Meeting EHR security requirements: SeAAS approach.

Area of Science:

• Health Informatics
• Information Security
• Computer Science

Background:

• Electronic Health Record (EHR) systems are crucial for healthcare savings, quality improvement, and error reduction.
• Integrating the Healthcare Enterprise (IHE) is a key initiative standardizing healthcare data exchange in distributed environments.
• Current IHE security profiles have limitations, including insufficient endpoint security and oversimplified approaches for complex requirements.

Purpose of the Study:

• To address the shortcomings of current IHE security profiles.
• To propose an improved security methodology for EHR systems.
• To enhance data security and privacy in distributed healthcare settings.

Main Methods:

• Leveraging previous research on security-aware IHE systems.
• Applying the Security-as-a-Service (SaaS) model.
• Developing a domain-wide security approach to overcome endpoint security limitations.

Main Results:

• Identified insufficiency of endpoint security in current IHE profiles.
• Highlighted the need for more robust and architecturally sound security solutions.
• Proposed Security-as-a-Service as a viable methodology for comprehensive EHR security.

Conclusions:

• The current endpoint security methodology in IHE profiles is inadequate for distributed healthcare environments.
• A Security-as-a-Service approach offers a promising solution to enhance EHR security and address complex requirements.
• Further development is needed to integrate architectural design into IHE security profiles.