Factors Influencing the Adoption of Advanced Cryptographic Techniques for Data Protection of Patient Medical Records
2
조회
0
다운로드
0
인용
0
참고문헌
키워드
초록
Objectives: Healthcare organizations that maintain and process Electronic Medical Records are at risk of cyber-attacks,which can lead to breaches of confidentiality, financial harm, and possible interference with medical care. State-of-the-artmethods in cryptography have the potential to offer improved security of medical records; nonetheless, healthcare providersmay be reluctant to adopt and implement them. The objectives of this study were to assess current data management andsecurity procedures; to identify attitudes, knowledge, perceived norms, and self-efficacy regarding the adoption of advancedcryptographic techniques; and to offer guidelines that could help policy-makers and data security professionals work togetherto ensure that patient data are both secure and accessible. Methods: We conducted 12 in-depth semi-structured interviewswith managers and individuals in key cybersecurity positions within Israeli healthcare organizations. The interviews assessedperceptions of the feasibility and benefits of adopting advanced cryptographic techniques for enhancing data security. Qualitativedata analysis was performed using thematic network mapping. Results: Key data security personnel did not perceiveadvanced cybersecurity technologies to be a high priority for funding or adoption within their organizations. We identifiedthree major barriers to the adoption of advanced cryptographic technologies for information security: barriers associatedwith regulators; barriers associated with healthcare providers; and barriers associated with the vendors that develop cybersecuritysystems. Conclusions: We suggest guidelines that may enhance patient data security within the healthcare system andreduce the risk of future data breaches by facilitating cross-sectoral collaboration within the healthcare ecosystem.
Abstract
Objectives: Healthcare organizations that maintain and process Electronic Medical Records are at risk of cyber-attacks,which can lead to breaches of confidentiality, financial harm, and possible interference with medical care. State-of-the-artmethods in cryptography have the potential to offer improved security of medical records; nonetheless, healthcare providersmay be reluctant to adopt and implement them. The objectives of this study were to assess current data management andsecurity procedures; to identify attitudes, knowledge, perceived norms, and self-efficacy regarding the adoption of advancedcryptographic techniques; and to offer guidelines that could help policy-makers and data security professionals work togetherto ensure that patient data are both secure and accessible. Methods: We conducted 12 in-depth semi-structured interviewswith managers and individuals in key cybersecurity positions within Israeli healthcare organizations. The interviews assessedperceptions of the feasibility and benefits of adopting advanced cryptographic techniques for enhancing data security. Qualitativedata analysis was performed using thematic network mapping. Results: Key data security personnel did not perceiveadvanced cybersecurity technologies to be a high priority for funding or adoption within their organizations. We identifiedthree major barriers to the adoption of advanced cryptographic technologies for information security: barriers associatedwith regulators; barriers associated with healthcare providers; and barriers associated with the vendors that develop cybersecuritysystems. Conclusions: We suggest guidelines that may enhance patient data security within the healthcare system andreduce the risk of future data breaches by facilitating cross-sectoral collaboration within the healthcare ecosystem.
참고문헌 (30)
- Miller DP Jr, "Primary care providers’ views of patient portals : interview study of perceived benefits and consequences", J Med Internet Res, 18(1), pp.e8~ (2016)[DOI]
- Nausheen F, "Healthcare IoT: benefits, vulnerabilities and solutions", Proceedings of 2018 2nd International Conference on Inventive Systems and Control (ICISC), pp.517~522 (2017)
- "Spain will register people who refuse Covid vaccine, says health minister" (2020)[URL]
- "Has health care hacking become an epidemic?" (2016)[URL]
- Lallie HS, "Cyber security in the age of COVID-19 : a timeline and analysis of cyber-crime and cyberattacks during the pandemic", Computers & Security, 105, pp.102248~ (2021)
- Muthuppalaniappan M, "Healthcare cyberattacks and the COVID-19 pandemic : an urgent threat to global health", Int J Qual Health Care, 33(1), pp.mzaa117~ (2021)
- "Wave of cyber attacks hits US healthcare system as FBI warns of coordinated criminal campaign" (2020)[URL]
- Tully J, "Healthcare challenges in the era of cybersecurity", Health Secur, 18(3), pp.228~231 (2020)
- Evans D, "A pragmatic introduction to secure multi-party computation", Found Trends Priv Secur, 2(2-3), pp.70~246 (2018)
- Gentry C, "fully homomorphic encryption scheme" (2009), Stanford University
- Brakerski Z, "(Leveled)fully homomorphic encryption without bootstrapping", ACM Trans Comput Theory, 6(3), pp.1~36 (2014)
- "Somewhat practical fully homomorphic encryption" (2012)[URL]
- Cheon JH, "Advances in Cryptology –ASIACRYPT 2017", pp.409~437 (2017), Springer
- Alami H, "Digital health : cybersecurity is a value creation lever, not only a source of expenditure", Health Policy Technol, 8(4), pp.319~321 (2019)
- Alqarni A, "Exploring factors that affect adoption of computer security practices among college students", pp.2017
- Ishikawa K, "The guideline of the personal health data structure to secure safety healthcare. The balance between use and protection to satisfy the patients’needs", Int J Med Inform, 76(5-6), pp.412~418 (2007)
- "Cyber attacks hit Israeli hospitals as globe battles new computer virus" (2017)[URL]
- "Israel reports rare cyber attack on one of its hospitals" (2021)[URL]
- "In record time: just one month after the cyberattack, Hillel Yaffe has returned to regular activity" (2021)[URL]
- "The health system’s readiness for crisis scenarios" (2020)[URL]
- Weenk S, "National Cybersecurity Strategies in the Healthcare Industry of Israel and the Netherlands : a comparative overview", Cyber Intell Secur, 4(1), pp.107~129 (2020)
- Jones CM, "Utilizing the technology acceptance model to assess the employee adoption of information systems security measures", Iss Inf Syst, 11(1), pp.9~16 (2010)
- Fishbein M, "Predicting and changing behavior:the reasoned action approach" (2011), Psychology Press
- Rogers RW, "A protection motivation theory of fear appeals and attitude change1", J Psychol, 91(1), pp.93~114 (1975)
- Guba EG, "Epistemological and methodological bases of naturalistic inquiry", ECTJ, 30(4), pp.233~252 (1982)
- Nowell LS, "Thematic analysis : striving to meet the trustworthiness criteria", Int J Qual Methods, 16(1), pp.1609406917733847~ (2017)
- Harrell MC, "Data collection methods:semi-structured interviews and focus groups" (2009), Rand National Defense Research Institute
- Attride-Stirling J, "Thematic networks : an analytic tool for qualitative research", Qual Res, 1(3), pp.385~405 (2001)
- Charmaz K, "Constructing grounded theory : a practical guide through qualitative analysis" (2006), Sage Publications
- Voigt P, "The EU general data protection regulation (GDPR): a practical guide" (2017), Springer