GEMSS: Privacy and security for a medical Grid

Stuart E. Middleton, J. A M Herveg, F. Crazzolara, D. Marvin, Y. Poullet

Résultats de recherche: Contribution à un journal/une revueArticle

Résumé

Objectives: The GEMSS project is developing a secure Grid infrastructure through which six medical simulations services can be invoked. We examine the legal and security framework within which GEMSS operates. Methods: We provide a legal qualification to the operations performed upon patient data, in view of EU directive 95/46, when using medical applications on the GEMSS Grid. We identify appropriate measures to ensure security and describe the legal rationale behind our choice of security technology. Results: Our legal analysis demonstrates there must be an identified controller (typically a hospital) of patient data. The controller must then choose a processor (in this context a Grid service provider) that provides sufficient guarantees with respect to the security of their technical and organizational data processing procedures. These guarantees must ensure a level of security appropriate to the risks, with due regard to the state of the art and the cost of their implementation. Our security solutions are based on a public key infrastructure (PKI), transport level security and end-to-end security mechanisms in line with the web service (WS Security, WS Trust and SecureConversation) security specifications. Conclusion: The GEMSS infrastructure ensures a degree of protection of patient data that is appropriate for the health core sector, and is in line with the European directives. We hope that GEMSS will become synonymous with high security data processing, providing a framework by which GEMSS service providers can provide the security guarantees required by hospitals with regard to the processing of patient data.

langue originaleAnglais
Pages (de - à)182-185
Nombre de pages4
journalMethods of Information in Medicine
Volume44
Numéro de publication2
Etat de la publicationPublié - 20 juin 2005

Empreinte digitale Examiner les sujets de recherche de « GEMSS: Privacy and security for a medical Grid ». Ensemble, ils forment une empreinte digitale unique.

  • Contient cette citation