Developing technologies to protect security and privacy of electronic health information

May 31, 2012 By Abby Robinson

Information sharing requires that partners establish broad electronic trust among the caretakers of critical information and those who need and are authorized to use that information.

Researchers from Georgia Tech teamed with Children’s Healthcare of Atlanta and Emory University’s Center for Comprehensive Informatics to develop technologies that will protect the security and privacy of electronic health .

“Storing medical records in electronic format and sharing them among different organizations has the potential to produce enormous improvements in the quality and efficiency of the health care system, but unauthorized disclosure of the information has the potential to damage lives and harm careers,” said Douglas Blough, a professor in the School of Electrical and Computer Engineering at Georgia Tech.

Through a project called MedVault, Blough and professors Mustaque Ahamad and Ling Liu of the School of Computer Science at Georgia Tech are developing a broad set of information security and privacy tools that can be integrated with records systems and work flows. MedVault is supported by the National Science Foundation and the Atlanta Clinical and Translational Science Institute.

With exchanges popping up across the country, individuals will begin sharing health documents with various health care system entities, which will need to verify the source and trustworthiness of the documents. MedVault researchers developed a system that uses redactable signature technology for source-verifiable, patient-controlled information sharing. The system enables documents digitally signed by a health care provider to be authenticated, while at the same time invisibly deleting information a patient wants to keep confidential.

“This technology could be especially valuable, for example, to parents who need certified health records to enroll a child in school, college, summer camp or other activity because parents would just need this one digitally signed document and could use it in many different ways,” explained Blough.

The research team also designed a policy combination and conflict resolution system that can examine the policies of multiple health care entities and ensure they are all followed.

“Each organization with a health information exchange may have a different policy about what information in their system can be disclosed under specific circumstances and patients might want to set their own disclosure controls, and all of these policies must be enforced. Our system combines these multiple policies and resolves any conflicts,” added Blough.

The MedVault team is working to ensure that these technologies are seamlessly integrated with the overall health system and its medical processes to provide strong security and privacy while assuring patient safety. 

Explore further: Nation's only citywide electronic health information exchange: Improving health and lowering costs

Related Stories

Researchers say e-health must be a priority

February 24, 2011

An electronic health record system should be the backbone of health care reform in Canada and more must be done to speed up the implementation of this initiative across the country. Furthermore, for this system to be put ...

Recommended for you

Toyota promises better mileage and ride with Prius hybrid

October 13, 2015

Toyota Motor Corp. released details for its fourth-generation Prius on Tuesday, promising that improvements in the battery, engine, wind resistance and weight mean better mileage for the world's top-selling hybrid car.

Facebook to test mobile app shopping tab

October 12, 2015

Facebook said Monday that it will begin testing a shopping tab for its mobile app as it works to ramp up advertising and online commerce offerings.


Please sign in to add a comment. Registration is free, and takes less than a minute. Read more

Click here to reset your password.
Sign in to get notified via email when new comments are made.