Identity and Trust Management Platform in DICOM

Slides:



Advertisements
Similar presentations
Privacy-Enhancing Models and Mechanisms for Securing Provenance and its Use October 2010 Lead PI: Ravi Sandhu (UT San Antonio) PIs: Elisa Bertino (Purdue),
Advertisements

Towards Usage Control Models: Beyond Traditional Access Control 7 th SACMAT, June 3, 2002 Jaehong Park and Ravi Sandhu Laboratory for Information Security.
NISTs Role in Securing Health Information AMA-IEEE Medical Technology Conference on Individualized Healthcare Kevin Stine, Information Security Specialist.
Potential Smart Grid standardisation work in ETSI Security and privacy aspects Carmine Rizzo on behalf of Scott CADZOW, C3L © ETSI All rights reserved.
The World Internet Security Company ID Management in e-Health February 2007.
Westbrook Technologies from Document Management’s Role in HIPAA.
NIST Big Data Public Working Group Security and Privacy Subgroup Presentation September 30, 2013 Arnab Roy, Fujitsu Akhil Manchanda, GE Nancy Landreville,
Secure Communication Architectures.
0 Web Service Security JongSu Bae. 1  Introduction 2. Web Service Security 3. Web Service Security Mechanism 4. Tool Support 5. Q&A  Contents.
E-Government Security and necessary Infrastructures Dimitrios Lekkas Dept. of Systems and Products Design Engineering University of the Aegean
ITIS 3200: Introduction to Information Security and Privacy Dr. Weichao Wang.
ELECTRONIC MEDICAL RECORDS By Group 5 members: Kinal Patel David A. Ronca Tolulope Oke.
Information Assurance and Security: Overview. Information Assurance “Measures that protect and defend information and information systems by ensuring.
Public Key Infrastructure Ammar Hasayen ….
Security and DICOM Lawrence Tarbox, Ph.D. Chair, DICOM Working Group 14 Siemens Corporate Research.
IDENTITY MANAGEMENT: PROTECTING FROM THE INSIDE OUT MICHAEL FORNAL, SECURITY ANALYST PROVIDENCE HEALTH & SERVICES SOURCE SEATTLE CONFERENCE
ICT 1 Towards an Integrated Approach to Access Control to Health Information Presented by: Inger Anne Tøndel SINTEF Co-authors: Per Håkon Meland SINTEF.
Thomas Levy. Agenda 1.Aims: CIAN 2.Common Business Attacks 3.Information Security & Risk Management 4.Access Control 5.Cryptography 6.Physical Security.
1 Identity and Transparency ( Bridging the GAPS of Governance Bridging the GAPS of Governance in eGov Initiatives in eGov Initiatives )‏ Badri Sriraman.
© Synergetics Portfolio Security Aspecten.
The Aim, Task and the Process of Informationization in Medical Health
Chapter VII Security Management for an E-Enterprise -Ramyah Rammohan.
METU-SRDCEUROREC Meeting, Geneva, October 10, 2006 RIDE Overview Asuman Dogac Middle East Technical University Ankara, Turkey.
Privacy Communication Privacy Confidentiality Access Policies Systems Crypto Enforced Computing on Encrypted Data Searching and Reporting Fully Homomorphic.
February 8, 2005IHE Europe Educational Event 1 Integrating the Healthcare Enterprise Basic Security Robert Horn Agfa Healthcare.
Copyright © 2009 by The McGraw-Hill Companies, Inc. All Rights Reserved. McGraw-Hill Chapter 6 The Privacy and Security of Electronic Health Information.
Identity Management: A Technical Perspective Richard Cissée DAI-Labor; Technische Universität Berlin
Patient Confidentiality and Electronic Medical Records Ann J. Olsen, MBA, MA Information Security Officer and Director, Information Management Planning.
Energize Your Workflow! ©2006 Merge eMed. All Rights Reserved User Group Meeting “Energize Your Workflow” May 7-9, Security.
Unit 7 Seminar.  According to Sanderson (2009), the problems with the current paper-based health record system have been well documented. The author.
Need for Security Control access to servicesControl access to services Ensure confidentialityEnsure confidentiality Guard against attacksGuard against.
PKI Policy Determination Process Input from PKI Decision Process PKI Policy Determination Process Application(s) Workflows Players.
Security Issues and Challenges in High Performance Grid Computing SASA SUBOTIC SASA SUBOTIC University of Pretoria.
INTRODUCTION: THE FIRST TRY InCommon eduGAIN Policy and Community Working Group.
Cross-Enterprise User Authentication Year 2 March 16, 2006 Cross-Enterprise User Authentication Year 2 March 16, 2006 John F. Moehrke GE Healthcare IT.
Chapter 1: Security Governance Through Principles and Policies
Basic Security Cor Loef Philips Medical Systems Co-Chair IHE Radiology Technical Committee.
XDS Security ITI Technical Committee May, XDS Security Use Cases Prevent Indiscriminate attacks (worms, DOS) Normal Patient that accepts XDS participation.
Presented by: Sonali Pagade Nibha Dhagat paper1.pdf.
© 2016 TM Forum Live! 2016 | 1 E2E Service Orchestration for Smarter Health Real-World Business User Stories Draft.
Database Security Carl J. Hoppe 20 November 2013.
Grid based telemedicine application
TCSEC: The Orange Book.
Case studies on Authentication, Authorization and Audit in SOA Environments Dr. Srini Kankanahalli.
Information Security, Theory and Practice.
Efficient and secure transborder exchange of patient data
Design for Security Pepper.
Cloud Security– an overview Keke Chen
Cross-health enterprises Medical Data Management on the EGEE grid
Federated IdM Across Heterogeneous Clouding Environment
Similarities between Grid-enabled Medical and Engineering Applications
BUILDING A PRIVACY AND SECURITY PROGRAM FOR YOUR NON-PROFIT
Survey on Security and Energy Efficiency in the Cloud Computing Environment Wei Wu.
Building A Community of Trust to Transform Medicines Development
Internet of Things (IoT)
SECURITY MECHANISM & E-COMMERCE
CONFIDENTIALITY, INTEGRITY, LEGAL INTERCEPTION
Security in ebXML Messaging
Professor of Information Systems Security
E-Commerce for Developing Countries (EC-DC)
Paul T. Smith, Esq. Partner, Davis Wright Tremaine LLP
Example Use Case for Attribute Authorities and Token Translation Services - the case for eduGAIN Andrea Biancini.
ITU Telecommunication Development Bureau (BDT)
TRINITY UNIVERSITY HOSPITAL
Security in SDR & cognitive radio
Session 1 – Introduction to Information Security
Practice Management & Patient Health Record sharing system
Presentation transcript:

Identity and Trust Management Platform in DICOM Huiping Sun School of Software and Microelectronics, Peking University

Content Regional Medical Image Exchange & Sharing Challenge: Security, Trust, Privacy IDTMP: Identity & Trust Management Platform IDTMP Model IDTMP Framework Conclusions

Regional Medical Image Exchange & Sharing Hospital A Hospital B PACS PACS Patient Doctor Doctor Patient Regional Medical Image Exchange &Sharing Center Medical Image Data Management System Medical Image Data Patient Doctor Others Government Insurer Academia

Challenge: Security, Trust, Privacy Confidentiality, Availability, Integrity, Non-repudiation Trust Cycle of trust Privacy Who, When, How using my medical image Big Brother, Little Sister

IDTMP： Identity and Trust Management Platform Patient Doctor PACS Hospital A Patient Doctor PACS Hospital B Hospital A Regional Medical Image Exchange &Sharing Center Medical Image Data Management System Medical Image Data IDTMP: Identity & Trust Management Platform Patient Doctor Others Government Insurer Academia

IDTMP Model Data Control Data origin authentication User Control Device Authentication user authentication Data Control User Control Operation Control Service Control Trust Management Audit Authentication Authorization Access Control User-Centric Device Trust Doctor Trust Operation Trust Data Content Trust Operation Log Operation Trails

IDTMP Framework User IDTMP Combination Public key Authentication Service Audit Service Authorization Service Access Control Service Attribute Management Privilege Management Policy Management User Policy Control Risk Management Trust Management User Trust Control Medical Image Data Reputation System Other Trust Info Sources

IDMTP Conclusions For security For trust For privacy Uniform authentication based CPK Authorization model based role, time, content Access control based entity trust & resource risk For trust Trust Metric, Reputation system For privacy User-centric policy and trust control Audit log and trails

Thanks for you attention ! Huiping Sun (孙惠平) sunhp@ss.pku.edu.cn http://www.ss.pku.edu.cn

Feedback: Privacy Policy Feedback
Do Not Sell My Personal Information
About project: SlidePlayer Terms of Service

© 2025 SlidePlayer.com. Inc. All rights reserved.