Authors:
Alexandra Dmitrienko
1
;
Zecir Hadzic
1
;
Hans Löhr
1
;
Marcel Winandy
1
and
Ahmad-Reza Sadeghi
2
Affiliations:
1
Ruhr-University Bochum, Germany
;
2
Technische Universität Darmstadt, Germany
Keyword(s):
Health records, Mobile computing, Smartphone, Security architecture, Trusted computing.
Related
Ontology
Subjects/Areas/Topics:
Biomedical Engineering
;
Cloud Computing
;
Confidentiality and Data Security
;
Distributed and Mobile Software Systems
;
e-Health
;
Health Engineering and Technology Applications
;
Health Information Systems
;
Mobile Technologies
;
Mobile Technologies for Healthcare Applications
;
Neural Rehabilitation
;
Neurotechnology, Electronics and Informatics
;
Platforms and Applications
;
Software Engineering
Abstract:
Using mobile phones to access healthcare data is an upcoming application scenario of increasing importance in the near future. However, important aspects to consider in this context are the high security and privacy requirements for sensitive medical data. Current mobile phones using standard operating systems and software cannot offer appropriate protection for sensitive data, although the hardware platform often offers dedicated security features. Malicious software (malware) like Trojan horses on the mobile phone could gain unauthorized access to sensitive medical data.
In this paper, we propose a complete security framework to protect medical data (such as electronic health records) and authentication credentials that are used to access e-health servers. Derived from a generic architecture that can be used for PCs, we introduce a security architecture specifically for mobile phones, based on existing hardware security extensions. We describe security building blocks, including tr
usted hardware features, a security kernel providing isolated application environments as well as a secure graphical user interface, and a trusted wallet (TruWallet) for secure authentication to e-health servers. Moreover, we present
a prototype implementation of the trusted wallet on a current smartphone: the Nokia N900. Based on our architecture, health care professionals can safely and securely process medical data on their mobile phones without the risk of disclosing sensitive information as compared to commodity mobile operating systems.
(More)