The Internet of Medical Things (IoMT). Группа авторов
Читать онлайн книгу.
warehousing and applications in a 2016 survey.
The cloud promises a smooth recovery from disasters, reduced upfront costs, and simpler expansion—even though enterprises have to be exceedingly careful to select partners who understand the significance of HIPAA and other compliance and safety issues for health.
Many firms have a hybrid approach to their data store initiatives, which can offer providers with diverse access and storage requirements the most flexible and workable solution. However, providers should be careful to ensure that separate systems can communicate and share data with other sectors of the company when appropriate while establishing a hybrid infrastructure.
2.1.1.4 Security
Data security for healthcare businesses is the number one issue, particularly following a fast fire succession of high-profile violations, hackings, and ransomware outbreaks. From phishing assaults, viruses, and laptops left accidently in a cab, health information is exposed to an almost endless range of dangers.
The HIPAA Security Rule offers a broad set of technological guarantees for PHI storage organizations, including transmission security, authentication procedures and access, and integrity and auditing measures.
These precautions really lead to common sense safety processes, such as the use of up-to-date anti-virus software, the setup of firewalls, the encryption of sensitive data, and multi-factor authentication.
However, even the most closely secured data center can be overcome by personnel who tend to give priority over long software updates and sophisticated limits on their access to data or software.
Health organizations should often remind their staff members of the important nature of data security standards and continuously examine who has access to high-value data in order to prevent damage caused by malevolent parties.
2.1.1.5 Stewardship
Health data has a long shelf-life, especially on the clinical side. In addition to keeping patient data accessible for at least 6 years, clinicians may choose to use de-identified datasets for research projects, which is vital for continued stewardship and cure. For additional objectives, such as quality measurement or performance benchmarking, data may also be repurposed or re-assessed.
Understanding when and for what purposes the data were created—as well as who utilized it previously, why, how, and when—is vital to academics and data analysts.
The development of complete, accurate, and up-to-date metadata is an important component of a successful data management plan. Metadata enables analysts to precisely duplicate earlier questions that are critical for scientific investigations and proper benchmarking and prevents the creation of “data trash”.
Health organizations should employ a data manager to produce and curate valuable metadata. A data controller may ensure that all pieces have standard definitions and formats, are properly documented from creation to deletion, and remain valuable for the tasks involved.
2.2 Access Control–Based Security
Access control is a mechanism to ensure that users are who they say they are and have enough access to company data.
Access control at a high level is a selective restriction of data access. It comprises two primary components: authentication and authorization, as explained by Daniel Crowley, IBM’s X-Force Red research manager with a focus on data security.
Authentication is a technique used to check that someone claims to be. Authentication alone is not enough to protect data, as noted by Crowley. What is required is an additional authorization layer that assesses if a user should be authorized to access or execute the transaction.
2.2.1 Authentication
Authentication is the process of establishing trust in user identity. Certification assurance levels will be in accordance with the application and nature and sensitivity to the risk involved. An increasing number of cloud providers are reached using their previously certified standards and user support and administration applications and data. Also, a common two-factor authentication, in the form of strong authentication, is, for example, to be used as online banking. In theory, it should be protected using strong authentication networks. The stricter requirements apply mainly to CSP employees. They also have access to IT resources; just for example, it will be provided through strong authentication, using a chip card or USB stick that can be generated by hardware through hardware-based password authentication system or media. This is really necessary to use on the Internet. He went on to establish strict procedures that are the basis of all relationships of trust between participants for relationships between two actors. After the trust relationship is established through a series of trusted from a certification authority, participants can be used to authenticate each other in connection with [3]. There are a variety of authentication methods and techniques that organizations can choose as follows.
2.2.1.1 User Password Authentication
Authentication is the process of identifying users who ask for system, network or device access. Access control frequently determines user identity using credentials such as login and password. Additional authentication technologies, such as biometric and authentication applications, are also utilized to authenticate user identification.
2.2.1.2 Windows-Based User Authentication
Typically, the list is stored in the Windows Active Directory for the organization. The access control framework must be enabled to provide authentication for the user’s primary domain controller (PDC).
2.2.1.3 Directory-Based Authentication
To continue our expansion in business volume, often millions of users trying to use resources simultaneously. In such a scenario, the authentication body should be able to provide faster authentication. A directory-based authentication technique that is used to respond goes to the store LDAP user directory to verify user credentials.
2.2.1.4 Certificate-Based Authentication
It is also the user where you can connect digital ID, strong authentication technology. It released the authority for digital ID verification, also known as a digital ID trustworthy digital certificate. To ensure identification, a user has checked a variety of other parameters.
2.2.1.5 Smart Card–Based Authentication
This certificate is used as a second factor [13]. Smart card is the smallest co-processor data operation cryptographic tool.
2.2.1.6 Biometrics
This is a strong certification [9]. The third aspect of authentication to be done is based on the user. He said that those that they know (username) and (either network or token) or after work that they have (retinal scan, fingerprint or thermal scanning). In cases necessary for data, such as military/defense, are confidential.
2.2.1.7 Grid-Based Authentication
It is used as a second authentication factor. The user knew that (authenticated by the authentication username password), and then they asked her (grid card information). Entrust Identity Protector provides this certificate.
2.2.1.8 Knowledge-Based Authentication
In order to gain additional confidence in the identity of those users, keep in mind that the challenge attacker [2] is unlikely to be able to provide. On the basis of “shared