Related Experiment Videos
GEMSS: privacy and security for a medical Grid
S E Middleton1, J A M Herveg, F Crazzolara
1IT Innovation Centre, University of Southampton, 2 Venture Road, Chilworth Science Park, Southampton SO16 7NP, UK. sem@it-innovation.soton.ac.uk
Methods of Information in Medicine
|June 1, 2005
Summary
The GEMSS project ensures secure medical data processing via a Grid infrastructure. It complies with EU directives, offering robust security for patient data in healthcare simulations.
Area of Science:
- Health Informatics
- Grid Computing
- Cybersecurity
Background:
- The Global European Middleware for Services Science (GEMSS) project aims to establish a secure Grid infrastructure for medical simulations.
- Existing legal and security frameworks require examination for sensitive patient data handling within such infrastructures.
Purpose of the Study:
- To analyze the legal framework governing patient data processing within the GEMSS Grid.
- To identify and implement appropriate security measures for the GEMSS infrastructure.
- To ensure compliance with EU data protection directives.
Main Methods:
- Legal qualification of patient data operations under EU Directive 95/46.
- Identification of security measures, including Public Key Infrastructure (PKI) and web service security specifications (WS Security, WS Trust, SecureConversation).
- Analysis of legal rationale for selected security technologies.
Main Results:
- Patient data requires an identified controller (e.g., hospital) and a processor (Grid service provider) offering adequate security guarantees.
- Security measures must be appropriate to risks, considering the state of the art and implementation costs.
- Implemented security solutions include PKI, transport-level, and end-to-end security.
Conclusions:
- The GEMSS infrastructure provides adequate patient data protection for the healthcare sector, aligning with European directives.
- GEMSS aims to be a benchmark for secure data processing, enabling service providers to meet hospital security requirements.