전자의무기록에서 서식작성을 위한 접근권한관리시스템 구현
Realization of an Access Rights Management System for Electronic Medical Record System
1
조회
0
다운로드
1
인용
0
참고문헌
키워드
초록
Objectives: With introducing electronic medial record systems (EMRS), the private information protection of patients has being an issue of hospitals, and system developments for accessing to patients’personal information are required to control the system with effect. This study aims to realize an access rights system for EMRS using the delphi technique and business rules management system (BRMS). Methods: The consensus of access rights was conducted using 41 experts from a task force team of EMR development. The access rights system has been developed by constructing DTD, RuleML and converting XSLT based on the consensus, and evaluated by alpha test and records logged for eight month period. Results: Write access to the EMRS are provided only nurses and doctors, and in case of the referral department, it is investigated that their information is allowed to be input and modified by the referral department only. For a copy, printing out is allowed to the medical records department only,and nobody has an authority to delete data. We found that the access rights management system worked well for and patients’ personal information protection on general hospitals’ EMRS. Conlusions: We propose an effective personal information protection system that can apply to general hospital EMRS through this study. Also, for the system success, there is a need for monitoring of user convenience and availability.
Abstract
Objectives: With introducing electronic medial record systems (EMRS), the private information protection of patients has being an issue of hospitals, and system developments for accessing to patients’personal information are required to control the system with effect. This study aims to realize an access rights system for EMRS using the delphi technique and business rules management system (BRMS). Methods: The consensus of access rights was conducted using 41 experts from a task force team of EMR development. The access rights system has been developed by constructing DTD, RuleML and converting XSLT based on the consensus, and evaluated by alpha test and records logged for eight month period. Results: Write access to the EMRS are provided only nurses and doctors, and in case of the referral department, it is investigated that their information is allowed to be input and modified by the referral department only. For a copy, printing out is allowed to the medical records department only,and nobody has an authority to delete data. We found that the access rights management system worked well for and patients’ personal information protection on general hospitals’ EMRS. Conlusions: We propose an effective personal information protection system that can apply to general hospital EMRS through this study. Also, for the system success, there is a need for monitoring of user convenience and availability.
참고문헌 (27)
- "2011년도 의료기관 인증 조사기준집 Ver. 1.1" (2011)[URL]
- Sequist TD, "Use of an electronic medical record to profile the continuity clinic experiences of primary care residents", Acad Med, 80(4), pp.390~394 (2005)
- ICT 중점기술 표준화전략 맵 Ver. 2011, "한국통신연구원", ~, pp.종합보고서 4권; 정보보호분야 (2010)
- 웹 환경에서의 지식교환 유통을 위한 지식표현 및 추론기술 연구, "한국전산원", 한국전산원, ~ (2004)
- 한국정보보호진흥원, "의료분야 정보보호관리 체계 수립가이드", ~ (2007)
- 한우용, "규칙기반(Rule-based) 비즈니스 응용 개발 및 운영 시스템에 관한 연구", 30(2), pp.259~261 (2003), 한국정보과학회
- Barbara VH, "Business Rule Applied" (2002), Wiley Computer Publishing
- Lin N, "Alternatives for Rule-based Application Development", Business Rules Journal (2002)
- Ross R, "What is Rule Management About", Business Rules Journal (2001)
- 한국인터넷진흥원, "개인정보DB암호화관리안내서", ~ (2010)
- IDC, "Worldwide and U.S Security Services 2006-2011 Forecast and Analysis", ~ (2008)
- Matthew J, "Generalized role based access control", IEEE International Conference on Distributed Computing Systems, pp.391~398 (2001)
- Sandhu RS, "Feinstein H. Role based access control models", IEEE Computer, 29(2), pp.38~47 (1996)
- Francesco C, "GALCO: A web-based system for biomedical information sharing", AMIA Annu Symp Proc, pp.8931~ (2006)
- Lawrence P. Hanrahan, "Wisconsin’s environmental public health tracking network: information systems design for childhood cancer surveillance", Environ Health Perspect, 112(14), pp.1434~1439 (2004)
- Ferris TA, "A proposed key escrow system for secure patient information disclosure in biomedical research databases", Proc AMIA Symp, pp.245~249 (2002)
- Donald AW, "A Guide to Expert System" (1996), Addison-Wesley Publishing Company
- Gerd W, "How to Design a General Rule Markup Language?, Invited Talk", Workshop XML Technologien fur das Semantic (2002)
- Andreas E, "Automatic Generation of Java", SQL based Inference Engines from RDF Schema and RuleML, 2002, ~
- "RuleML"[URL]
- Morgan A, "Business Rules and Information Systems" (2002), Addison-Wesley
- Aidas S, "Business rules based agile ERP systems development", Informatica, 20(3), pp.439~460 (2009)
- Strauss, HJ, "Delphi, Political Philosophy and the Future" (1973), Institute of Policy Studies, University of Oregon
- Gurpreet D, "Information system security management in the new millennium", communications of the ACM, 43(7), pp.125~128 (2000)
- National Institute of Standards and Technology (NIST), "An Introductory Resource Guide for Implementing the Health Insurance Portability and Accountability Act (HIPAA) Security Rule", ~ (2005)
- 임수, "A Survey on Ubiquitous Healthcare Service Demand among Diabetic Patients", Diabetes and Metabolism Journal, 35(1), pp.50~57 (2011), 대한당뇨병학회
- Sunil K, "Deficits in communication and information transfer between hospital- based and primary care physicians implications for patient safety and continuity of care", JAMA, 297(8), pp.831~841 (2007)