TRUST : Team for Research in Ubiquitous Secure Technology National Science Foundation Site Visit February 24-26, 2009 │Berkeley, California Health Infrastructures Janos Sztipanovits, Vanderbilt University Ruzena Bajcsy, UC Berkeley

2NSF Site Visit – February 24-26, 2009 – Berkeley, CA Program 1. Stratified Negation and HIPAA Compliance John Mitchell (Stanford) 2. Learning Privacy from Audit Logs Brad Malin (Vanderbilt) 3. Guideline Driven Patient Management Systems Janos Mathe, Jason Martin and Michael Hooper (Vanderbilt) 4. Body Sensors for In-Home Patient Monitoring Posu Yan (Berkeley), Yuan Xue (Vanderbilt) Health Infrastructures, J. Sztipanovits

3NSF Site Visit – February 24-26, 2009 – Berkeley, CA IT and Health Care Health care is an information- and knowledge- intensive enterprise. In the future, care providers will need to rely increasingly on information technology (IT) to acquire, manage, analyze, and disseminate health care information and knowledge. 3 William W. Stead and Herbert S. Lin (Eds): Computational Technology for Effective Health Care: Immediate Steps and Strategic Directions National Research Council, The National Academies Press, January 2009

4NSF Site Visit – February 24-26, 2009 – Berkeley, CA TRUST Strategy Community view: What matters is clinical performance and not the insertion of IT per se. – Building experimental systems is essential. – Strategic partnership and extensive collaboration with major medical informatics research partners is required (Vanderbilt Medical School, EU Medical Informatics Programs). – Focus on specific research projects addressing key challenges o Privacy Modeling and Analysis o Architectures for Trustworthy Health Information Systems o In-home patient monitoring – Collaboration among TRUST partners and with external organizations to complement our resources. – Integrating research results into an experimental platform that is field tested and presented to industry for transitioning. Health Infrastructures, J. Sztipanovits

5NSF Site Visit – February 24-26, 2009 – Berkeley, CATeam for Research in Ubiquitous Secure Technology Collaboration partner: Vanderbilt University Medical Center Guideline-Driven Patient Management System - STEEP Patient Portal – MyHealthAtVanderbilt.com In-home Patient Monitoring - CHF

6NSF Site Visit – February 24-26, 2009 – Berkeley, CA Research Approach Health Infrastructures, J. Sztipanovits Patient Portals Sepsis Management Congestive Heart Failure Management Patient Portals Sepsis Management Congestive Heart Failure Management Privacy Modeling Model-based design Sensor networks Policy Privacy Modeling Model-based design Sensor networks Policy Formal representation of privacy policies Semantic composition of architecture and policy models Privacy preserving remote patient monitoring Architectures for Trustworthy Health Information Systems Formal representation of privacy policies Semantic composition of architecture and policy models Privacy preserving remote patient monitoring Architectures for Trustworthy Health Information Systems Experimental Systems TRUST Technologies Fundamental Challenges

7NSF Site Visit – February 24-26, 2009 – Berkeley, CA Architectures for Trustworthy Health Information Systems (THIS) Vanderbilt (Ledeczi, Lee, Sztipanovits) investigates a formalized design approach to model-based development of Health Information Systems. Formal system modeling Formal policy modeling Model verification for security and privacy properties of the modeled architecture Model-based generation of run-time components Model-based system integration Health Infrastructures, J. Sztipanovits