Your browser doesn't support javascript.
loading
Comprehensive user requirements engineering methodology for secure and interoperable health data exchange.
Natsiavas, Pantelis; Rasmussen, Janne; Voss-Knude, Maja; Votis, Κostas; Coppolino, Luigi; Campegiani, Paolo; Cano, Isaac; Marí, David; Faiella, Giuliana; Clemente, Fabrizio; Nalin, Marco; Grivas, Evangelos; Stan, Oana; Gelenbe, Erol; Dumortier, Jos; Petersen, Jan; Tzovaras, Dimitrios; Romano, Luigi; Komnios, Ioannis; Koutkias, Vassilis.
Afiliação
  • Natsiavas P; Institute of Applied Biosciences, Centre for Research & Technology Hellas, Thermi, Thessaloniki, Greece.
  • Rasmussen J; MedCom, Odense, Denmark.
  • Voss-Knude M; Sundhed.dk, Copenhagen, Denmark.
  • Votis Κ; Information Technologies Institute, Centre for Research & Technology Hellas, Thermi, Thessaloniki, Greece.
  • Coppolino L; Department of Engineering, University of Naples "Parthenope", Naples, Italy.
  • Campegiani P; Bit4id S.r.l, Naples, Italy.
  • Cano I; IDIBAPS, Hospital Clinic de Barcelona, Universitat de Barcelona, Barcelona, Spain.
  • Marí D; eHealth R&D Unit, EURECAT, Barcelona, Spain.
  • Faiella G; Fondazione Santobono Pausilipon, Naples, Italy.
  • Clemente F; Fondazione Santobono Pausilipon, Naples, Italy.
  • Nalin M; Telbios S.r.l, Milan, Italy.
  • Grivas E; Eulambia Advanced Technologies Ltd, Athens, Greece.
  • Stan O; CEA, LIST, Point Courrier 172, 91191, Gif-sur-Yvette Cedex, France.
  • Gelenbe E; Department of Electrical and Electronic Engineering, Imperial College of Science, Technology and Medicine, London, UK.
  • Dumortier J; Time.lex, Brussels, Belgium.
  • Petersen J; MedCom, Odense, Denmark.
  • Tzovaras D; Information Technologies Institute, Centre for Research & Technology Hellas, Thermi, Thessaloniki, Greece.
  • Romano L; Department of Engineering, University of Naples "Parthenope", Naples, Italy.
  • Komnios I; Exus Software Ltd, London, UK.
  • Koutkias V; Institute of Applied Biosciences, Centre for Research & Technology Hellas, Thermi, Thessaloniki, Greece. vkoutkias@certh.gr.
BMC Med Inform Decis Mak ; 18(1): 85, 2018 10 16.
Article em En | MEDLINE | ID: mdl-30326890
ABSTRACT

BACKGROUND:

Increased digitalization of healthcare comes along with the cost of cybercrime proliferation. This results to patients' and healthcare providers' skepticism to adopt Health Information Technologies (HIT). In Europe, this shortcoming hampers efficient cross-border health data exchange, which requires a holistic, secure and interoperable framework. This study aimed to provide the foundations for designing a secure and interoperable toolkit for cross-border health data exchange within the European Union (EU), conducted in the scope of the KONFIDO project. Particularly, we present our user requirements engineering methodology and the obtained results, driving the technical design of the KONFIDO toolkit.

METHODS:

Our methodology relied on four pillars (a) a gap analysis study, reviewing a range of relevant projects/initiatives, technologies as well as cybersecurity strategies for HIT interoperability and cybersecurity; (b) the definition of user scenarios with major focus on cross-border health data exchange in the three pilot countries of the project; (c) a user requirements elicitation phase containing a threat analysis of the business processes entailed in the user scenarios, and (d) surveying and discussing with key stakeholders, aiming to validate the obtained outcomes and identify barriers and facilitators for HIT adoption linked with cybersecurity and interoperability.

RESULTS:

According to the gap analysis outcomes, full adherence with information security standards is currently not universally met. Sustainability plans shall be defined for adapting existing/evolving frameworks to the state-of-the-art. Overall, lack of integration in a holistic security approach was clearly identified. For each user scenario, we concluded with a comprehensive workflow, highlighting challenges and open issues for their application in our pilot sites. The threat analysis resulted in a set of 30 user goals in total, documented in detail. Finally, indicative barriers of HIT acceptance include lack of awareness regarding HIT risks and legislations, lack of a security-oriented culture and management commitment, as well as usability constraints, while important facilitators concern the adoption of standards and current efforts for a common EU legislation framework.

CONCLUSIONS:

Our study provides important insights to address secure and interoperable health data exchange, while our methodological framework constitutes a paradigm for investigating diverse cybersecurity-related risks in the health sector.
Assuntos
Palavras-chave

Texto completo: 1 Base de dados: MEDLINE Assunto principal: Informática Médica Limite: Humans País como assunto: Europa Idioma: En Ano de publicação: 2018 Tipo de documento: Article

Texto completo: 1 Base de dados: MEDLINE Assunto principal: Informática Médica Limite: Humans País como assunto: Europa Idioma: En Ano de publicação: 2018 Tipo de documento: Article