a sustainable approach to security and privacy in health information systems推荐.pdfVIP

th 18 Australasian Conference on Information Systems Security Privacy in Health IS 5-7 Dec 2007, Toowoomba Liu A Sustainable Approach to Security and Privacy in Health Information Systems Vicky Liu, Lauren May, William Caelli and Peter Croll Faculty of Information Technology and Information Security Institute Queensland University of Technology, Brisbane, Australia Email: { v.liu, l.may, w.caelli, croll}@.au Abstract This paper identifies and discusses recent information privacy violations or weaknesses which have been found in national infrastructure systems in Australia, the United Kingdom (UK) and the United States of America (USA), two of which involve departments of health and social services. The feasibility of health information systems (HIS) based upon intrinsically more secure technological architectures than those in general use in todays marketplace is investigated. We propose a viable and sustainable IT solution which addresses the privacy and security concerns at all levels in HIS with a focus on trustworthy access control mechanisms. Keywords Access control, trusted systems, information assurance, health information systems Introduction Today’s service industries would regard information, computer and telecommunication (ICT) technologies as part of their critical infrastructure. Although some sectors such as healthcare, have been slow