The DOI matches its Crossref record; 123 of the 127 references it cites were found in a registry or an index.
Security and privacy in electronic health records: a systematic literature review.
Open accessAbstract
Objective To report the results of a systematic literature review concerning the security and privacy of electronic health record (EHR) systems.Data sources Original articles written in English found in MEDLINE, ACM Digital Library, Wiley InterScience, IEEE Digital Library, Science@Direct, MetaPress, ERIC, CINAHL and Trip Database.Study selection Only those articles dealing with the security and privacy of EHR systems.Data extraction The extraction of 775 articles using a predefined search string, the outcome of which was reviewed by three authors and checked by a fourth.Results A total of 49 articles were selected, of which 26 used standards or regulations related to the privacy and security of EHR data. The most widely used regulations are the Health Insurance Portability and Accountability Act (HIPAA) and the European Data Protection Directive 95/46/EC. We found 23 articles that used symmetric key and/or asymmetric key schemes and 13 articles that employed the pseudo anonymity technique in EHR systems. A total of 11 articles propose the use of a digital signature scheme based on PKI (Public Key Infrastructure) and 13 articles propose a login/password (seven of them combined with a digital certificate or PIN) for authentication. The preferred access control model appears to be Role-Based Access Control (RBAC), since it is used in 27 studies. Ten of these studies discuss who should define the EHR systems' roles. Eleven studies discuss who should provide access to EHR data: patients or health entities. Sixteen of the articles reviewed indicate that it is necessary to override defined access policies in the case of an emergency. In 25 articles an audit-log of the system is produced. Only four studies mention that system users and/or health staff should be trained in security and privacy.Conclusions Recent years have witnessed the design of standards and the promulgation of directives concerning security and privacy in EHR systems. However, more work should be done to adopt these regulations and to deploy secure EHR systems.
Overview
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Integrity signals
Registry
Cites
Statistics
Verification
Claims the paper makes
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Claims other papers make about this one
Each is checked against this paper’s own text: does it say what the citing paper says it does?
The check wasn’t confident either way, so it gives no verdict — never disputed.
In the citing paper
“Integrating Artificial Intelligence (AI) and robotics in healthcare heralds a new era of medical innovation, promising enhanced diagnostics, streamlined processes, and improved patient care.”
From Ethical implications of AI and robotics in healthcare: A review (2023) · cites this paper as [1]
Experimental — accuracy not yet measured
Self-check
Percentages, sums and reported differences re-computed from the paper’s own numbers.
The self-check needs the paper’s full text.
Citations
Cites
Liberati, A., Altman, D. G., Tetzlaff, J., Mulrow, C., Gøtzsche, P. C., Ioannidis, J. P. A., Clarke, M., Devereaux, P. J., Kleijnen, J., & Moher, D. (2009) · PLoS Medicine · doi:10.1371/journal.pmed.1000100 · Cited by 28,164
Shamir, A. (1979) · Communications of the ACM · doi:10.1145/359168.359176 · Cited by 13,756
Liberati, A., Altman, D. G., Tetzlaff, J., Mulrow, C., Gøtzsche, P. C., Ioannidis, J. P. A., Clarke, M., Devereaux, P. J., Kleijnen, J., & Moher, D. (2009) · Journal of Clinical Epidemiology · doi:10.1016/j.jclinepi.2009.06.006 · Cited by 10,578
k-ANONYMITY: A MODEL FOR PROTECTING PRIVACY
SWEENEY, L. (2002) · International Journal of Uncertainty, Fuzziness and Knowledge-Based Systems · doi:10.1142/s0218488502001648 · Cited by 8,571
Ciphertext-Policy Attribute-Based Encryption
Bethencourt, J., Sahai, A., & Waters, B. (2007) · 2007 IEEE Symposium on Security and Privacy (SP '07) · doi:10.1109/sp.2007.11 · Cited by 5,131
Proposed NIST standard for role-based access control
Ferraiolo, D. F., Sandhu, R. S., Gavrila, S. I., Kuhn, D. R., & Chandramouli, R. (2001) · ACM Transactions on Information and System Security · doi:10.1145/501978.501980 · Cited by 2,553
Certificateless Public Key Cryptography
Al-Riyami, S. S., & Paterson, K. G. (2003) · Lecture notes in computer science · doi:10.1007/978-3-540-40061-5_29 · Cited by 2,218
Role of Computerized Physician Order Entry Systems in Facilitating Medication Errors
Koppel, R. (2005) · JAMA · doi:10.1001/jama.293.10.1197 · Cited by 2,126
Westin, A. F. (1967) · Cited by 1,908
Westin, A. F. (1970) · CERN Document Server (European Organization for Nuclear Research) · Cited by 1,861
Research works printed but not linked: 4
- Sainz-Abajo, 2010, Evolución, beneficios y obstáculos en la implantación del Historial Clínico Electrónico en el sistema sanitario, RevistaeSalud.com, 6, 1
- ISI Journal Citation Reports (JCR); 2011. <http://www.accesowok.fecyt.es/jcr/> [accessed 07.12.12].
- SCImago Journal Rank (SJR); 2010. <http://www.scimagojr.com/journalrank.php/> [accessed 07.12.12].
- CORE. COmputing Research and Education; 2010. <http://core.edu.au/index.php/categories/conference/%20rankings/1/> [accessed 07.12.12].
Cited by
Sorted by citations
Items 301–400 of 674
Privacy Preserving Architecture for Healthcare Information Systems
Zalloum, M., & Alamleh, H. (2020) · IEEE International Conference on Communication, Networks and Satellite (COMNETSAT) · doi:10.1109/comnetsat50391.2020.9328985 · Cited by 9
Gong, J., Sihag, V., Kong, Q., & Zhao, L. (2021) · JMIR Medical Informatics · doi:10.2196/31142 · Cited by 9
“The importance of these technical issues has been well supported by other systematic reviews [6,16,59,60].”
BackgroundResultUML/OCL-based modeling of work-based access control policies for collaborative healthcare systems
Abomhara, M., & Lazrag, M. B. (2016) · IEEE International Conference on e-Health Networking, Applications and Services (Healthcom) · doi:10.1109/healthcom.2016.7749461 · Cited by 9
“Many research efforts have been devoted to designing specific access control models [12], [13].”
BackgroundMaintaining Integrity and Non-Repudiation in Secure Offline Documents
Shatnawi, A. S., Munson, E. V., & Thao, C. (2017) · ACM Symposium on Document Engineering (DocEng) · doi:10.1145/3103010.3121038 · Cited by 9
“Considerable research has been published on providing secure access control and updates in a distributed, cooperative environment for online tree-structured documents such as XML [3, 4].”
BackgroundArtificial Intelligence and Machine Learning in Healthcare Sector
Chavda, V. P., Patel, K., Patel, S. H., & Apostolopoulos, V. (2023) · Wiley eBooks · doi:10.1002/9781119865728.ch13 · Cited by 11
Mastering Electronic Health Record in Global Health Care
Kasemsap, K. (2016) · Advances in healthcare information systems and administration book series · doi:10.4018/978-1-5225-0920-2.ch014 · Cited by 8
Chatterjee, A., Shahaab, A., Gerdes, M. W., Martínez, S., & Khatiwada, P. (2021) · Elsevier eBooks · doi:10.1016/b978-0-12-822844-9.00044-x · Cited by 8
B-SSMD: A Fine-Grained Secure Sharing Scheme of Medical Data Based on Blockchain
Yuan, J., Ma, Y., Luo, W., & Han, G. (2022) · Security and Communication Networks · doi:10.1155/2022/2719951 · Cited by 8
“Te current information security issues in electronic medical systems are mainly to solve the secure collection, transmission, application, and sharing of information in a highly heterogeneous network environment [2].”
BackgroundA Decentralized Architecture for Semantic Interoperability of Personal Dental Data Based on FHIR
Lebredo, H., Fernández-Álvarez, D., & Gayo, J. E. L. (2023) · International Journal on Semantic Web and Information Systems · doi:10.4018/ijswis.333633 · Cited by 8
Özçağdavul, M. (2024) · Artuklu Health · doi:10.58252/artukluhealth.1566573 · Cited by 8
Electronic Medical Records: Friends or Foes?
Ries, M. D. (2013) · Clinical Orthopaedics and Related Research · doi:10.1007/s11999-013-3367-y · Cited by 8
“A systematic review of security of EMR identified significant variability and inadequacies of techniques for privacy protection [10].”
BackgroundPrivacy and Trust in eHealth: A Fuzzy Linguistic Solution for Calculating the Merit of Service
Ruotsalainen, P. S., Blobel, B. G. M. E., & Pohjolainen, S. A. (2022) · Journal of Personalized Medicine · doi:10.3390/jpm12050657 · Cited by 9
IBE_TRUST authentication for e-Health mobile monitoring system
Kamarudin, N. H., Yussoff, Y. M., & Hashim, H. (2015) · IEEE Symposium on Computer Applications & Industrial Electronics (ISCAIE) · doi:10.1109/iscaie.2015.7298348 · Cited by 8
“Most of the eHealth system secure their database using the username and password scheme authentication [4][5] and there are also several mobile-health system that do not focus in details on the authentication scheme for their e-Health system [6][7][8][9].”
BackgroundA decade of security research in ubiquitous computing: results of a systematic literature review
Kušen, E., & Strembeck, M. (2016) · International Journal of Pervasive Computing and Communications · doi:10.1108/ijpcc-03-2016-0018 · Cited by 8
“Alemn et al. (2013) give an overview of security and privacy for electronic health records.”
BackgroundA Linguistic Approach to Information Security Awareness Education in a Healthcare Environment
Drevin, L., Kruger, H., Bell, A.-M., & Steyn, T. (2017) · IFIP advances in information and communication technology · doi:10.1007/978-3-319-58553-6_8 · Cited by 8
“An informative overview of the security and privacy of electronic health records, based on a systematic literature review, is presented in Fernandez-Aleman et al. [11].”
Vulnerabilities detection using attack recognition technique in multi-factor authentication
Ariffin, N. A. M., Rahim, F. A., Asmawi, A., & Ibrahim, Z.-A. (2020) · TELKOMNIKA (Telecommunication Computing Electronics and Control) · doi:10.12928/telkomnika.v18i4.14898 · Cited by 8
Alzghaibi, H. (2019) · doi:10.23889/suthesis.52386 · Cited by 7
Marletta, D., Midolo, A., & Tramontana, E. (2025) · Future Internet · doi:10.3390/fi17050210 · Cited by 9
“…including the management of electronic health records (EHR) and patient data [2–4], emergency medical services [5,6], patient-centric data sharing [7,8], integration with IoT devices [9], clinical research [10,11], healthcare security and audit processes [12–15], and medical data sharing [15–17].”
Sanitizable signature scheme with privacy protection for electronic medical data sharing
Xu, Z., Luo, M., Peng, C., & Feng, Q. (2023) · Cyber Security and Applications · doi:10.1016/j.csa.2023.100018 · Cited by 7
Wabo, G. K., Prasser, F., Gierend, K., Siegel, F., & Ganslandt, T. (2023) · JMIR Research Protocols · doi:10.2196/46471 · Cited by 6
“By following up on the systematic review of Fernández-Alemán et al [37], revealing the necessity of complementary work concerning the security and privacy of EHR data systems, and the investigation by Majeed and Lee [1], presenting the quantification of both utility and privacy of anonymized…”
Koddebusch, M., Koelmann, H., Friedrich, O., & Becker, J. (2023) · Annual International Conference on Digital Government Research · doi:10.1145/3598469.3598519 · Cited by 7
“Other studies regard trust as one main factor for the acceptance of e-Government services, e.g., Titah and Barki [58], or identify security and privacy issues to influence trust in such services [21].”
BackgroundWu, J., Tsai, Y.-Y., Chen, Y.-J., Hsiao, F., Hsu, C., Lin, K., & Liao, L. (2024) · Medical & Biological Engineering & Computing · doi:10.1007/s11517-024-03209-6 · Cited by 9
“The privacy and security of digital data can be protected through collaboration between the government, platform builders, and users [147].”
A reversible crypto-watermarking system for secure medical image transmission
Babu, A., & Ayyappan, S. (2015) · IEEE India Conference · doi:10.1109/indicon.2015.7443277 · Cited by 7
Recomendações para a proteção da privacidade do paciente
Carvalhal, G. F., Poli, M. E. H., Clementel, F. K., Gauer, G. J. C., Marques, G. H., da Silveira, I. G., Piccoli, J. M., Pithan, L. H., Guilhermano, L. G., Ferreira, M., et al. (2017) · Revista Bioética · doi:10.1590/1983-80422017251164 · Cited by 8
The promise of natural language processing in healthcare
Attrey, R., & Levit, A. (2019) · University of Western Ontario Medical Journal · doi:10.5206/uwomj.v87i2.1152 · Cited by 7
“1,27,28 As long as NLP can improve healthcare quality and access, measures should be taken to implement NLP safely and ethically.”
BackgroundThe Feasibility and Significance of Employing Blockchain-Based Identity Solutions in Health Care
Zhang, P., & Kuo, T.-T. (2021) · Smart innovation, systems and technologies · doi:10.1007/978-981-33-6470-7_11 · Cited by 9
Harbi, A. Z. (2021) · Informatica · doi:10.31449/inf.v45i5.3358 · Cited by 7
Evaluation of Anonymization Tools for Health Data
Vovk, O., Piho, G., & Ross, P. (2021) · Communications in computer and information science · doi:10.1007/978-3-030-87657-9_23 · Cited by 7
Patient-Centred Transparency Requirements for Medical Data Sharing Systems
Spagnuelo, D., & Lenzini, G. (2016) · Advances in intelligent systems and computing · doi:10.1007/978-3-319-31232-3_102 · Cited by 7
Retracted: Biometric Signature Authentication Scheme with RNN (BIOSIG_RNN) Machine Learning Approach
Jain, A. K., & Tripathi, K. (2018) · International Conference on Contemporary Computing and Informatics (IC3I) · doi:10.1109/ic3i44769.2018.9007284 · Cited by 7
RetractedHauswaldt, J., Demmer, I., Heinemann, S., Himmel, W., Hummers, E., Pung, J., Schlegelmilch, F., & Drepper, J. (2019) · Zeitschrift für Evidenz Fortbildung und Qualität im Gesundheitswesen · doi:10.1016/j.zefq.2020.01.002 · Cited by 7
Application of graph domination to defend medical information networks against cyber threats
Angel, D. (2022) · Journal of Ambient Intelligence and Humanized Computing · doi:10.1007/s12652-022-03730-2 · Cited by 7
“Consequently, it is fundamental to curb medical cyber piracy and secure the network infrastructure that supports them (Fernández-Alemán et al. 2013).”
BackgroundNEW SECURE SOLUTIONS FOR PRIVACY AND ACCESS CONTROL IN HEALTH INFORMATION EXCHANGE
Ibrahim, A. (2016) · UKnowledge (University of Kentucky) · doi:10.13023/etd.2016.307 · Cited by 7
“Existing methods of authorization in electronic health information systems can be divided into cryptographic and non-cryptographic approaches [62] [157].”
BackgroundMethodInfluentialA Patient-Centric EHR Management System using Ethereum Blockchain
Pandit, N. K., Das, S., & Panda, C. K. (2024) · IEEE International Conference on Information Technology, Electronics and Intelligent Communication Systems (ICITEICS) · doi:10.1109/iciteics61368.2024.10625459 · Cited by 7
“Numerous studies have addressed the security and privacy concerns with EHR [4], [5], [6].”
BackgroundModiba, M. T., Ngulube, P., & Marutha, N. S. (2023) · ESARBICA Journal Journal of the Eastern and Southern Africa Regional Branch of the International Council on Archives · doi:10.4314/esarjo.v41i.11 · Cited by 6
Secure privacy-preserving record linkage system from re-identification attack
Lee, S., Kim, Y., Kwon, Y., & Cho, S. (2025) · PLoS ONE · doi:10.1371/journal.pone.0314486 · Cited by 9
“The escalating collection of user data for personalized services across various sectors in media advertising, the Internet of things, and healthcare has heightened privacy concerns significantly [1–6].”
Securing EHRs via CPMA attribute-based encryption on cloud systems
Warren, L., & Chi, H. (2014) · ACM Southeast Regional Conference (ACMSE) · doi:10.1145/2638404.2675727 · Cited by 6
“Cloud computing has become a promising computing paradigm drawing extensive attention from academia and industry [1,4].”
Background3D Privacy Framework: The Citizen Value Driven Privacy Framework
Mimo, E. D. M., & McDaniel, T. L. (2021) · IEEE International Smart Cities Conference (ISC2) · doi:10.1109/isc253183.2021.9562841 · Cited by 6
Efficient Joint Key Authentication Model in E-Healthcare
Sajjad, M., Malik, T. S., Khurram, S., Gardezi, A. A., Alassery, F., Hamam, H., Cheikhrouhou, O., & Shafiq, M. (2021) · Computers, materials & continua/Computers, materials & continua (Print) · doi:10.32604/cmc.2022.022706 · Cited by 6
“In [7], surveys and interview responses indicate that users trust system authentication using mutual key factors, but there should be a reliable mechanism that allows users to authenticate and access electronic medical systems based on the criticality and type of users.”
BackgroundAccess Control of EHR Records in a Heterogeneous Cloud Infrastructure
Szabó, Z., & Bilicki, V. (2021) · Acta Cybernetica · doi:10.14232/actacyb.290283 · Cited by 6
Tajdari, S., Irajpour, A., Shahriari, M., & Saghaei, M. (2022) · Journal of Medical Ethics and History of Medicine · doi:10.18502/jmehm.v15i6.11048 · Cited by 8
“Accordingly, only members of the professional team who were in direct contact with the patient were given access to the patient's information (30).”
BackgroundGerdes, M. W., & Fensli, R. W. (2015) · Cited by 6
On the Use of XML in Medical Imaging Web-Based Applications
Mata, C., Oliver, A., Lalande, A., Walker, P. M., & Martı́, J. (2016) · IRBM · doi:10.1016/j.irbm.2016.10.001 · Cited by 6
“aspects related with the way the patients’ information is stored (recent surveys on this topic are [64] and [65]).”
BackgroundKey Factors for Innovative Developments on Health Sensor-Based System
Peláez, M. D., López-Medina, M. Á., Espinilla, M., & Medina-Quero, J. (2017) · Lecture notes in computer science · doi:10.1007/978-3-319-56154-7_59 · Cited by 6
“On the security, privacy an legal issues in electronic health records, the visibility of health data have to be encrypted and restricted to the own users, and in the same way, to be shared with health care personnel from the prior authorization of the owner [84].”
BackgroundMAVRIKI, P. V., & Karyda, M. (2020) · Lecture notes in business information processing · doi:10.1007/978-3-030-63396-7_35 · Cited by 6
Alhuwail, D. (2021) · Records Management Journal · doi:10.1108/rmj-10-2019-0062 · Cited by 7
Extraction of Unstructured Electronic Healthcare Records using Natural Language Processing
Patil, S., & Moorthy, V. (2023) · International Conference on Networking and Communications (ICNWC) · doi:10.1109/icnwc57852.2023.10127351 · Cited by 6
“There are several challenges in NLP for Medical text 1) Privacy and Security: Medical data often contain sensitive patient information that must protect to accept regulations such as (US) Health Insurance and Portability and Account-ability Act [1](HIPAA).”
BackgroundHealth Information Technology Implementation Strategies in Zimbabwe
Mapesa, N. M. (2016) · Cited by 6
Understanding User Privacy Preferences for mHealth Data Sharing
Ababtain, D. A. A. A. F. (2014) · CRC Press eBooks · doi:10.1201/b17724-31 · Cited by 6
Kubbo, M., & Jayabalan, M. E. R. M. (2016) · Cited by 6
Authenticity and Integrity Enhanced Active Digital Image Forensics Based on Visual Cryptography
Jisha, T. E., & Monoth, T. (2018) · Smart innovation, systems and technologies · doi:10.1007/978-981-13-1927-3_19 · Cited by 6
Diamantopoulou, V., Angelopoulos, K., Flake, J., Praitano, A., Ruiz, J. F., Jürjens, J., Pavlidis, M., Bonutto, D., Sánz, A. C., Mouratidis, H., et al. (2017) · Lecture notes in computer science · doi:10.1007/978-3-319-67280-9_11 · Cited by 6
“However, the transition from paper-based health records to Electronic Health Records (EHR) lurks new challenges related to the secure transmission and privacy-handling of data, since health information is considered to be one of the most confidential types of personal information [14].”
BackgroundSecurity and Privacy Protection for eHealth Data
Jahan, S., Chowdhury, M., Islam, R., & Gao, J. (2018) · Communications in computer and information science · doi:10.1007/978-3-319-94421-0_16 · Cited by 6
For a Cloud Computing based Open Source E-Health Solution for Emerging Countries
AISSAOUII, N., Aissaoui, M., & Jabri, Y. (2013) · International Journal of Computer Applications · doi:10.5120/14617-2952 · Cited by 5
“Known also as Resource and Patient Management System (RPMS) that targets ambulatory care and disease management.”
BackgroundBigdata Driven Cloud Security: A Survey
Raja, K., & Hanifa, S. M. (2017) · IOP Conference Series Materials Science and Engineering · doi:10.1088/1757-899x/225/1/012184 · Cited by 5
BLOCKCHAIN: A POSSIBLE ALTERNATIVE TO ACHIEVING HEALTH INFORMATION EXCHANGE (HIE)
Deborah, A., Afolashade, K., Bondé, L., & Afolorunso, A. A. (2020) · International Journal of Innovative Research in Computer Science & Technology · doi:10.21276/ijircst.2020.8.3.23 · Cited by 5
“Ensuring that data is accessible at all times makes decisions more effective [6].”
Secure mobile health system supporting search function and decryption verification
Eltayieb, N., Elhabob, R., Hassan, A., & Li, F. (2020) · Journal of Ambient Intelligence and Humanized Computing · doi:10.1007/s12652-020-02321-3 · Cited by 5
Mobile Technology for Improved Contraceptive Care in Morocco
Kharbouch, M., Idri, A., Rachad, T., Alami, H., Redman, L. M., & Stelate, Y. (2021) · Journal of Medical Systems · doi:10.1007/s10916-020-01684-6 · Cited by 5
“Namely, Bachiri et al. have evaluated the privacy policies of mPHRs for pregnancy monitoring [21], while Fernandez-Aleman et al. have conducted a systematic literature review regarding security and privacy in EHRs [22], and Cruz-Zapata et al. have assessed the privacy policies in mPHRs [23].”
BackgroundScalable real-time health data sensing and analysis enabling collaborative care delivery
Dimitriadis, I., Mavroudopoulos, I., Kyrama, S., Toliopoulos, T., Gounaris, A., Vakali, A. I., Billis, A. S., & Bamidis, P. D. (2022) · Social Network Analysis and Mining · doi:10.1007/s13278-022-00891-y · Cited by 5
“Protecting the confidentiality of patient information (Fernández-Alemán et al. 2013; Rodrigues et al. 2013) is highly essential.”
BackgroundCross-Domain Access Control Model in Industrial IoT Environment
Zhang, Z., Wu, X., & Wei, S. (2023) · Applied Sciences · doi:10.3390/app13085042 · Cited by 7
Ankrah, E. A., Marathe, M., Bhattacharya, A., Ritt‐Olson, A., Milam, J. E., Torno, L. R., & Hayes, G. R. (2023) · Proceedings of the ACM on Human-Computer Interaction · doi:10.1145/3610201 · Cited by 7
“They are nowhere near the comprehensive fix many wished they would be [46, 53, 62], and the security and privacy challenges alone should be enough to give people pause [23, 59].”
BackgroundPatient-Centric Health Data Sovereignty: An Approach Using Proxy Re-Encryption
Rodrigues, B., Amorim, I., Silva, I., & Mendes, A. S. (2024) · Lecture notes in computer science · doi:10.1007/978-3-031-54204-6_11 · Cited by 5
Development of AI Web Service for Quantification of Dental Plaque
Lee, J., Lim, J.-N., Han, B.-H., Seok, S., & Yoo, H. (2024) · International Journal of Clinical Preventive Dentistry · doi:10.15236/ijcpd.2024.20.1.27 · Cited by 5
Current Electronic Medical Record in China
Chen, S., Hui-Ting, L., Hui, P., Yang, J., Li, J., & Wang, Q. (2014) · IEEE Annual Computer Software and Applications Conference Workshops (COMPSACW) · doi:10.1109/compsacw.2014.112 · Cited by 5
“According to [33], the most widely used regulations are the Health Insurance Portability and Accountability Act (HIPAA) and the European Data Protection Directive 95/46/EC.”
BackgroundMethodSeguridad y Privacidad en Carpetas Personales de Salud para Android e iOS
Zapata, B. C., Niñirola, A. H., Fernández‐Alemán, J. L., & Toval, A. (2014) · RISTI - Revista Ibérica de Sistemas e Tecnologias de Informação · doi:10.4304/risti.13.35-50 · Cited by 5
Self-citationPanackal, J. J., & Pillai, A. S. (2014) · International Conference on Hybrid Intelligent Systems (HIS) · doi:10.1109/his.2014.7086174 · Cited by 5
A survey on protection of medical images
Mancy, L., & Vigila, S. M. C. (2015) · International Conference on Control, Instrumentation, Communication and Computational Technologies · doi:10.1109/iccicct.2015.7475331 · Cited by 5
Zakaria, N., & Ramli, R. (2017) · Neuropsychiatric Disease and Treatment · doi:10.2147/ndt.s115261 · Cited by 5
“In a recent work, Fernández-Alemán et al 10 also performed a systematic review to analyze the security and privacy issues in electronic health record.”
A Patient Data Management System for Medical Services and Training
Anton, F. D., & Anton, S. (2018) · International Conference on Information Technology Based Higher Education and Training (ITHET) · doi:10.1109/ithet.2018.8424792 · Cited by 5
“The privacy of patient clinical observation sheet in special and Electronic Medical Records (EMR) in general was analysed by multiple specialists and presented in multiple papers in literature; for example, in [9] is presented a literature review concerning the security and privacy of Electronic Health Record (EHR) sy…”
MethodThe Relationship between the Nurses’ Perception of Electronic Health Records and Patient Privacy
Özer, Ö., Özkan, O., & Budak, F. (2020) · Hospital Topics · doi:10.1080/00185868.2020.1799729 · Cited by 5
Farahat, M. A., Abdo, A., & Kassim, S. K. (2021) · Lecture notes in networks and systems · doi:10.1007/978-981-16-2275-5_31 · Cited by 5
My Health Record and Emerging Cybersecurity Challenges in the Australian Digital Environment
Medhekar, A. (2022) · IGI Global eBooks · doi:10.4018/978-1-6684-6311-6.ch021 · Cited by 5
Securing E-healthcare records on Cloud Using Relevant data classification and Encryption
Shaikh, R. A. R., Banda, J., & Bandi, P. (2017) · International Journal Of Engineering And Computer Science · doi:10.18535/ijecs/v6i2.09 · Cited by 5
“The author in the paper [1] throws light on how modern healthcare environments where healthcare providers are more agreeable to migrate their electronic medical record systems to clouds.”
BackgroundSecuring Healthcare Data Using Biometric Authentication
Jahan, S., Chowdhury, M., Islam, R., & Chaudhry, J. A. (2018) · Lecture notes of the Institute for Computer Sciences, Social Informatics and Telecommunications Engineering · doi:10.1007/978-3-319-78816-6_10 · Cited by 5
Adelmeyer, M., Meier, P., & Teuteberg, F. (2019) · Journal of the Association for Information Systems · Cited by 5
Fernández‐Alemán, J. L., García, A. B. S., Garcı́a-Mateos, G., & Toval, A. (2015) · Annual International Conference of the IEEE Engineering in Medicine and Biology Society (EMBC) · doi:10.1109/embc.2015.7318628 · Cited by 5
“Authentication solutions based on smartcards combining a token and a PIN are sometimes employed in EHRs [8, 9].”
Self-citationQuality evidence, quality decisions: Ways to improve security and privacy of EHR systems
Osop, H., & Sahama, T. R. (2016) · IEEE International Conference on e-Health Networking, Applications and Services (Healthcom) · doi:10.1109/healthcom.2016.7749424 · Cited by 5
“It is a model that is used to denote security and privacy attributes [22] and is the fundamental goals for security [23].”
MethodAnonymity-preserving Reputation Management System for health sector
Jabeen, F., Hamid, Z., Abdul, W., Ghouzali, S., Khan, A., Malik, S. U. R., Khan, M. S., & Nawaz, S. (2018) · PLoS ONE · doi:10.1371/journal.pone.0195021 · Cited by 7
Medhekar, A., & Nguyen, J. (2020) · Advances in medical technologies and clinical practice book series · doi:10.4018/978-1-7998-3274-4.ch008 · Cited by 5
Khan, A. W., Yaseen, G., Khan, M. I., & Khan, F. N. (2022) · doi:10.1002/9781119821779.ch7 · Cited by 5
Future of Healthcare: Biomedical Big Data Analysis and IoMT
Tamiziniyan, G., & Keerthana, A., V (2022) · doi:10.1002/9781119769200.ch13 · Cited by 5
Năstasă, I., Artamonov, A.-R., Busnatu, Ș., Mincă, D. G., & Andronic, O. (2025) · Informatics · doi:10.3390/informatics12030066 · Cited by 4
Esmaeilzadeh, P., & Maddah, M. (2026) · Health Systems · doi:10.1080/20476965.2026.2637433 · Cited by 5
Kariotis, T. C., Prictor, M., Gray, K. M., & Chang, S. (2025) · JMIR Medical Informatics · doi:10.2196/64162 · Cited by 4
“While existing literature has focused on the availability of privacy functions in EHRs [58,72], participants in this study highlighted the importance of having skills and capabilities to manage these functions, as well as support pathways outside the IECR to address privacy issues.”
Reid, S., Naidu, C. S., Kantor, G., & Seebregts, C. J. (2020) · South African Medical Journal · doi:10.7196/samj.2020.v110i3.14111 · Cited by 4
“[2] Security and privacy of electronic health records are also a concern.[3] In the USA, the switch to electronic-based record-keeping has received significant support from policymakers espousing a national, interoperable health information system as a priority.”
BackgroundAdenuga, O. A., Kekwaletswe, R. M., & Adenuga, O. T. (2020) · International Journal for Digital Society · doi:10.20533/ijds.2040.2570.2020.0205 · Cited by 4
Blockchain in Smart Healthcare Systems
Mahajan, S. (2021) · Advances in healthcare information systems and administration book series · doi:10.4018/978-1-7998-9606-7.ch001 · Cited by 4
Balde, L., Zhang, J., Elkhalil, A., & Khudayberdiev, O. (2021) · International Conference on Intelligent Systems and Knowledge Engineering (ISKE) · doi:10.1109/iske54062.2021.9755341 · Cited by 4
E-Healthcare Using Block Chain Technology and Cryptographic Techniques: A Review
Haq, H. B. U., Abbas, A., Khan, R. A., Akhtar, A. N., Akram, W., Nawaz, S., Mayo, F. I., & Bhatti, A. I. (2022) · Pakistan Journal of Engineering and Technology · doi:10.51846/vol5iss4pp21-28 · Cited by 4
Ethics in Public Health Informatics
Gashu, K. D., & Guadie, H. A. (2024) · Sustainable development goals series · doi:10.1007/978-3-031-71118-3_7 · Cited by 4
Estudio sobre la importancia y la seguridad de uso de las contraseñas en el ámbito laboral sanitario
Fernández‐Alemán, J. L., Sánchez-Henarejos, A., García-Amicis, V. M., Toval, A., García, A. B. S., & Hernández-Hernández, I. (2014) · Gaceta Sanitaria · doi:10.1016/j.gaceta.2014.07.003 · Cited by 4
Self-citationPerlich, A., Sapegin, A., & Meinel, C. (2015) · International Conference on Health Informatics · doi:10.5220/0005204503520359 · Cited by 4
“Even though the sharing of medical data between stakeholders is an integral part of the concept of EHR, some 25% of the selected articles had no indication on data encryption (Fernández-Alemán et al., 2013).”
BackgroundAn Empirical Research on InfoSec Risk Management in IoT-based eHealth
Aman, W., & Snekkenes, E. A. (2013) · doi:10.13140/rg.2.1.4635.8245 · Cited by 4
Security framework for portable NFC mobile based health record system
Sethia, D., Gupta, D. S., & Saran, H. (2016) · IEEE International Conference on Wireless and Mobile Computing, Networking and Communications (WiMob) · doi:10.1109/wimob.2016.7763175 · Cited by 4
“to maintain privacy and security of the healthcard [2] as also stated in the regulations of Health Insurance Portability and Accountability Act (HIPAA) and the European Data Protection Directive 95/46/EC.”
BackgroundMethodHu, S., Zhou, L., Dong, N., Zhou, Y., Gao, Z., Xu, J., & Liang, Z. (2016) · IEEE International Conference on Bioinformatics and Biomedicine (BIBM) · doi:10.1109/bibm.2016.7822654 · Cited by 4
Kamarudin, N. H., Yussoff, Y. M., & Hashim, H. (2016) · Indian Journal of Science and Technology · doi:10.17485/ijst/2016/v9is1/106842 · Cited by 4
Seiedfarajollah, S., Safdari, R., Ghazisaeedi, M., & Keikha, L. (2019) · Eastern Mediterranean Health Journal · doi:10.26719/emhj.19.006 · Cited by 4
Dieng, Y., Diop, I., Faye, Y., & Malack, C. A. N. (2019) · International Conference on Information Systems and Technologies (ICIST) · doi:10.1145/3361570.3361576 · Cited by 4
A Health Monitoring Framework based on Edge of Things for Smart Healthcare System
Chaudhary, R. R. K., Chatterjee, K., & Singh, A. P. (2021) · International Conference on Computing, Communication and Automation · doi:10.1109/iccca52192.2021.9666367 · Cited by 4
“The author of this paper discusses privacy-preserving strategies for processing and storing sensitive medical data in the context of the Edge of Things paradigm [20].”
MethodRafid, F. A., Benissan, E., Murr, L., Ermakov, I., Oikonomou, K., & Zhang, P. (2022) · IEEE International Conference on Blockchain, Smart Healthcare and Emerging Technologies (SmartBlock4Health) · doi:10.1109/smartblock4health56071.2022.10034646 · Cited by 4
“One study estimated that 195,000 deaths occur yearly due to medical errors, with 10 of 17 being identity, or “wrong patient”, errors [7].”
Background
Metadata
- Authors
- Fernández-Alemán, J. L., Señor, I. C., Lozoya, P. Á. O., & Toval, A.
- Affiliations
- Universidad de Murcia (ES)
- Corresponding author
- Señor, Inmaculada Carrión
- ORCID
- Toval, Ambrosio
- Venue
- Journal of Biomedical Informatics
- Publisher
- Elsevier BV
- Published
- 2013-06
- Volume
- 46
- Issue
- 3
- Pages
- 541-562
- ISSN
- 1532-0464 (ISSN-L)
- OpenAlex
- W2128232860
- Cited by
- 675
- References
- 127
- Citations by year
- 2026: 23 · 2025: 39 · 2024: 72 · 2023: 59 · 2022: 46 · 2021: 59 · 2020: 57 · 2019: 82 · 2018: 57 · 2017: 48 · 2016: 56 · 2015: 38 · 2014: 29 · 2013: 10
- FWCI
- 7.79
- Type
- journal article
- Language
- en
- Open access
- bronze
- doi.org
- Licence
- Locations
- Journal of Biomedical Informatics (publishedVersion)
- PubMed (publishedVersion)
- Funders
- Spanish Ministry of Science and Technology (TIN2009-13718-C02-01, TIN2009-13718-C02-02)
- Topics
- Health Sciences › Health Professions › Health Information Management › Electronic Health Records Systems
- Physical Sciences › Computer Science › Computer Networks and Communications › Access Control and Trust
- Health Sciences › Health Professions › Health Information Management › Thoreau and American Literature
- Keywords
- electronic health records, health information security, privacy, HIPAA, Data Protection Directive 95/46/EC, public key infrastructure, digital signatures, pseudo-anonymity, role-based access control, access control, audit logging, user authentication
- MeSH terms
- Europe, United States, Computer Security, Privacy, Health Insurance Portability and Accountability Act, Electronic Health Records
About these checks
Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.
Statistics and arithmetic are recomputed, not judged.
Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.
What counts as a claim ›How we measure confidence ›How we check this ›
Are you an author, or do you see a problem with this page? Request a review