The DOI matches its Crossref record; 123 of the 127 references it cites were found in a registry or an index.
Security and privacy in electronic health records: a systematic literature review.
Open accessAbstract
Objective To report the results of a systematic literature review concerning the security and privacy of electronic health record (EHR) systems.Data sources Original articles written in English found in MEDLINE, ACM Digital Library, Wiley InterScience, IEEE Digital Library, Science@Direct, MetaPress, ERIC, CINAHL and Trip Database.Study selection Only those articles dealing with the security and privacy of EHR systems.Data extraction The extraction of 775 articles using a predefined search string, the outcome of which was reviewed by three authors and checked by a fourth.Results A total of 49 articles were selected, of which 26 used standards or regulations related to the privacy and security of EHR data. The most widely used regulations are the Health Insurance Portability and Accountability Act (HIPAA) and the European Data Protection Directive 95/46/EC. We found 23 articles that used symmetric key and/or asymmetric key schemes and 13 articles that employed the pseudo anonymity technique in EHR systems. A total of 11 articles propose the use of a digital signature scheme based on PKI (Public Key Infrastructure) and 13 articles propose a login/password (seven of them combined with a digital certificate or PIN) for authentication. The preferred access control model appears to be Role-Based Access Control (RBAC), since it is used in 27 studies. Ten of these studies discuss who should define the EHR systems' roles. Eleven studies discuss who should provide access to EHR data: patients or health entities. Sixteen of the articles reviewed indicate that it is necessary to override defined access policies in the case of an emergency. In 25 articles an audit-log of the system is produced. Only four studies mention that system users and/or health staff should be trained in security and privacy.Conclusions Recent years have witnessed the design of standards and the promulgation of directives concerning security and privacy in EHR systems. However, more work should be done to adopt these regulations and to deploy secure EHR systems.
Overview
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Integrity signals
Registry
Cites
Statistics
Verification
Claims the paper makes
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Claims other papers make about this one
Each is checked against this paper’s own text: does it say what the citing paper says it does?
The check wasn’t confident either way, so it gives no verdict — never disputed.
In the citing paper
“Integrating Artificial Intelligence (AI) and robotics in healthcare heralds a new era of medical innovation, promising enhanced diagnostics, streamlined processes, and improved patient care.”
From Ethical implications of AI and robotics in healthcare: A review (2023) · cites this paper as [1]
Experimental — accuracy not yet measured
Self-check
Percentages, sums and reported differences re-computed from the paper’s own numbers.
The self-check needs the paper’s full text.
Citations
Cites
Liberati, A., Altman, D. G., Tetzlaff, J., Mulrow, C., Gøtzsche, P. C., Ioannidis, J. P. A., Clarke, M., Devereaux, P. J., Kleijnen, J., & Moher, D. (2009) · PLoS Medicine · doi:10.1371/journal.pmed.1000100 · Cited by 28,164
Shamir, A. (1979) · Communications of the ACM · doi:10.1145/359168.359176 · Cited by 13,756
Liberati, A., Altman, D. G., Tetzlaff, J., Mulrow, C., Gøtzsche, P. C., Ioannidis, J. P. A., Clarke, M., Devereaux, P. J., Kleijnen, J., & Moher, D. (2009) · Journal of Clinical Epidemiology · doi:10.1016/j.jclinepi.2009.06.006 · Cited by 10,578
k-ANONYMITY: A MODEL FOR PROTECTING PRIVACY
SWEENEY, L. (2002) · International Journal of Uncertainty, Fuzziness and Knowledge-Based Systems · doi:10.1142/s0218488502001648 · Cited by 8,571
Ciphertext-Policy Attribute-Based Encryption
Bethencourt, J., Sahai, A., & Waters, B. (2007) · 2007 IEEE Symposium on Security and Privacy (SP '07) · doi:10.1109/sp.2007.11 · Cited by 5,131
Proposed NIST standard for role-based access control
Ferraiolo, D. F., Sandhu, R. S., Gavrila, S. I., Kuhn, D. R., & Chandramouli, R. (2001) · ACM Transactions on Information and System Security · doi:10.1145/501978.501980 · Cited by 2,553
Certificateless Public Key Cryptography
Al-Riyami, S. S., & Paterson, K. G. (2003) · Lecture notes in computer science · doi:10.1007/978-3-540-40061-5_29 · Cited by 2,218
Role of Computerized Physician Order Entry Systems in Facilitating Medication Errors
Koppel, R. (2005) · JAMA · doi:10.1001/jama.293.10.1197 · Cited by 2,126
Westin, A. F. (1967) · Cited by 1,908
Westin, A. F. (1970) · CERN Document Server (European Organization for Nuclear Research) · Cited by 1,861
Flagged first, then by citations
4 of the 127 references couldn’t be matched to a known paper.
Research works printed but not linked: 4
- Sainz-Abajo, 2010, Evolución, beneficios y obstáculos en la implantación del Historial Clínico Electrónico en el sistema sanitario, RevistaeSalud.com, 6, 1
- ISI Journal Citation Reports (JCR); 2011. <http://www.accesowok.fecyt.es/jcr/> [accessed 07.12.12].
- SCImago Journal Rank (SJR); 2010. <http://www.scimagojr.com/journalrank.php/> [accessed 07.12.12].
- CORE. COmputing Research and Education; 2010. <http://core.edu.au/index.php/categories/conference/%20rankings/1/> [accessed 07.12.12].
Cited by
Sorted by citations
Items 201–300 of 674
Information hiding methods for E-Healthcare
Sajedi, H., & Yaghobi, S. R. (2019) · Smart Health · doi:10.1016/j.smhl.2019.100104 · Cited by 19
The Role of Big Data Analytics in Revolutionizing Diabetes Management and Healthcare Decision-Making
Nauman, M. A., Almadhor, A. S., Albekairi, M., Ansari, A. R., Fayyaz, M. A. B., & Nawaz, R. (2025) · IEEE Access · doi:10.1109/access.2025.3526456 · Cited by 21
Weber, K., & Kleine, N. (2020) · The International library of ethics, law and technology · doi:10.1007/978-3-030-29053-5_7 · Cited by 18
Pedrosa, M., Zúquete, A., & Costa, C. M. A. (2020) · IEEE Journal of Biomedical and Health Informatics · doi:10.1109/jbhi.2020.3028454 · Cited by 18
“Knowing the pair (cid:7) W, Y r (cid:8) , then P id = W − y − 1 × Y r , another DLP for y − 1 .”
BackgroundMethodInfluentialSeh, A. H., Al‐Amri, J. F., Subahi, A. F., Agrawal, A., Pathak, N., Kumar, R., & Khan, R. A. (2021) · Computer Modeling in Engineering & Sciences · doi:10.32604/cmes.2022.018163 · Cited by 18
Protection of Medical Information Systems Against Cyber Attacks: A Graph Theoretical Approach
Angel, D. (2022) · Wireless Personal Communications · doi:10.1007/s11277-022-09873-x · Cited by 18
“1 3 Security and privacy in EHRs can be seriously threatened by hackers, viruses, and worms [9] (see Fig.”
BackgroundData Security in Healthcare: Enhancing the Safety of Data with CyberSecurity
Puri, M., & Gochhait, S. (2023) · International Conference on Communication and Electronics Systems (ICCES) · doi:10.1109/icces57224.2023.10192596 · Cited by 18
“…[33 Recover: Create and implement efforts to maintain resilience strategies and restore service performance that a cybersecurity event has impacted [33] The present study proposes a new cybersecurity framework which will help the large and small healthcare organizations deal with unsupported…”
BackgroundHenriksson, A., Dalianis, H., & Kowalski, S. J. (2014) · IEEE International Conference on Bioinformatics and Biomedicine (BIBM) · doi:10.1109/bibm.2014.6999199 · Cited by 18
“While ensuring the security and privacy of EHR systems is important in itself [11], and is in most countries regulated by law, it also affects the possibility of using the data they contain for research purposes.”
BackgroundTransparent Medical Data Systems
Spagnuelo, D., & Lenzini, G. (2016) · Journal of Medical Systems · doi:10.1007/s10916-016-0653-8 · Cited by 18
“vacy issues [12]; giving patients control over their health information [30]; and “[to] allow patients to grant access to specific portions of their health data” [32].”
BackgroundAbdelhamid, M. (2018) · Journal of Biomedical Informatics · doi:10.1016/j.jbi.2018.06.002 · Cited by 18
“This paper integrates trust and privacy concerns in the UTAUT model because they have been identified as main factors affecting the use of health information technologies [22,23].”
BackgroundMultiple‐replica integrity auditing schemes for cloud data storage
Lin, Y., Li, J., Jia, X., & Ren, K. (2019) · Concurrency and Computation Practice and Experience · doi:10.1002/cpe.5356 · Cited by 18
Saluvan, M., & Ozonoff, A. (2018) · BMC Medical Informatics and Decision Making · doi:10.1186/s12911-018-0581-2 · Cited by 19
“Reasons for this high adoption may include the importance of privacy and data security in the healthcare setting [52, 53]; pressure on laboratories to satisfy ongoing quality audits and maintain licensing or certification; or recommendations from MoH [54–56].”
BackgroundElectronic Health Records: Challenges and Opportunities
Shah, J. R., Murtaza, M. B., & Opara, E. U. (2014) · Journal of international technology and information management · doi:10.58729/1941-6679.1082 · Cited by 19
“As clinical staff, administrative staff, and management staff may require access to patients’ EHRs, the use of role-based access control is appropriate as it enables definition of permissions and restrictions based on the role of the staff member (Fernandez-Aleman et al., 2013).”
BackgroundIntegration of Federated Learning and Blockchain in Healthcare: A TutorialPreprint
Shahsavari, Y., Dambri, O. A., Baseri, Y., Hafid, A. S., & Makrakis, D. (2024) · doi:10.36227/techrxiv.171340632.25905526/v1 · Cited by 20
Mukred, M., & Yusof, Z. M. (2018) · International Journal of Information Technology Project Management · doi:10.4018/ijitpm.2018070103 · Cited by 25
Static checking of GDPR-related privacy compliance for object-oriented distributed systems
Tokas, S., Owe, O., & Ramezanifarkhani, T. (2021) · Journal of Logical and Algebraic Methods in Programming · doi:10.1016/j.jlamp.2021.100733 · Cited by 25
Subramanian, H., Sengupta, A., & Xu, Y. (2024) · Journal of Medical Internet Research · doi:10.2196/59674 · Cited by 17
Electronic Health Record Security Based on Ensemble Classification of Keystroke Dynamics
Wesołowski, T. E., Porwik, P., & Doroz, R. (2016) · Applied Artificial Intelligence · doi:10.1080/08839514.2016.1193715 · Cited by 18
“These important patient private data are considered as especially sensitive, therefore, they should be extremely well protected (Fernández-Alemán et al. 2013; Gunter and Terry 2005).”
BackgroundAnonymous Data Sharing Scheme in Public Cloud and Its Application in E-Health Record
Wang, H. (2018) · IEEE Access · doi:10.1109/access.2018.2838095 · Cited by 17
“In 2013, Fernandez-Aleman et al. [28] gave the systematic literature review on security and privacy in electronic health records.”
BackgroundIdentity-Based Auditing for Shared Cloud Data With Efficient and Secure Sensitive Information Hiding
Yu, F., Liao, Y., Li, F., Zhou, S., & Zhang, G. (2019) · IEEE Access · doi:10.1109/access.2019.2932430 · Cited by 17
“1, where Electronic Health Records(EHRs) [1], which are extensively used in hospitals and hold the characteristics of shared data.”
BackgroundGefen, D., Ben‐Assuli, O., Stehr, M. F., Rosen, B., & Denekamp, Y. (2019) · European Journal of Information Systems · doi:10.1080/0960085x.2019.1666038 · Cited by 17
“…for technical, psychological, and organisational barriers (Boonstra & Broekhuis, 2010) as well as to allow the organisation to adapt to the new system (Gagnon et al., 2014) and deal with regulatory issues (Angst & Agarwal, 2009; Fernández-Alemán et al., 2013; Haas et al., 2011; Singh et al., 2012).”
BackgroundApplication of Intelligent Multi Agent Based Systems For E-Healthcare Security
Khan, Z. F., & Reyad, O. (2019) · Information Sciences Letters · doi:10.18576/isl/080204 · Cited by 17
“Then, a novel agent based system for providing the security and privacy for EHR data is also proposed.”
InfluentialA survey on security attacks in electronic healthcare systems
Priya, R., Sivasankaran, S., Ravisasthiri, P., & Sivachandiran, S. (2017) · doi:10.1109/iccsp.2017.8286448 · Cited by 17
“[1,2] Nowadays, maintaining the patient’s health information confidentially is a challenging tasks due to the technological growth and some of the vulnerabilities present in the system.”
BackgroundConstantinides, A., Belk, M., Fidas, C. A., Beumers, R., Vidal, D. G., Huang, W., Bowles, J., Webber, T., Silvina, A., & Pitsillides, A. (2022) · ACM Transactions on Computing for Healthcare · doi:10.1145/3564610 · Cited by 20
“For example, Jayabalan and O’Daniel [56] and Fernández-Alemán et al. [41] reported a study on authentication factors in electronic health records.”
BackgroundA Survey on Cyber Risk Management for the Internet of Things
Parsons, E. K., Panaousis, E., Loukas, G., & Sakellari, G. (2023) · Applied Sciences · doi:10.3390/app13159032 · Cited by 20
Secure electronic medical records sharing scheme based on blockchain and quantum key
Zhu, D., Sun, Y., Li, N., Song, L., & Zheng, J. (2023) · Cluster Computing · doi:10.1007/s10586-023-04110-x · Cited by 16
Adesemowo, A. K. (2020) · Computers & Security · doi:10.1016/j.cose.2020.102131 · Cited by 16
Ilhan, A., & Fietkiewicz, K. J. (2020) · Aslib Journal of Information Management · doi:10.1108/ajim-03-2020-0067 · Cited by 16
Sun, Z., Chen, T., Meng, X., Bao, Y., Hu, L., & Zhao, R. (2023) · Sustainability · doi:10.3390/su15086389 · Cited by 18
Hamdi, H., Brahmi, Z., Alaerjan, A., & Mhamdi, L. (2023) · IEEE Access · doi:10.1109/access.2023.3285407 · Cited by 16
“Therefore, preserving and securing personal or sensitive information in medical data [47] remains an important topic especially in data sharing environment in cloud-assisted health systems [48] where the frequency of privacy leaks and security threats is relatively high.”
BackgroundIntegrated personal health record (PHR) security: requirements and mechanisms
Hosseini, A., Emami, H., Sadat, Y., & Paydar, S. (2023) · BMC Medical Informatics and Decision Making · doi:10.1186/s12911-023-02225-0 · Cited by 15
“The most common authentication mechanisms in health records include the use of usernames and passwords [52] that achieved agreement in the pres-ent study, along with biometric scans (fingerprints, face, hands, retina).”
BackgroundKuo, R. (2018) · Health Policy and Technology · doi:10.1016/j.hlpt.2018.10.012 · Cited by 15
Panwar, A., & Bhatnagar, V. (2021) · Soft Computing · doi:10.1007/s00500-021-06513-7 · Cited by 15
RetractedHybrid Solution for Privacy-Preserving Access Control for Healthcare Data
Smithamol, M. B., & Sridhar, R. (2017) · Advances in Electrical and Computer Engineering · doi:10.4316/aece.2017.02005 · Cited by 15
Next-generation UWB antennas gadgets for human health care using SAR
Ali, A. M., Ghamdi, M. A. A., Iqbal, M. M., Khalid, S., Aldabbas, H., & Saeed, S. (2021) · EURASIP Journal on Wireless Communications and Networking · doi:10.1186/s13638-021-01906-6 · Cited by 15
Platt, M., Hasselgren, A., Román-Belmonte, J. M., de Oliveira, M. T., la Corte‐Rodríguez, H. D., Olabarriaga, S. D., Rodriguez-Merchan, E. C., & Mackey, T. K. (2021) · JMIR Public Health and Surveillance · doi:10.2196/26460 · Cited by 15
“Rules around data audit and system access that in centralized systems are commonly enforced by role-based access control mechanisms [107] could also be executed through smart contracts [108].”
BackgroundJamali, M. A. J., Bahrami, B., Heidari, A., Allahverdizadeh, P., & Norouzi, F. (2019) · EAI/Springer Innovations in Communication and Computing · doi:10.1007/978-3-030-18468-1_3 · Cited by 15
A Systematic Analysis of Security Metrics for Industrial Cyber–Physical Systems
Gori, G., Rinieri, L., Melis, A., Sadi, A. A., Callegati, F., & Prandini, M. (2024) · Electronics · doi:10.3390/electronics13071208 · Cited by 14
“Multivocal literature review (MLR): Used by Fernandez et al. [15], that consists of exploring the academic and gray literature, using the snowballing process and filtering them with a multi-step approach.”
MethodDynamic keystroke pattern analysis and classifiers with competence for user recognition
Porwik, P., Doroz, R., & Wesołowski, T. E. (2020) · Applied Soft Computing · doi:10.1016/j.asoc.2020.106902 · Cited by 14
BYOD, Personal Area Networks (PANs) and IOT: Threats to Patients Privacy
Ahmed, S. (2019) · Springer proceedings in complexity · doi:10.1007/978-3-030-30809-4_36 · Cited by 14
Asokan, S. P., Nadar, E. R. S., & Selvaperumal, S. (2019) · Current Medical Imaging Formerly Current Medical Imaging Reviews · doi:10.2174/1573405615666190408115158 · Cited by 14
Measuring quality in primary healthcare – opportunities and weaknesses
Arvidsson, E., Dijkstra, R. F., & Klemenc–Ketiš, Z. (2019) · Slovenian Journal of Public Health · doi:10.2478/sjph-2019-0013 · Cited by 14
“Personal health data from patient records should always be used in a way that guarantees patients’ privacy and confidentiality in the doctor-patient relationship (6).”
BackgroundA service-based RBAC & MAC approach incorporated into the FHIR standard
Sánchez, Y. K. R., Demurjian, S. A., & Baihan, M. (2019) · Digital Communications and Networks · doi:10.1016/j.dcan.2019.10.004 · Cited by 14
Continuous m-Health Data Authentication Using Wavelet Decomposition for Feature Extraction
Enamamu, T., Otebolaku, A., Marchang, J., & Joy, D. (2020) · Sensors · doi:10.3390/s20195690 · Cited by 14
“Smartphone capability is on the increase, this includes its application for a variety of activities including data collection and processing [13].”
BackgroundMethodZhukabayeva, T. K., Rehman, A. U., Tariq, N., & Benkhelifa, E. (2024) · IEEE Access · doi:10.1109/access.2024.3513153 · Cited by 15
“EHRs have revolutionized healthcare by enabling digital data storage and controlled data access, resulting in improved efficiency and quality of care [1], [2].”
Managing the Security of Nursing Data in the Electronic Health Record
Samadbeik, M., Gorzin, Z., Khoshkam, M., & Roudbari, M. (2015) · Acta Informatica Medica · doi:10.5455/aim.2015.23.39-43 · Cited by 13
“Data was collected by a self-developed questionnaire which was made using the results of a systematic review on security and privacy in electronic health records (13) and expert consensus.”
BackgroundMethodLe, X. H., Doll, T., Barbosu, M., Luque, A. E., & Wang, D. (2013) · Journal of Biomedical Informatics · doi:10.1016/j.jbi.2013.11.007 · Cited by 13
“reviewed the security and privacy mechanisms used in electronic health records, including features such as access control models, general approaches for access management, and emergency access [44].”
BackgroundSingh, A., & Dutta, M. K. (2016) · International Journal of Electronic Security and Digital Forensics · doi:10.1504/ijesdf.2016.079452 · Cited by 13
Understanding health information management practices in public hospitals in Kuwait
Alhuwail, D. (2020) · Health Information Management Journal · doi:10.1177/1833358319837247 · Cited by 15
“Adopting EHRs with the appropriate privacy and security mechanisms in place would be an effective solution (Fernández-Alemán et al., 2013).”
MethodEthico-Legal Issues With Humanoid Caring Robots and Older Adults in Japan
Yasuhara, Y., Tanioka, R., Tanioka, T., Ito, H., & Tsujigami, Y. (2019) · International Journal for Human Caring · doi:10.20467/1091-5710.23.2.141 · Cited by 13
Privacy in the age of Pervasive Internet and Big Data Analytics – Challenges and Opportunities
Graduate Student, D. O. C., Punagin, S., & Arya, A. (2015) · International Journal of Modern Education and Computer Science · doi:10.5815/ijmecs.2015.07.05 · Cited by 13
Enhanced Architecture for Privacy Preserving Data Integration in a Medical Research Environment
Jabeen, F., Hamid, Z., Abdul, W., Ghouzali, S., Malik, S. U. R., Khan, A., Nawaz, S., & Ghafoor, H. (2017) · IEEE Access · doi:10.1109/access.2017.2707584 · Cited by 13
“The work [23], [24] reviews existing literature using different cryptographic approaches to enforce privacy.”
BackgroundBig Data: Challenge and Opportunity for Translational and Industrial Research in Healthcare
Rossi, R. L., & Grifantini, R. (2018) · Frontiers in Digital Humanities · doi:10.3389/fdigh.2018.00013 · Cited by 16
“Considered the many issues that data sharing and privacy pose and technical approaches to address them (Raychaudhuri and Ray, 2010; Fernández-Alemán et al., 2013; Omotosho and Emuoyibofarhe, 2014), we like to point at the fact that, like any data-intensive discipline, biomedical research is now being considered a subj…”
BackgroundA Clark-Wilson and ANSI role-based access control model
Tsegaye, T., & Flowerday, S. (2020) · Information and Computer Security · doi:10.1108/ics-08-2019-0100 · Cited by 13
Tsegaye, T., & Flowerday, S. (2021) · South African Computer Journal · doi:10.18489/sacj.v33i1.838 · Cited by 13
“The confidentiality of the EHR is ensured since access control prevents the disclosure of patient information to unauthorised entities while also ensuring that it is only modified by authorised clinicians, thus maintaining its integrity (Fernández-Alemán et al., 2013).”
BackgroundA Post-Quantum Consortium Blockchain Based Secure EHR Framework
Bansal, A., Arju, Esha, & Mehra, P. S. (2023) · International Conference on IoT, Communication and Automation Technology (ICICAT) · doi:10.1109/icicat57735.2023.10263717 · Cited by 15
“The healthcare sector is among the most delicate fields that needs a high level of security and a confidential environment for managing Electronic Health Records (EHR) [2].”
BackgroundEdge-DPSDG: An Edge-Based Differential Privacy Protection Model for Smart Healthcare
Lyu, M., Ni, Z., Chen, Q., & Li, F. (2024) · IEEE Transactions on Big Data · doi:10.1109/tbdata.2024.3366071 · Cited by 14
Health Informatics as a Service (HIaaS) for Developing Countries
Paul, M., & Das, A. (2017) · Studies in big data · doi:10.1007/978-3-319-49736-5_11 · Cited by 12
Evaluation of Commercial Next-Generation Sequencing Bioinformatics Software Solutions
Gullapalli, R. R. (2019) · Journal of Molecular Diagnostics · doi:10.1016/j.jmoldx.2019.09.007 · Cited by 12
“Health care IT systems increasingly face the key decision of locating patient data internally versus in the cloud.(8,22,24) NGS bioinformatic solutions generate a similar dilemma for clinical laboratories.”
BackgroundUsers’ Adoption of National Digital Identity Systems: Human-Centric Cybersecurity Review
Hilowle, M., Yeoh, W., Grobler, M. M., Pye, G., & Jiang, F. (2022) · Journal of Computer Information Systems · doi:10.1080/08874417.2022.2140089 · Cited by 14
Healthcare employees' perception on information privacy concerns
Rahim, F. A., Ismail, Z., & Samy, G. N. (2017) · International Conference on Research and Innovation in Information Systems · doi:10.1109/icriis.2017.8002498 · Cited by 12
Cloud E-health Systems: A Survay on Security Challenges and Solutions
Kamoona, M. A., & Altamimi, A. M. (2018) · doi:10.1109/csit.2018.8486167 · Cited by 13
Khajouei, R., Jahromi, M. E., & Ameri, A. (2019) · Journal of Medical Systems · doi:10.1007/s10916-019-1319-0 · Cited by 12
Toll, E., Alkureishi, M. A., Lee, W. W., Babbott, S. F., Bain, P. A., Beasley, J. W., Frankel, R. M., Loveys, A. A., Wald, H. S., Woods, S. S., et al. (2019) · JAMIA Open · doi:10.1093/jamiaopen/ooz012 · Cited by 12
Calvillo‐Arbizu, J., Román, I., & Roa-Romero, L. M. (2014) · IEEE-EMBS International Conference on Biomedical and Health Informatics (BHI ...) · doi:10.1109/bhi.2014.6864421 · Cited by 12
“The RBAC model is particularly interesting since organizational roles can be assigned to subjects, and access privileges are related to roles instead of directly to subjects, easing management 978-1-4799-2131-7/14/$31.00 ©2014 IEEE 539 tasks and scalability.”
BackgroundInfluentialAnonymous Two-Factor Authentication: Certain Goals Are Beyond Attainment.Preprint
Cheon, J. H., Fouque, P.-A., Lee, C., Minaud, B., & Ryu, H. (2014) · IACR Cryptology ePrint Archive · Cited by 12
Improving Clinical Decision Making With a Two-Stage Recommender System
Raza, S., & Ding, C. (2023) · IEEE Transactions on Computational Biology and Bioinformatics · doi:10.1109/tcbb.2023.3318209 · Cited by 16
“Patient data is sensitive and protected by privacy laws, which makes it challenging to access and use for research purposes [50].”
BackgroundInception of the Indian Digital Health Mission: Connecting…the…Dots
Raj, G. M., Dananjayan, S., & Agarwal, N. (2023) · Health care science · doi:10.1002/hcs2.67 · Cited by 11
“The ultimate purpose is to make the available EMR ‐ EHR ‐ PHR data more usable [11] and stakeholder ‐ friendly [12], yet confidential [13].”
Backgroundda Silva, R. R. T., Ivaki, N., & de Morais, A. H. F. (2024) · IEEE Access · doi:10.1109/access.2024.3441751 · Cited by 11
“According to the literatures [12], [30], and [50], an SRA layered architecture for EHRs should include the following principal components: Data Management Layer, Healthcare Logic Layer, Presentation Layer, Security Requirement Layer, and Privacy Requirement Layer.”
BackgroundAnonymous cross-domain authentication scheme for medical PKI system
Dong, G., Chen, Y., Jia, F., Bai, J., Zhang, P., & Li, F. (2019) · ACM Turing Celebration Conference - China (ACM TURC) · doi:10.1145/3321408.3321574 · Cited by 11
“Authentication protocol uses a two-way authentication mechanism to prevent parallel session attacks[14,15].”
BackgroundMethodA Multi-Threshold Ant Colony System-based Sanitization Model in Shared Medical Environments
Wu, J. M., Srivastava, G., Lin, J. C., & Teng, Q. (2021) · ACM Transactions on Internet Technology · doi:10.1145/3408296 · Cited by 11
Yari, I. A., Dehling, T., Kluge, F., Geck, J., Sunyaev, A., & Eskofier, B. M. (2021) · Journal of Medical Internet Research · doi:10.2196/24460 · Cited by 11
“An effective IAS addresses security issues such as Sybil attacks, poisoning attacks, pollution attacks, and MitM attacks [65,81,140] and is essential for health care information systems [2,30].”
BackgroundInfluentialA New Approach for Secure Cloud-Based Electronic Health Record and its Experimental Testbed
Jusak, J., Mahmoud, S. S., Laurens, R., Alsulami, M., & Fang, Q. (2021) · IEEE Access · doi:10.1109/access.2021.3138135 · Cited by 11
“However, the existing security and privacy techniques do not offer adequate protection for healthcare services [13]–[15].”
BackgroundFactors Influencing Adoption of Mobile Health Monitoring System: Extending UTAUT2 with Trust
Azeez, N. D., & Mohammed, N. Y. (2022) · Ingénierie des systèmes d information · doi:10.18280/isi.270206 · Cited by 15
“The eHealth System is a new paradigm for mainstream computing to provide high-quality health care backed by electronic health data and communications processing [20].”
BackgroundPrivacy-preserving emergency access control for personal health records
Thummavet, P., & Vasupongayya, S. (2015) · Cited by 11
Evaluation of a proximity card authentication system for health care settings
Fontaine, J., Zheng, K., van de Ven, C., Li, H., Hiner, J., Mitchell, K., Gendler, S., & Hanauer, D. A. (2016) · International Journal of Medical Informatics · doi:10.1016/j.ijmedinf.2016.04.015 · Cited by 11
Searchable Encryption: A Review
Chamili, K., Nordin, M. J., Ismail, W., & Radman, A. (2017) · International Journal of Security and Its Applications · doi:10.14257/ijsia.2017.11.12.07 · Cited by 11
Jahan, S., Chowdhury, M., & Islam, R. (2018) · International Journal of Computers and Applications · doi:10.1080/1206212x.2018.1437651 · Cited by 11
“In general, traditional authentication methods are not based on inherent individual attributes [8].”
BackgroundDesign of a human-centric de-identification framework for utilizing various clinical research data
Lee, J., Jung, J., Park, P., Chung, S., & Cha, H. (2018) · Human-Centric Computing and Information Sciences · doi:10.1186/s13673-018-0142-9 · Cited by 10
Robust fingerprint verification for enhancing security in healthcare system
Jahan, S., Chowdhury, M., & Islam, R. (2017) · International Conference on Image and Vision Computing New Zealand (IVCNZ) · doi:10.1109/ivcnz.2017.8402502 · Cited by 11
“Healthcare professionals require ready access to as much information as possible to support informed decision making [5].”
BackgroundData Security and Privacy Issues in Healthcare
Bajrić, S. (2020) · DOAJ (DOAJ: Directory of Open Access Journals) · Cited by 11
A Survey on Privacy Preservation in Fog-Enabled Internet of Things
Sarwar, K., Yongchareon, S., Yu, J., & Rehman, S. U. (2021) · ACM Computing Surveys · doi:10.1145/3474554 · Cited by 11
“Recommendations from [18–20, 23, 24] emphasize that robust privacy-preserving algorithms, including lightweight attribute-based encryption and fully homomorphic techniques, should be applied to IoT application data in cloud.”
BackgroundInfluentialKissi, J., Adzakpah, G., Mensah, N. K., Dzamvivie, K., Bosompem, T. A., Adu, V. W., & Amoah-Anomah, G. (2024) · Digital Health · doi:10.1177/20552076241260385 · Cited by 10
“27 Fernández-Alemán et al. 27 went on to say that failing to log out of DHT systems poses signi fi cant security threats.”
BackgroundBig Data and Oral Health Disparities: A Critical Appraisal
Tiwari, T., Patel, J. S., & Nascimento, G. G. (2024) · Journal of Dental Research · doi:10.1177/00220345241285847 · Cited by 10
Use of Blockchain Technology to Protect Privacy in Electronic Health Records- A Review
Ansari, M. F., Dash, B., Swayamsiddha, S., & Panda, G. (2023) · International Conference on Intelligent Data Communication Technologies and Internet of Things (IDCIoT) · doi:10.1109/idciot56793.2023.10053417 · Cited by 10
“[10] The need to adequately preserve the records and safeguard patients' confidentiality from unauthorized parties has thus become necessary during the past few decades.”
BackgroundDeepa, V. V., Thamotharan, B., Mahto, D., Rajendiran, P., Sriram, A. L., & Chandramohan, K. P. (2023) · Soft Computing · doi:10.1007/s00500-023-08893-4 · Cited by 10
“Blockchain’s smallest unit Block consists of three parts, namely the data of the transaction, the hash—unique ID of the block, and the hash ID of the previous block (Ferna´ndez-Alema´n et al. 2013).”
RetractedImage De-Identification Methods for Clinical Research in the XDS Environment
Aryanto, K. Y. E., van Kernebeek, G., Berendsen, B., Oudkerk, M., & van Ooijen, P. M. A. (2016) · Journal of Medical Systems · doi:10.1007/s10916-016-0431-7 · Cited by 10
“Several other methods are being investigated to be developed and provide a better protection to the patient data [18] In order to keep the de-identification information well secured, a mapping database pointing to the origin of the images should be stored in such a way or place that only authorized…”
MethodLiterature Survey on Technologies for Developing Privacy-Aware Software
Hazeyama, A., Washizaki, H., Yoshioka, N., Kaiya, H., & Okubo, T. (2016) · IEEE International Requirements Engineering Conference Workshops (REW) · doi:10.1109/rew.2016.029 · Cited by 10
Williams, K. S., Shah, G. H., Leider, J. P., & Gupta, A. (2017) · eGEMs (Generating Evidence & Methods to improve patient outcomes) · doi:10.13063/egems.1291 · Cited by 10
Bibliometric Mapping of Research on User Training for Secure Use of Information Systems
Fujs, D., Vrhovec, S. L. R., & Vavpotič, D. (2020) · JUCS - Journal of Universal Computer Science · doi:10.3897/jucs.2020.042 · Cited by 11
A Blockchain-Assisted Electronic Medical Records by Using Proxy Reencryption and Multisignature
Liu, X., Yan, J. H., Shan, S.-Q., & Wu, R. (2022) · Security and Communication Networks · doi:10.1155/2022/6737942 · Cited by 10
Electronic Medical Record Implementation Challenges for the National Health System in Greece
Katehakis, D. G. (2017) · International Journal of Reliable and Quality E-Healthcare · doi:10.4018/ijrqeh.2018010102 · Cited by 10
de Carvalho, M. A., & Bandiera‐Paiva, P. (2017) · IEEE International Carnahan Conference on Security Technology (ICCST) · doi:10.1109/ccst.2017.8167833 · Cited by 10
“A number of authors points administrative functions as sensitive portion of access-control for SoD achievement[3][6][7][8][13].”
BackgroundPrivacy Preservation of Electronic Health Record: Current Status and Future Direction
Kumar, A., & Kumar, R. (2019) · Springer eBooks · doi:10.1007/978-3-030-22277-2_28 · Cited by 10
Yesmin, T., & Carter, M. W. (2020) · International Journal of Medical Informatics · doi:10.1016/j.ijmedinf.2020.104123 · Cited by 10
Special Issue on The Internet of Things (IoT): Informatics Methods for IoT-enabled Health Care
(2016) · Journal of Biomedical Informatics · doi:10.1016/j.jbi.2016.09.008 · Cited by 10
Sharma, D., Prabha, C., Gupta, D., Juneja, S., Abd‐Elnaby, M., Alraddady, F. A., & Nauman, A. (2024) · IEEE Access · doi:10.1109/access.2024.3467167 · Cited by 10
“Electronic Health Records (EHR) such as X-rays, Magnetic Resonance Imaging (MRIs), Computed Tomography (CT)- Scan, and patient records [1], [2] are maintained and collected The associate editor coordinating the review of this manuscript and approving it for publication was Vishal Srivastava. by…”
Orchestrating differential data access for translational research: a pilot implementation
Brandizi, M., Melnichuk, O., Bild, R., Kohlmayer, F., Rodriguez-Castro, B., Spengler, H., Kuhn, K. A., Kuchinke, W., Ohmann, C., Mustonen, T., et al. (2017) · BMC Medical Informatics and Decision Making · doi:10.1186/s12911-017-0424-6 · Cited by 9
“…the other hand, dealing with biomedical information, and with human patient data in particular, poses complex challenges with respect to ethical, legal and social implications (ELSI [13, 14]), which need to be addressed when software products are developed and IT infrastructures deployed [15, 16].”
BackgroundMeyer, D., Kernebeck, S., Busse, T. S., Ehlers, J. P., Wager, J., Zernikow, B., & Dreier, L. A. (2021) · Children · doi:10.3390/children8030249 · Cited by 9
“Confidentiality refers to the fact that the data can only be viewed by authorized persons [25,26].”
BackgroundInfluentialNowrozy, R., Ahmed, K. E. U., & Wang, H. (2025) · PLoS ONE · doi:10.1371/journal.pone.0310553 · Cited by 12
Metadata
- Authors
- Fernández-Alemán, J. L., Señor, I. C., Lozoya, P. Á. O., & Toval, A.
- Affiliations
- Universidad de Murcia (ES)
- Corresponding author
- Señor, Inmaculada Carrión
- ORCID
- Toval, Ambrosio
- Venue
- Journal of Biomedical Informatics
- Publisher
- Elsevier BV
- Published
- 2013-06
- Volume
- 46
- Issue
- 3
- Pages
- 541-562
- ISSN
- 1532-0464 (ISSN-L)
- OpenAlex
- W2128232860
- Cited by
- 675
- References
- 127
- Citations by year
- 2026: 23 · 2025: 39 · 2024: 72 · 2023: 59 · 2022: 46 · 2021: 59 · 2020: 57 · 2019: 82 · 2018: 57 · 2017: 48 · 2016: 56 · 2015: 38 · 2014: 29 · 2013: 10
- FWCI
- 7.79
- Type
- journal article
- Language
- en
- Open access
- bronze
- doi.org
- Licence
- Locations
- Journal of Biomedical Informatics (publishedVersion)
- PubMed (publishedVersion)
- Funders
- Spanish Ministry of Science and Technology (TIN2009-13718-C02-01, TIN2009-13718-C02-02)
- Topics
- Health Sciences › Health Professions › Health Information Management › Electronic Health Records Systems
- Physical Sciences › Computer Science › Computer Networks and Communications › Access Control and Trust
- Health Sciences › Health Professions › Health Information Management › Thoreau and American Literature
- Keywords
- electronic health records, health information security, privacy, HIPAA, Data Protection Directive 95/46/EC, public key infrastructure, digital signatures, pseudo-anonymity, role-based access control, access control, audit logging, user authentication
- MeSH terms
- Europe, United States, Computer Security, Privacy, Health Insurance Portability and Accountability Act, Electronic Health Records
About these checks
Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.
Statistics and arithmetic are recomputed, not judged.
Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.
What counts as a claim ›How we measure confidence ›How we check this ›
Are you an author, or do you see a problem with this page? Request a review
