of Biomedical Informatics · doi:10.1016/j.jbi.2008.03.014 · Cited by 104 · see citing works
Bostrom, A. C., Schäfer, P. B., Dontje, K., Pohl, J. M., Nagelkerk, J. M., & Cavanagh, S. J. (2006) · CIN Computers Informatics Nursing · doi:10.1097/00024665-200601000-00011 · Cited by 102 · see citing works
Strategies for health data exchange for secondary, cross-institutional clinical research
Elger, B., Iavindrasana, J., Iacono, L., Müller, H., Roduit, N., Summers, P. E., & Wright, J. (2010) · Comput. Methods Programs Biomed. · doi:10.1016/j.cmpb.2009.12.001 · Cited by 101 · see citing works
A pixel-based scrambling scheme for digital medical images protection
Hu, J., & Han, F. (2009) · Journal of Network and Computer Applications · doi:10.1016/j.jnca.2009.02.009 · Cited by 100 · see citing works
A Critique of the ANSI Standard on Role-Based Access Control
Li, N., Byun, J.-W., & Bertino, E. (2007) · IEEE Security & Privacy · doi:10.1109/msp.2007.158 · Cited by 97 · see citing works
A Review of Security of Electronic Health Records
Win, K. T. (2005) · Health Information Management Journal · doi:10.1177/183335830503400105 · Cited by 96 · see citing works
Personal Health Record Systems and Their Security Protection
Win, K. T., Susilo, W., & Mu, Y. (2006) · Journal of Medical Systems · doi:10.1007/s10916-006-9019-y · Cited by 93 · see citing works
Thornburgh, T. (2004) · Annual Conference on Information Security Curriculum Development (InfoSecCD) · doi:10.1145/1059524.1059554 · Cited by 88 · see citing works
Boxwala, A. A., Kim, J., Grillo, J. M., & Lucila Ohno-machado, A. (2011) · Journal of the American Medical Informatics Association · doi:10.1136/amiajnl-2011-000217 · Cited by 82 · see citing works
Social Participation in Health 2.0
Hesse, B. W., Hansen, D. L., Finholt, T. A., Munson, S. A., Kellogg, W. A., & Thomas, J. C. (2010) · Computer · doi:10.1109/mc.2010.326 · Cited by 80 · see citing works
A Study of Access Control Requirements for Healthcare Systems Based on Audit Trails from Access Logs
Røstad, L., & Edsberg, O. (2006) · Annual Computer Security Applications Conference · doi:10.1109/acsac.2006.8 · Cited by 80 · see citing works
Huang, L.-C., Chu, H.-C., Lien, C.-Y., Hsiao, C., & Kao, T. (2009) · Computers in Biology and Medicine · doi:10.1016/j.compbiomed.2009.06.004 · Cited by 78 · see citing works
Chhanabhai, P. N., & Holt, A. (2007) · PubMed · Cited by 77 · see citing works
Daglish, D., & Archer, N. (2009) · World Congress on Privacy, Security, Trust and the Management of e-Business (CONGRESS) · doi:10.1109/congress.2009.14 · Cited by 71 · see citing works
Role delegation in role-based access control
Na, S.-Y., & Cheon, S.-H. (2000) · doi:10.1145/344287.344300 · Cited by 70 · see citing works
Access control for smarter healthcare using policy spaces
Ardagna, C. A., di Vimercati, S. D. C., Foresti, S., Grandison, T. W. A., Jajodia, S., & Samarati, P. (2010) · Computers & Security · doi:10.1016/j.cose.2010.07.001 · Cited by 70 · see citing works
Allard, T., Anciaux, N., Bouganim, L., Guo, Y., Folgoc, L. L., Nguyen, B., Pucheral, P., Ray, I., Ray, I., & Yin, S. (2010) · Proceedings of the VLDB Endowment · doi:10.14778/1920841.1920850 · Cited by 69 · see citing works
Yoon‐Flannery, K., Zandieh, S. O., Kuperman, G. J., Langsam, D. J., Hyman, D., & Kaushal, R. (2008) · Journal of Innovation in Health Informatics · doi:10.14236/jhi.v16i4.703 · Cited by 68 · see citing works
The health information system security threat lifecycle: An informatics theory
Fernando, J., & Dawson, L. (2009) · International Journal of Medical Informatics · doi:10.1016/j.ijmedinf.2009.08.006 · Cited by 68 · see citing works
GLASER, J. P., Henley, D. E., Downing, G. J., Brinner, K. M., Community, F. T. P. H. C. W. O. T. A. H. I., & Brinner (2008) · Journal of the American Medical Informatics Association · doi:10.1197/jamia.m2718 · Cited by 68 · see citing works
Farzandipour, M., Sadoughi, F., Ahmadi, M., & Karimi, I. (2009) · Journal of Medical Systems · doi:10.1007/s10916-009-9276-7 · Cited by 65 · see citing works
Patient-centric authorization framework for electronic healthcare services
Jin, J., Ahn, G., Hu, H., Covington, M. J., & Zhang, X. (2010) · Computers & Security · doi:10.1016/j.cose.2010.09.001 · Cited by 64 · see citing works
Security requirements engineering framework for software product lines
Mellado, D., Fernández‐Medina, E., & Piattini, M. G. (2010) · Information and Software Technology · doi:10.1016/j.infsof.2010.05.007 · Cited by 63 · see citing works
Audit-Based Access Control for Electronic Health Records
Dekker, M. A. C., & Etalle, S. (2007) · Electronic Notes in Theoretical Computer Science · doi:10.1016/j.entcs.2006.08.028 · Cited by 56 · see citing works
Medical Record Privacy and Security in a Digital Environment
Kahn, S., & Sheshadri, V. (2008) · IT Professional · doi:10.1109/mitp.2008.34 · Cited by 54 · see citing works
McAlearney, A. S., Chisolm, D. J., Schweikhart, S. B., Medow, M. A., & Kelleher, K. J. (2006) · International Journal of Medical Informatics · doi:10.1016/j.ijmedinf.2006.09.021 · Cited by 53 · see citing works
Wireless Technology Infrastructures for Authentication of Patients: PKI that Rings
Sax, U. (2005) · Journal of the American Medical Informatics Association · doi:10.1197/jamia.m1681 · Cited by 53 · see citing works
A secure architecture for the pseudonymization of medical data
Riedl, B., Neubauer, T., Goluch, G., Boehm, O., Reinauer, G., & Krumboeck, A. (2007) · International Conference on Availability, Reliability and Security (ARES) · doi:10.1109/ares.2007.22 · Cited by 51 · see citing works
Access control: how can it improve patients' healthcare?
Ferreira, A., Cruz-Correia, R. J., Antunes, L. F., & Chadwick, D. W. (2007) · PubMed · Cited by 49 · see citing works
Confidentiality and Electronic Medical Records
Roberts, J., Decter, S. R., & Nagel, D. (1998) · Annals of Internal Medicine · doi:10.7326/0003-4819-128-6-199803150-00032 · Cited by 49 · see citing works
An attribute-based authorization policy framework with dynamic conflict resolution
Mohan, A., & Blough, D. M. (2010) · doi:10.1145/1750389.1750395 · Cited by 48 · see citing works
Lovis, C., Spahni, S., Cassoni, N., & Geissbühler, A. (2006) · International Journal of Medical Informatics · doi:10.1016/j.ijmedinf.2006.09.014 · Cited by 47 · see citing works
Claerhout, B., Meyer, F. D., & Moor, G. J. E. D. (2003) · Methods of Information in Medicine · doi:10.1055/s-0038-1634326 · Cited by 46 · see citing works
Compelled Authorizations for Disclosure of Health Records: Magnitude and Implications
Rothstein, M. A., & Talbott, M. K. (2007) · The American Journal of Bioethics · doi:10.1080/15265160601171887 · Cited by 46 · see citing works
Patient privacy in electronic prescription transfer
Ball, E., Chadwick, D. W., & Mundy, D. P. (2003) · IEEE Security & Privacy · doi:10.1109/msecp.2003.1193217 · Cited by 43 · see citing works
Pseudonymization for improving the Privacy in E-Health Applications
Riedl, B., Grascher, V., Fenz, S., & Neubauer, T. (2008) · Hawaii International Conference on System Sciences (HICSS) · doi:10.1109/hicss.2008.366 · Cited by 42 · see citing works
Privacy-preserving electronic health record linkage using pseudonym identifiers
Alhaqbani, B., & Fidge, C. (2008) · doi:10.1109/health.2008.4600120 · Cited by 41 · see citing works
Web-based secure access from multiple patient repositories
Choe, J., & Yoo, S. K. (2007) · International Journal of Medical Informatics · doi:10.1016/j.ijmedinf.2007.06.001 · Cited by 40 · see citing works
Patient opinion--EHR assessment from the users perspective.
Zurita, L., & Nøhr, C. (2004) · PubMed · Cited by 38 · see citing works
Bakker, A. R. (2004) · International Journal of Medical Informatics · doi:10.1016/j.ijmedinf.2003.11.008 · Cited by 38 · see citing works
Health Privacy in the Electronic Age
Rothstein, M. A. (2007) · Journal of Legal Medicine · doi:10.1080/01947640701732148 · Cited by 38 · see citing works
Can GRID services provide answers to the challenges of national health information sharing
Bilykh, I., Bychkov, Y., Dahlem, D., Jahnke, J. H., McCallum, G., Obry, C., Onabajo, A., & Kuziemsky, C. E. (2003) · Conference of the Centre for Advanced Studies on Collaborative Research · Cited by 33 · see citing works
The Taiwanese method for providing patients data from multiple hospital EHR systems
Jian, W., Wen, H., Scholl, J., Syed-Abdul, S., Lee, P., Hsu, C., & Li, Y. (2010) · Journal of Biomedical Informatics · doi:10.1016/j.jbi.2010.11.004 · Cited by 33 · see citing works
Multi-centric universal pseudonymisation for secondary use of the EHR.
Iacono, L. L. (2007) · PubMed · Cited by 33 · see citing works
Implementing security in a distributed web-based EHCR
Sucurovic, S. (2006) · International Journal of Medical Informatics · doi:10.1016/j.ijmedinf.2006.09.017 · Cited by 32 · see citing works
Quantin, C., Jaquet-Chiffelle, D.-O., Coatrieux, G., Benzenine, É., & Allaert, F. (2010) · International Journal of Medical Informatics · doi:10.1016/j.ijmedinf.2010.10.003 · Cited by 32 · see citing works
A cross-platform model for secure Electronic Health Record communication
Ruotsalainen, P. S. (2004) · International Journal of Medical Informatics · doi:10.1016/j.ijmedinf.2003.12.012 · Cited by 31 · see citing works
An Initial Model and a Discussion of Access Control in Patient Controlled Health Records
Røstad, L. (2008) · International Conference on Availability, Reliability and Security (ARES) · doi:10.1109/ares.2008.185 · Cited by 29 · see citing works
Security and Confidentiality Approach for the Clinical E-Science Framework (CLEF)
Singleton, P., Milan, J., MacKay, J., Detmer, D. E., Rector, A. L., Ingram, D., & Kalra, D. (2005) · Methods of Information in Medicine · doi:10.1055/s-0038-1633945 · Cited by 28 · see citing works
The challenge of federated identity management
Smith, D. (2008) · Network Security · doi:10.1016/s1353-4858(08)70051-5 · Cited by 25 · see citing works
Implementing security and access control mechanisms for an electronic healthcare record.
Ueckert, F., & Prokosch, H. (2002) · PubMed · Cited by 24 · see citing works
Using digital rights management for securing data in a medical research environment
Jafari, M., Safavi–Naini, R., Saunders, C., & Sheppard, N. P. (2010) · doi:10.1145/1866870.1866883 · Cited by 23 · see citing works
Dependability Evaluation of Cooperative Backup Strategies for Mobile Devices
Courtès, L., Hamouda, O., Kaâniche, M., Killijian, M., & Powell, D. (2007) · Pacific Rim International Symposium on Dependable Computing · doi:10.1109/prdc.2007.21 · Cited by 22 · see citing works
Mludek, V., Wolff, A. C., Bülzebruck, H., Oetzel, D., Zierhut, D., Drings, P., Wannenmacher, M., Haux, R., & van der Haak, M. (2002) · Methods of Information in Medicine · doi:10.1055/s-0038-1634372 · Cited by 21 · see citing works
An Electronic Health Record Content Protection System Using SmartCard and PMR
Yu, W. D., & Chekhanovskiy, M. A. (2007) · doi:10.1109/health.2007.381595 · Cited by 20 · see citing works
A comprehensive privacy-aware authorization framework founded on HIPAA privacy rules
Faresi, A. A., Wijesekera, D., & Moidu, K. (2010) · doi:10.1145/1882992.1883093 · Cited by 18 · see citing works
Access and privacy rights using web security standards to increase patient empowerment.
Falcão-Reis, F., Costa‐Pereira, A., & Correia, M. E. (2008) · PubMed · Cited by 17 · see citing works
Bouhaddou, O., Cromwell, T., Davis, M., Maulden, S. A., Hsing, N., Carlson, D., Cockle, J., Hoang, C., & Fischetti, L. F. (2012) · Journal of Biomedical Informatics · doi:10.1016/j.jbi.2012.01.003 · Cited by 17 · see citing works
Web-based personal health record systems evaluation
Win, K. T. (2006) · International Journal of Healthcare Technology and Management · doi:10.1504/ijhtm.2006.008432 · Cited by 15 · see citing works
Discretionary Overriding of Access Control in the Privilege Calculus.
Rissanen, E., Firozabadi, B. S., & Sergot, M. J. (2004) · Cited by 15 · see citing works
Allaert, F., Teuff, G. L., Quantin, C., & Barber, B. (2004) · International Journal of Medical Informatics · doi:10.1016/j.ijmedinf.2003.11.007 · Cited by 14 · see citing works
Tsiknakis, M., Katehakis, D. G., & Orphanoudakis, S. C. (2004) · International Congress Series · doi:10.1016/j.ics.2004.03.275 · Cited by 14 · see citing works
An Approach to Access Control in Electronic Health Record
Sucurovic, S. (2009) · Journal of Medical Systems · doi:10.1007/s10916-009-9279-4 · Cited by 14 · see citing works
Ferris, T., Garrison, G. M., & Lowe, H. (2002) · PubMed · Cited by 13 · see citing works
Rights Management for Role-Based Access Control
Bouwman, B., Mauw, S., & Petković, M. (2008) · IEEE Consumer Communications and Networking Conference · doi:10.1109/ccnc08.2007.246 · Cited by 13 · see citing works
Applying a Threshold Scheme to the Pseudonymization of Health Data
Riedl, B., Grascher, V., & Neubauer, T. (2007) · Pacific Rim International Symposium on Dependable Computing · doi:10.1109/prdc.2007.24 · Cited by 13 · see citing works
Cognitive models in training health professionals to protect patients' confidential information
Patel, V. L. (2000) · International Journal of Medical Informatics · doi:10.1016/s1386-5056(00)00114-3 · Cited by 12 · see citing works
Disambiguation Data: Extracting Information from Anonymized Sources
Dreiseitl, S. (2002) · Journal of the American Medical Informatics Association · doi:10.1197/jamia.m1240 · Cited by 12 · see citing works
Clinician assessments of workplace security training - an informatics perspective
Fernando, J., & Dawson, L. (2008) · Research Online (University of Wollongong) · Cited by 11 · see citing works
The State of HIPAA Privacy and Security Compliance, 2006
Ahima (2006) · Cited by 10 · see citing works
SAMSON: Secure access for medical smart cards over networks
Hembroff, G. C., & Muftic, S. (2010) · IEEE International Symposium on a World of Wireless, Mobile and Multimedia Networks (WoWMoM) · doi:10.1109/wowmom.2010.5534982 · Cited by 10 · see citing works
Embedding a Hiding Function in a Portable Electronic Health Record for Privacy Preservation
Huang, L.-C., Chu, H.-C., Lien, C.-Y., Hsiao, C., & Kao, T. (2008) · Journal of Medical Systems · doi:10.1007/s10916-008-9243-8 · Cited by 9 · see citing works
Secure Personal Data Servers: a Vision Paper
Allard, T., Anciaux, N., Bouganim, L., Guo, Y., Folgoc, L. L., Nguyen, B., Pucheral, P., Ray, I., Ray, I., & Yin, S. (2010) · Cited by 8 · see citing works
A role-based delegation framework for healthcare information systems
Zhang, L., Ahn, G., & Chu, B.-T. B. (2002) · doi:10.1145/507729.507731 · Cited by 8 · see citing works
Discretionary Overriding of Access Control in the Privilege Calculus
Rissanen, E., Firozabadi, B. S., & Sergot, M. J. (2005) · Springer eBooks · doi:10.1007/0-387-24098-5_16 · Cited by 7 · see citing works
Digital signatures and the electronic health records: providing legal and security guarantees
Bos, J. J. (1996) · International Journal of Bio-Medical Computing · doi:10.1016/0020-7101(96)01195-6 · Cited by 7 · see citing works
Chief medical officer actions on information security in an Italian rehabilitation centre
Reni, G., Molteni, M., Arlotti, S., & Pinciroli, F. (2004) · International Journal of Medical Informatics · doi:10.1016/j.ijmedinf.2003.11.022 · Cited by 6 · see citing works
Lemaire, E. D., Deforge, D., Marshall, S., & Curran, D. (2006) · Computer Methods and Programs in Biomedicine · doi:10.1016/j.cmpb.2005.11.011 · Cited by 6 · see citing works
Purposes of health identification cards and role of a secure access platform (Be-Health) in Belgium
France, F. H. R., Bangels, M., & Clercq, E. D. (2006) · International Journal of Medical Informatics · doi:10.1016/j.ijmedinf.2006.10.003 · Cited by 5 · see citing works
Controlled EHR access in secured health information system
Al-zharani, S., Sarasvady, S., Chandra, H., & Pichappan, P. (2007) · International Conference on Digital Information Management · doi:10.1109/icdim.2007.369331 · Cited by 5 · see citing works
An electronic health record to support patients and institutions of the health care system.
Ückert, F., Müller, M. L., Bürkle, T., & Prokosch, H. (2004) · Europe PMC (PubMed Central) · Cited by 3 · see citing works
Internet security and privacy protection for the health care professional
Alban, R. F., Feldmar, D., Gabbay, J. S., & Lefor, A. K. (2005) · Current Surgery · doi:10.1016/j.cursur.2004.08.006 · Cited by 3 · see citing works
Embedding security into visual programming courses
Park, M. A. (2011) · Information Security Curriculum Development Conference (InfoSecCD) · doi:10.1145/2047456.2047469 · Cited by 2 · see citing works
Special Requirements of Electronic Medical Record Systems in Obstetrics and Gynecology
Bates, G. W. (2010) · Obstetrics and Gynecology · doi:10.1097/aog.0b013e3181f4aa96 · Cited by 2 · see citing works
Multi-centric Universal Pseudonymisation for Secondary Use of the EHR
Lo Iacono, L. (2007) · Publication Server of Bonn-Rhein-Sieg University of Applied Sciences (Bonn-Rhein-Sieg University of Applied Sciences) · Cited by 1 · see citing works
Flagged first, then by citations
4 of the 127 references couldn’t be matched to a known paper.
Research works printed but not linked: 5
- [3]3. Sainz-Abajo B, La-Torre-Díez I, Bermejo-González P, García-Salcines E, Díaz- Pernas J, Díez-Higuera JF, et al. Evolución, beneficios y obstáculos en la implantación del Historial Clínico Electrónico en el sistema sanitario. RevistaeSalud.com 2010;6(22):1-14.
- [52]52. J.L. Fernández-Alemán et al. / Journal of Biomedical Informatics 46 (2013) 541-562
- [81]81. ISI Journal Citation Reports (JCR); 2011. <http://www.accesowok.fecyt.es/jcr/ > [accessed 07.12.12].
- [82]82. SCImago Journal Rank (SJR); 2010. <http://www.scimagojr.com/ journalrank.php/> [accessed 07.12.12].
- [83]83. CORE. COmputing Research and Education; 2010. <http://core.edu.au/ index.php/categories/conference/%20rankings/1/> [accessed 07.12.12].
Cited by
Sorted by citations
A systematic review of gamification in e-Health
Sardi, L., Idri, A., & Fernández‐Alemán, J. L. (2017) · Journal of Biomedical Informatics · doi:10.1016/j.jbi.2017.05.011 · Cited by 1,041 · see citing works
Self-citationEmpirical Studies on Usability of mHealth Apps: A Systematic Literature Review
Zapata, B. C., Fernández-Alemán, J. L., Idri, A., & Toval, A. (2015) · Journal of Medical Systems · doi:10.1007/s10916-014-0182-2 · Cited by 585 · see citing works
“An SLR is a research technique that gathers all empirical evidence in a specific field of study [28].”
Self-citationAn exhaustive survey on security and privacy issues in Healthcare 4.0
Hathaliya, J. J., & Tanwar, S. (2020) · Computer Communications · doi:10.1016/j.comcom.2020.02.018 · Cited by 462 · see citing works
Blockchain Technology Use Cases in Healthcare
Zhang, P., Schmidt, D. C., White, J., & Lenz, G. (2018) · Advances in Computers · doi:10.1016/bs.adcom.2018.03.006 · Cited by 441 · see citing works
Shi, S., He, D., Li, L., Kumar, N., Khan, M. K., & Choo, K. R. (2020) · Computers & Security · doi:10.1016/j.cose.2020.101966 · Cited by 431 · see citing works
“…and patients medical data sharing) have also attracted the interest of the research community ( Boonstra et al., 2014; Car-valho et al., 2016; Crameri et al., 2020; Fernández-Alemán et al., 2013a; Ho et al., 2019; Lluch, 2011; Miah et al., 2019; Strudwick and Eyasu, 2015; Tovanich et al., 2020 ).”
Secure cloud-based EHR system using attribute-based cryptosystem and blockchain
Wang, H., & Song, Y. (2018) · Journal of Medical Systems · doi:10.1007/s10916-018-0994-6 · Cited by 409 · see citing works
Thapa, C., & Camtepe, S. A. (2020) · Computers in Biology and Medicine · doi:10.1016/j.compbiomed.2020.104130 · Cited by 424 · see citing works
Dynamic Consent: a potential solution to some of the challenges of modern biomedical research
Budin‐Ljøsne, I., Teare, H., Kaye, J. S., Beck, S., Bentzen, H. B., Caenazzo, L., Collett, C., D’Abramo, F., Felzmann, H., Finlay, T. M. D., et al. (2017) · BMC Medical Ethics · doi:10.1186/s12910-016-0162-9 · Cited by 387 · see citing works
“The technology to gather and securely store Dynamic Consent records can be developed so that it is durable despite rapid software advances and meets security expectations similar to requirements for electronic health records [60].”
BackgroundEthical implications of AI and robotics in healthcare: A review
Elendu, C., Amaechi, D. C., Elendu, T. C., Jingwa, K. A., Okoye, O. K., John Okah, M., Ladele, J. A., Farah, A. H., & Alimi, H. A. (2023) · Medicine · doi:10.1097/md.0000000000036671 · Cited by 370 · see citing works
A Review on the State-of-the-Art Privacy-Preserving Approaches in the e-Health Clouds
Abbas, A., & Khan, S. U. (2014) · IEEE Journal of Biomedical and Health Informatics · doi:10.1109/jbhi.2014.2300846 · Cited by 332 · see citing works
Rauniyar, A., Hagos, D. H., Jha, D., Håkegård, J. E., Bagci, U., Rawat, D. B., & Vlassov, V. (2024) · IEEE Internet of Things Journal · doi:10.1109/jiot.2023.3329061 · Cited by 315 · see citing works
“Moreover, the use of FL in the healthcare setting is subject to a variety of regulations which can vary from country to country [189].”
BackgroundA hybrid solution for privacy preserving medical data sharing in the cloud environment
Yang, J., Li, J., & Niu, Y. (2014) · Future Generation Computer Systems · doi:10.1016/j.future.2014.06.004 · Cited by 299 · see citing works
“According to [7], the most widely used regulations are the Health Insurance Portability and Accountability Act (HIPAA) and the European Data Protection Directive 95/46/EC.”
BackgroundMethodThreat modeling – A systematic literature review
Xiong, W., & Lagerström, R. (2019) · Computers & Security · doi:10.1016/j.cose.2019.03.010 · Cited by 284 · see citing works
Neural Natural Language Processing for unstructured data in electronic health records: A review
Li, I., Pan, J. N., Goldwasser, J., Verma, N., Wong, W. P., Nuzumlalı, M. Y., Rosand, B., Li, Y., Zhang, M. M., Chang, D., et al. (2022) · Computer Science Review · doi:10.1016/j.cosrev.2022.100511 · Cited by 262 · see citing works
A review of PHR, EMR and EHR integration: A more personalized healthcare and public health policy
Heart, T., Ben-Assuli, O., & Shabtai, I. (2017) · Health Policy and Technology · doi:10.1016/j.hlpt.2016.08.002 · Cited by 251 · see citing works
“To understand the risks involved in the exposure of medical records the way EHR, EMR and PHR as well as other personal data sources, intertwine and integrate need to be better understood [47].”
BackgroundHussien, H. M., Yasin, S. M., Udzir, S. N. I., Zaidan, A. A., & Zaidan, B. B. (2019) · Journal of Medical Systems · doi:10.1007/s10916-019-1445-8 · Cited by 256 · see citing works
Cloud-assisted secure ehealth systems for tamper-proofing EHR via blockchain
Cao, S., Zhang, G., Liu, P., Zhang, X., & Neri, F. (2019) · Information Sciences · doi:10.1016/j.ins.2019.02.038 · Cited by 245 · see citing works
“A more comprehensive survey on the eHealth security can be found in [16].”
BackgroundOn security challenges and open issues in Internet of Things
Sha, K., Wei, W., Yang, T. A., Wang, Z., & Shi, W. (2018) · Future Generation Computer Systems · doi:10.1016/j.future.2018.01.059 · Cited by 228 · see citing works
eHealth Cloud Security Challenges: A Survey
Al-Issa, Y., Ottom, M. A., & Tamrawi, A. (2019) · Journal of Healthcare Engineering · doi:10.1155/2019/7516035 · Cited by 222 · see citing works
“Furthermore, the strengths and weaknesses of the presented approaches are reported, and some open issues are highlighted [31] reports on the results of a systematic literature review concerning the security and privacy of EHR systems. eHealth system security and privacy concerns do not only deal…”
BackgroundTan, L., Yu, K., Shi, N., Yang, C., Wei, W., & Lu, H. (2021) · IEEE Transactions on Network Science and Engineering · doi:10.1109/tnse.2021.3101842 · Cited by 209 · see citing works
Publishing data from electronic health records while preserving privacy: A survey of algorithms
Gkoulalas-Divanis, A., Loukides, G., & Sun, J. (2014) · Journal of Biomedical Informatics · doi:10.1016/j.jbi.2014.06.002 · Cited by 203 · see citing works
“However, there are surveys in the computer science literature that do not focus on methods applicable to such data [39], as well as surveys that focus on privacy preservation methods for text data [94], privacy policies [91,93], or system security [36] issues.”
BackgroundEllahham, S., Ellahham, N., & Simsekler, M. C. E. (2020) · American Journal of Medical Quality · doi:10.1177/1062860619878515 · Cited by 177 · see citing works
“Some studies also indicated who should provide access to EHR data.(53) A recent study described ranges of features fundamental to the security and privacy of EHRs, such as access control, and compliance with security requirements, among others.”
Evaluation and selection of open-source EMR software packages based on integrated AHP and TOPSIS
Zaidan, A. A., Zaidan, B. B., Al-Haiqi, A., Kiah, M. L. M., Hussain, M., & Abdulnabi, M. S. H. (2014) · Journal of Biomedical Informatics · doi:10.1016/j.jbi.2014.11.012 · Cited by 185 · see citing works
“Access control, HIPAA compliance, and security of communication and data exchange are adopted from [46], based on security and privacy categories identified in the ISO 27799 standard [47].”
MethodDeepReco: Deep Learning Based Health Recommender System Using Collaborative Filtering
Sahoo, A. K., Pradhan, C., Barik, R. K., & Dubey, H. (2019) · Computation · doi:10.3390/computation7020025 · Cited by 184 · see citing works
Ben-Assuli, O. (2015) · Health Policy · doi:10.1016/j.healthpol.2014.11.014 · Cited by 175 · see citing works
Wearable devices in healthcare: Privacy and information security issues
Cilliers, L. (2020) · Health Information Management Journal · doi:10.1177/1833358319851684 · Cited by 169 · see citing works
“Confidentiality refers to the “‘process that ensures that information is accessible only to those authorised to have access to it” (Ferna´ndez-Alema´n et al., 2013: 542).”
BackgroundInfluentialPournaghi, S. M., Bayat, M., & Farjami, Y. (2020) · Journal of Ambient Intelligence and Humanized Computing · doi:10.1007/s12652-020-01710-y · Cited by 164 · see citing works
Emerging information technologies for enhanced healthcare
Yang, J., Li, J., Mulder, J., Wang, Y., Chen, S., Wu, H. L., Wang, Q., & Pan, H. (2015) · Computers in Industry · doi:10.1016/j.compind.2015.01.012 · Cited by 162 · see citing works
Privacy, confidentiality, security and patient safety concerns about electronic health records
Issa, W. B., Akour, I. A., Ibrahim, A., Marzouqi, A. M. A., Abbas, S., Hisham, F., & Griffiths, J. (2020) · International Nursing Review · doi:10.1111/inr.12585 · Cited by 168 · see citing works
Privacy Preservation in e-Healthcare Environments: State of the Art and Future Directions
Sahi, M. A., Abbas, H., Saleem, K., Yang, X., Derhab, A., Orgun, M. A., Iqbal, W., Rashid, I., & Yaseen, A. (2017) · IEEE Access · doi:10.1109/access.2017.2767561 · Cited by 159 · see citing works
“to ensure total privacy, as seen in figure 1 [13], [28].”
BackgroundChevrier, R., Foufi, V., Gaudet-Blavignac, C., Robert, A., & Lovis, C. (2019) · Journal of Medical Internet Research · doi:10.2196/13484 · Cited by 150 · see citing works
“…been published on the techniques and systems aiming at protecting health data privacy [13,14]; one has collected and studied the known re-identification attacks on health data [15], and another has looked specifically into the security and privacy issues related to electronic health records [16].”
Enhancing Security of Health Information Using Modular Encryption Standard in Mobile Cloud Computing
Shabbir, M., Shabbir, A., Iwendi, C., Javed, A. R., Rizwan, M., Herencsár, N., & Lin, J. C. (2021) · IEEE Access · doi:10.1109/access.2021.3049564 · Cited by 148 · see citing works
Research issues for privacy and security of electronic health services
Yüksel, B., Küpçü, A., & Özkasap, Ö. (2017) · Future Generation Computer Systems · doi:10.1016/j.future.2016.08.011 · Cited by 147 · see citing works
Secure Edge of Things for Smart Healthcare Surveillance Framework
Alabdulatif, A., Khalil, I., Yi, X., & Guizani, M. (2019) · IEEE Access · doi:10.1109/access.2019.2899323 · Cited by 140 · see citing works
“Privacy and security mechanisms, including authentication, authorization, anonymisation, access control and cryptography techniques, can be used as defense layers to preserve the privacy of sensitive healthcare data [20]–[22].”
BackgroundPapoutsi, C., Reed, J. E., Marston, C., Lewis, R., Majeed, A., & Bell, D. (2015) · BMC Medical Informatics and Decision Making · doi:10.1186/s12911-015-0202-2 · Cited by 137 · see citing works
“Background Information privacy and security issues have long been debated in the context of technological change and electronic databases in healthcare [1–5].”
BackgroundPreserving the Privacy of Electronic Health Records using Blockchain
Sharma, Y., & Balusamy, B. (2020) · Procedia Computer Science · doi:10.1016/j.procs.2020.06.021 · Cited by 135 · see citing works
Systematic Review on AI-Blockchain Based E-Healthcare Records Management Systems
Haddad, A., Habaebi, M. H., Islam, M. R., Hasbullah, N. F., & Zabidi, S. A. (2022) · IEEE Access · doi:10.1109/access.2022.3201878 · Cited by 147 · see citing works
Societal Issues Concerning the Application of Artificial Intelligence in Medicine
Vellido, A. (2018) · Kidney Diseases · doi:10.1159/000492428 · Cited by 134 · see citing works
“An interesting review on security and privacy in EHRs can be found in [21].”
BackgroundAlhammad, N. J., Alajlani, M., Abd-Alrazaq, A. A., Epiphaniou, G., & Arvanitis, T. N. (2024) · Journal of Medical Internet Research · doi:10.2196/50715 · Cited by 145 · see citing works
“A previous systematic review on the security and privacy of mHealth apps was conducted almost a decade ago and did not focus on any specific stakeholders [12].”
BackgroundThe impact of information security threat awareness on privacy-protective behaviors
Mamonov, S., & Benbunan‐Fich, R. (2018) · Computers in Human Behavior · doi:10.1016/j.chb.2018.01.028 · Cited by 126 · see citing works
Seol, K., Kim, Y., Lee, E., Seo, Y.-D., & Baik, D.-K. (2018) · IEEE Access · doi:10.1109/access.2018.2800288 · Cited by 113 · see citing works
“Fernández-Alemán et al. [23] selected the top papers in the field and analyzed the latest research trends.”
BackgroundPrivacy Preservation of Electronic Health Records in the Modern Era: A Systematic Survey
Nowrozy, R., Ahmed, K. E. U., Kayes, A. S. M., Wang, H., & McIntosh, T. R. (2024) · ACM Computing Surveys · doi:10.1145/3653297 · Cited by 117 · see citing works
“Standards’ Compliance: The recent cloud-based blockchain approaches suggested by multiple researches [14, 16, 18, 37, 41, 47, 48, 76, 91, 105, 134, 136, 139, 143] focus on blockchain implementation along with some standards.”
BackgroundMethodInfluentialEthical considerations for precision psychiatry: A roadmap for research and clinical practice
Fusar‐Poli, P., Manchia, M., Koutsouleris, N., Leslie, D., Woopen, C., Calkins, M. E., Dunn, M., Tourneau, C. L., Männikkö, M., Mollema, T., et al. (2022) · European Neuropsychopharmacology · doi:10.1016/j.euroneuro.2022.08.001 · Cited by 111 · see citing works
Privacy in electronic health records: a systematic mapping study
da Silva, R. R. T., Antunes, N., & de Morais, A. H. F. (2023) · Journal of Public Health · doi:10.1007/s10389-022-01795-z · Cited by 121 · see citing works
Xu, X., Zhu, P., Wen, Q., Jin, Z., Zhang, H., & He, L. (2013) · Journal of Medical Systems · doi:10.1007/s10916-013-9994-8 · Cited by 101 · see citing works
“Simultaneously, EMR transmitted between patients and the telecare server is confronting some new security and privacy threats [4].”
BackgroundA Systematic Literature Review of Agents Applied in Healthcare
Isern, D., & Moreno, A. (2015) · Journal of Medical Systems · doi:10.1007/s10916-015-0376-2 · Cited by 101 · see citing works
Introducing Care 4.0: An Integrated Care Paradigm Built on Industry 4.0 Capabilities
Chute, C., & French, T. (2019) · International Journal of Environmental Research and Public Health · doi:10.3390/ijerph16122247 · Cited by 100 · see citing works
“This would need to go beyond securing an electronic health record (EHR), which is the subject of the majority of discussion in this area [53], and this paper’s authors hope to stimulate secure but distributed trust architectures for community care.”
BackgroundDiffusion-based conditional ECG generation with structured state space models
Alcaraz, J. M. L., & Strodthoff, N. (2023) · Computers in Biology and Medicine · doi:10.1016/j.compbiomed.2023.107115 · Cited by 102 · see citing works
Cost-effective secure E-health cloud system using identity based cryptographic techniques
Wang, X. A., Ma, J., Xhafa, F., Zhang, M., & Luo, X. (2016) · Future Generation Computer Systems · doi:10.1016/j.future.2016.08.008 · Cited by 94 · see citing works
“[31] review carefully on the literature on EHRs, they discuss the current research state on security and privacy on E-health systems.”
BackgroundSurvey: Cybersecurity Vulnerabilities, Attacks and Solutions in the Medical Domain
Razaque, A., Amsaad, F., Khan, M. J., Hariri, S., Chen, S., Siting, C., & Ji, X. (2019) · IEEE Access · doi:10.1109/access.2019.2950849 · Cited by 88 · see citing works
“[141] reported the systematic literature review result focusing on the security and privacy of EHR systems.”
BackgroundAl-Mousa, M. R., Alazzam, M. B., Alsmadi, M. K., Almarashdeh, I., Alkhasawneh, R. A., & Alsmadi, S. (2018) · International Journal of Healthcare Management · doi:10.1080/20479700.2017.1420609 · Cited by 87 · see citing works
Berrouiguet, S., Barrigón, M. L., Castroman, J. L., Courtet, P., Artés-Rodríguez, A., & Baca-García, E. (2019) · BMC Psychiatry · doi:10.1186/s12888-019-2260-y · Cited by 84 · see citing works
Gray, C. S., Barnsley, J. M., Gagnon, D., Belzile, L., Kenealy, T. W., Shaw, J. C., Sheridan, N., Wankah, P., & Wodchis, W. P. (2018) · Implementation Science · doi:10.1186/s13012-018-0780-3 · Cited by 82 · see citing works
“Thorough consent and audit systems used in our cases are often recommended to ensure data security for shared patient EHR systems [57].”
BackgroundSharma, A., Rathee, G., Kumar, R., Saini, H., Varadarajan, V., Nam, Y., & Chilamkurti, N. (2019) · Sensors · doi:10.3390/s19092119 · Cited by 79 · see citing works
“It is thanks to researchers that they have been provided with better solutions to deal with this compromising situation [17].”
BackgroundCyber risk assessment in cloud provider environments: Current models and future needs
Akinrolabu, O., Nurse, J. R. C., Martin, A., & New, S. (2019) · Computers & Security · doi:10.1016/j.cose.2019.101600 · Cited by 79 · see citing works
Rezaeibagha, F., Win, K. T., & Susilo, W. (2015) · Health Information Management Journal · doi:10.1177/183335831504400304 · Cited by 77 · see citing works
“’ Fernández-Alemán et al. (2013) which addresses health information security to ensure the level of security that is appropriate to an organisation’s demands in order to maintain the confidentiality, integrity and availability of personal health information.”
BackgroundIntelligence-Based Health Recommendation System Using Big Data Analytics
Sahoo, A. K., Mallik, S., Pradhan, C., Mishra, B. S. P., Barik, R. K., & Das, H. (2019) · Elsevier eBooks · doi:10.1016/b978-0-12-818146-1.00009-x · Cited by 76 · see citing works
Open source EMR software: Profiling, insights and hands-on analysis
Kiah, M. L. M., Al-Haiqi, A., Zaidan, B. B., & Zaidan, A. A. (2014) · Computer Methods and Programs in Biomedicine · doi:10.1016/j.cmpb.2014.07.002 · Cited by 74 · see citing works
“Few standards began to outline those requirements, most notably the American Health Insurance Portability and Accountability Act (HIPAA) privacy rules in USA and the European Data Protection Directive 95/46/EC within the European Union [73].”
BackgroundMethodInfluentialA framework for effective corporate communication after cyber security incidents
Knight, R., & Nurse, J. R. C. (2020) · Computers & Security · doi:10.1016/j.cose.2020.102036 · Cited by 74 · see citing works
Christen, M., Gordijn, B., & Loi, M. (2020) · The International library of ethics, law and technology · doi:10.1007/978-3-030-29053-5 · Cited by 81 · see citing works
RETRACTED: Health Recommendation System using Deep Learning-based Collaborative Filtering
Chinnasamy, P., Wong, W., Raja, A. A., Khalaf, O. I., Kiran, A., & Babu, J. C. (2023) · Heliyon · doi:10.1016/j.heliyon.2023.e22844 · Cited by 73 · see citing works
“Traditionally, information-gathering parameters were used to analyze decision support systems [23,39].”
MethodRetractedMajeed, A. (2018) · Journal of King Saud University - Computer and Information Sciences · doi:10.1016/j.jksuci.2018.03.014 · Cited by 74 · see citing works
Conditional Anonymous Remote Healthcare Data Sharing Over Blockchain
Liu, J., Jiang, W., Sun, R. X., Bashir, A. K., Alshehri, M. D., Hua, Q., & Yu, K. (2022) · IEEE Journal of Biomedical and Health Informatics · doi:10.1109/jbhi.2022.3183397 · Cited by 72 · see citing works
“build their own medical system servers to save patients’ EMRs in [11], [12].”
BackgroundMobile personal health records for pregnancy monitoring functionalities: Analysis and potential
Bachiri, M., Idri, A., Fernández‐Alemán, J. L., & Toval, A. (2016) · Computer Methods and Programs in Biomedicine · doi:10.1016/j.cmpb.2016.06.008 · Cited by 68 · see citing works
“Therefore, it should be protected by at least two out of the following three authentication methods [56]: (1) asking the patient for something that she knows, such as the classical username and password [57,58]; (2) asking the patient for something that she owns, such as a physical token that may need external devices…”
MethodSelf-citationThe risk of re-identification versus the need to identify individuals in rare disease research
HANSSON, M. G., Lochmüller, H., Rieß, O., Schaefer, F. S., Orth, M., Rubinstein, Y., Molster, C. M., Dawkins, H. J. S., Taruscio, D., de la Paz, M. P., et al. (2016) · European Journal of Human Genetics · doi:10.1038/ejhg.2016.52 · Cited by 69 · see citing works
Kanwal, T., Anjum, A., & Khan, A. (2020) · Cluster Computing · doi:10.1007/s10586-020-03106-1 · Cited by 68 · see citing works
“6 concludes the review alongside future directions.”
Anderson, C. S., Baskerville, R., & Kaul, M. (2017) · Journal of Management Information Systems · doi:10.1080/07421222.2017.1394063 · Cited by 65 · see citing works
“Fundamental goals for information security include the confidentiality, availability, and integrity of data and the development of controls to support those goals [3, 21].”
BackgroundPatil, S., Lu, H., Saunders, C. L., Potoglou, D., & Robinson, N. (2016) · Journal of the American Medical Informatics Association · doi:10.1093/jamia/ocw012 · Cited by 64 · see citing works
“There are strong concerns that anonymized patient records can be uniquely identified,(48) and there have been reported high-profile lapses in security for electronic health information(16,49) (along with findings from this work that health care providers are not perceived as successful in preventing unauthorized acces…”
BackgroundA Systematic Literature Review on Privacy by Design in the Healthcare Sector
Semantha, F. H., Azam, S., Yeo, K. C., & Shanmugam, B. (2020) · Electronics · doi:10.3390/electronics9030452 · Cited by 63 · see citing works
De-identification of electronic health record using neural network
Ahmed, T., Aziz, M. M. A., & Mohammed, N. (2020) · Scientific Reports · doi:10.1038/s41598-020-75544-1 · Cited by 62 · see citing works
Free Web-based Personal Health Records: An Analysis of Functionality
Fernández‐Alemán, J. L., Llor, C. L. S., Toval, A., Ouhbi, S., & Fernández-Luque, L. (2013) · Journal of Medical Systems · doi:10.1007/s10916-013-9990-z · Cited by 62 · see citing works
“More sophisticated methods such as biometric factors specific to the user involve high deployment costs and additional hardware costs [80].”
MethodSelf-citationDesigning cloud-based electronic health record system with attribute-based encryption
Xhafa, F., Li, J., Zhao, G., Li, J., Chen, X., & Wong, D. S. (2015) · Multimedia Tools and Applications · doi:10.1007/s11042-013-1829-6 · Cited by 76 · see citing works
Balancing confidentiality and care coordination: challenges in patient privacy
Ibrahim, A. M., Abdel‐Aziz, H. R., Mohamed, H. A. H., Zaghamir, D. E. F., Wahba, N. M. I., Hassan, G. A., Shaban, M., El-Nablaway, M., Aldughmi, O. N., & Aboelola, T. H. (2024) · BMC Nursing · doi:10.1186/s12912-024-02231-1 · Cited by 75 · see citing works
Puppala, M., He, T., Yu, X., Chen, S., Ogunti, R., & Wong, S. T. C. (2016) · IEEE-EMBS International Conference on Biomedical and Health Informatics (BHI ...) · doi:10.1109/bhi.2016.7455821 · Cited by 61 · see citing works
“These days, data analysts in most healthcare organizations are more interested in collecting and studying new types and sources of underleveraged data, such as mobile health, sensor networks, emails and social media, in addition to the electronic health record (EHR) data.”
BackgroundAl-Zubaidie, M., Zhang, Z., & Zhang, J. (2019) · International Journal of Environmental Research and Public Health · doi:10.3390/ijerph16091490 · Cited by 60 · see citing works
“Therefore, EHR systems require mechanisms to ensure the privacy of patients’ data while protecting authorisation policies and healthcare provider requests [15].”
BackgroundZhuang, Y., Chen, Y.-W., Shae, Z., & Shyu, C. (2020) · Journal of Medical Internet Research · doi:10.2196/19029 · Cited by 60 · see citing works
“Second, the health care industry is still unreceptive to allowing patient data to move across the blockchain network [12].”
BackgroundMethodFree Blood Donation Mobile Applications
Ouhbi, S., Fernández‐Alemán, J. L., Toval, A., Idri, A., & Pozo, J. R. (2015) · Journal of Medical Systems · doi:10.1007/s10916-015-0228-0 · Cited by 59 · see citing works
Self-citationAnalysis of health professional security behaviors in a real clinical setting: An empirical study
Fernández‐Alemán, J. L., Sánchez-Henarejos, A., Toval, A., García, A. B. S., Hernández-Hernández, I., & Fernández-Luque, L. (2015) · International Journal of Medical Informatics · doi:10.1016/j.ijmedinf.2015.01.010 · Cited by 58 · see citing works
Self-citationDigital health eco-systems: An epochal review of practice-oriented research
Stephanie, F. L., & Sharma, R. (2019) · International Journal of Information Management · doi:10.1016/j.ijinfomgt.2019.10.017 · Cited by 60 · see citing works
Marcos, C., González-Ferrer, A., Mor Peleg, B., & Cavero, C. (2015) · Journal of the American Medical Informatics Association · doi:10.1093/jamia/ocv003 · Cited by 56 · see citing works
Health Information System Role-Based Access Control Current Security Trends and Challenges
de Carvalho, M. A., & Bandiera‐Paiva, P. (2018) · Journal of Healthcare Engineering · doi:10.1155/2018/6510249 · Cited by 56 · see citing works
“In the following year, their next publication accounted for 27 articles out of 49 while searching for security and privacy in EHR when reporting the use of RBAC as authorization method [13].”
BackgroundElectronic Health Record Monitoring System and Data Security Using Blockchain Technology
Hasib, K. T. A. M., Chowdhury, I., Sakib, S., Khan, M. M., Alsufyani, N., Alsufyani, A., & Bourouis, S. (2022) · Security and Communication Networks · doi:10.1155/2022/2366632 · Cited by 58 · see citing works
“In [13], the authors showed that the International Data Encryption Standard Algorithm (IDEA) with salt will be used to protect patient-sensitive data during transmission.”
BackgroundRetractedHealth data security and privacy: Challenges and solutions for the future
Yigzaw, K. Y., Olabarriaga, S. D., Michalas, A., Marco-Ruiz, L., Hillen, C., Verginadis, Y., de Oliveira, M. T., Krefting, D., Penzel, T., Bowden, J., et al. (2022) · Elsevier eBooks · doi:10.1016/b978-0-12-823413-6.00014-8 · Cited by 59 · see citing works
Securing Electronic Health Record System in Cloud Environment Using Blockchain Technology
Murala, D. K., Panda, S. K., & Sahoo, S. K. (2023) · Intelligent systems reference library · doi:10.1007/978-3-031-22835-3_4 · Cited by 51 · see citing works
Shrivastava, U., Song, J., Han, B. T., & Dietzman, D. (2021) · International Journal of Medical Informatics · doi:10.1016/j.ijmedinf.2021.104401 · Cited by 51 · see citing works
Yang, Y., Zheng, X., Liu, X., Zhong, S., & Chang, V. I. C. (2017) · Future Generation Computer Systems · doi:10.1016/j.future.2017.06.025 · Cited by 50 · see citing works
Smart City and Smart-Health Framework, Challenges and Opportunities
Al-Azzam, M. K. A., & Alazzam, M. B. (2019) · International Journal of Advanced Computer Science and Applications · doi:10.14569/ijacsa.2019.0100223 · Cited by 50 · see citing works
“In addition, various attempts are contributed towards the privacy protection in heath, Trust- worthy Health and Wellness (THaW) is one of the representative projects in this context [7][13].”
BackgroundFontelo, P. A., Rossi, E., Ackerman, M., & Marceglia, S. R. F. (2015) · Applied Clinical Informatics · doi:10.4338/aci-2014-12-ra-0115 · Cited by 49 · see citing works
“This includes Confidentiality (access protection), Integrity (maintenance of data accuracy), Availability (data accessible upon demand), Accountability (responsibility on data content) and Disaster Recovery [24,25].”
BackgroundBerrouiguet, S., Ramírez, D., Barrigón, M. L., Moreno-Muñoz, P., Camacho, R. C., Baca‐García, E., & Artés-Rodrı́guez, A. (2018) · JMIR mhealth and uhealth · doi:10.2196/mhealth.9472 · Cited by 46 · see citing works
“Another major concern regarding personal electronic data is data security [22].”
BackgroundSecure Healthcare Record Sharing Mechanism with Blockchain
Butt, G. Q., Syed, T. A., Riaz, R., Rizvi, S. S., & Paul, A. (2022) · Applied Sciences · doi:10.3390/app12052307 · Cited by 49 · see citing works
An Infrastructure Framework for Remote Patient Monitoring Interventions and Research
Claggett, J. L., Petter, S., Joshi, A. M., Ponzio, T. A., & Kirkendall, E. S. (2024) · Journal of Medical Internet Research · doi:10.2196/51234 · Cited by 55 · see citing works
“Additionally, the implementation of access control mechanisms can help ensure that only authorized users can access and share patient data, further safeguarding privacy [56].”
BackgroundBarrett, A. K. (2017) · Health Communication · doi:10.1080/10410236.2016.1278506 · Cited by 48 · see citing works
RSA based encryption approach for preserving confidentiality of big data
Sharma, K., Agrawal, A., Pandey, D., Khan, R. A., & Dinkar, S. K. (2019) · Journal of King Saud University - Computer and Information Sciences · doi:10.1016/j.jksuci.2019.10.006 · Cited by 48 · see citing works
Synergy of AI and Blockchain to Secure Electronic Healthcare Records
Rathore, N., Kumari, A., Patel, M., Chudasama, A. S., Bhalani, D., Tanwar, S., & Alabdulatif, A. (2024) · Security and Privacy · doi:10.1002/spy2.463 · Cited by 47 · see citing works
Trust and Reputation Management in Healthcare Systems: Taxonomy, Requirements and Open Issues
Jabeen, F., Hamid, Z., Akhunzada, A., Abdul, W., & Ghouzali, S. (2018) · IEEE Access · doi:10.1109/access.2018.2810337 · Cited by 47 · see citing works
“, Hard Trust) [21], [31], [43], [44] and that emphasize the benefits of trust, which can be established using non-cryptographic techniques [36], [44], [45].”
BackgroundInfluentialA study of cyber attacks: In the healthcare sector
Bhosale, K. S., Nenova, M., & Iliev, G. (2021) · Junior Conference on Lighting (Lighting) · doi:10.1109/lighting49406.2021.9598947 · Cited by 45 · see citing works
The ethical challenges of personalized digital health
Maeckelberghe, E. L. M., Zdunek, K., Marceglia, S. R. F., Farsides, B., & Rigby, M. (2023) · Frontiers in Medicine · doi:10.3389/fmed.2023.1123863 · Cited by 46 · see citing works
Lee, S., Kim, J., Kwon, Y., Kim, T., & Cho, S. (2022) · Journal of Medical Internet Research · doi:10.2196/29108 · Cited by 47 · see citing works
“Moreover, as the EMR-sharing process is performed by a third-party data center or cloud service provider, personal information of the patient can be exposed [24-26].”
BackgroundA Survey of Big Data Issues in Electronic Health Record Analysis
Cyganek, B., Graña, M., Krawczyk, B., Kasprzak, A., Porwik, P., Walkowiak, K. M., & Woźniak, M. (2016) · Applied Artificial Intelligence · doi:10.1080/08839514.2016.1193714 · Cited by 44 · see citing works
“An important aspect of the health record system is to ensure the confidentiality of the patient personal data (Fernandez-Aleman et al. 2013).”
BackgroundTrust assessment of security for e-health systems
Bahtıyar, Ş., & Çağlayan, M. U. (2013) · Electronic Commerce Research and Applications · doi:10.1016/j.elerap.2013.10.003 · Cited by 42 · see citing works
“…or seek medical care for certain sensitive conditions if they cannot trust that their personal health information will be managed with high level of confidentiality (Avancha et al. 2012, Martí et al. 2013, Appari and Johnson 2010, Haas et al. 2011, Trcek and Brodnik 2013, Alemán et al. 2013).”
Background
- Authors
- Fernández-Alemán, J. L., Señor, I. C., Lozoya, P. Á. O., & Toval, A.
- Affiliations
- Universidad de Murcia (ES)
- Corresponding author
- Señor, Inmaculada Carrión
- ORCID
- Toval, Ambrosio
- Venue
- Journal of Biomedical Informatics
- Publisher
- Elsevier BV
- Published
- 2013-06
- Volume
- 46
- Issue
- 3
- Pages
- 541-562
- ISSN
- 1532-0464 (ISSN-L)
- OpenAlex
- W2128232860
- Cited by
- 675
- References
- 127
- Citations by year
- 2026: 23 · 2025: 39 · 2024: 72 · 2023: 59 · 2022: 46 · 2021: 59 · 2020: 57 · 2019: 82 · 2018: 57 · 2017: 48 · 2016: 56 · 2015: 38 · 2014: 29 · 2013: 10
- FWCI
- 7.79
- Type
- journal article
- Language
- en
- Open access
- bronze
- doi.org
- Licence
- Locations
- Journal of Biomedical Informatics (publishedVersion)
- PubMed (publishedVersion)
- Funders
- Spanish Ministry of Science and Technology (TIN2009-13718-C02-01, TIN2009-13718-C02-02)
- Topics
- Health Sciences › Health Professions › Health Information Management › Electronic Health Records Systems
- Social Sciences › Sociology and Political Science › Access Control and Trust
- Physical Sciences › Computer Science › Information Systems › Thoreau and American Literature
- Keywords
- electronic health records, health information security, privacy, HIPAA, Data Protection Directive 95/46/EC, public key infrastructure, digital signatures, pseudo-anonymity, role-based access control, access control, audit logging, user authentication
- MeSH terms
- Europe, United States, Computer Security, Privacy, Health Insurance Portability and Accountability Act, Electronic Health Records
About these checks
Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.
Statistics and arithmetic are recomputed, not judged.
Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.
What counts as a claim ›How we measure confidence ›How we check this ›
Are you an author, or do you see a problem with this page? Request a review
