Shane Bracher is a PhD student at Bond University working under the supervision of Padmanabhan Krishnan. He has received a Bachelor degree and a Master (Honours) degree in Information Technology, both from Bond University. For his research internship, Shane worked at Siemens AG (Corporate Technology) in Munich, Germany, participating in projects based on Web services and Internet security. Shane is also involved in the Centre for Software Assurance at Bond University. His research interests include security for service-oriented architectures, Web services collaboration and protocol modelling.
Bond University Australia
Padmanabhan Krishnan is a Professor of Computer Science and Head of Department at the School of Information Technology, Bond University. He is also the Director of the Centre for Software Assurance and an Associate Research Fellow at the International Institute for Software Technology, United Nations University. He got his BTech from IIT-Kanpur and MS and PhD from the University of Michigan, Ann Arbor. He has held positions in the US, Denmark, Germany and New Zealand. His research interests are in the area of software engineering with a focus on formal methods, security and testing.
Secure Document Circulation: An Architecture for e-Health
Shane Bracher, Padmanabhan Krishnan
We present an architecture for the secure circulation of electronic medical records. The architecture considers two issues prevalent in e-health - inter-operability and security and privacy - and is designed for inter-organisational information flow. We focus our attention on the protection of patient privacy and discuss how privacy policies are applied and enforced on medical records. We also consider privacy protection based on trust relationships formed by the patient. A key feature of the architecture is that privacy policies are not assumed to be complete. For cases where policies do not contain sufficient information to make a privacy-related decision, we show how a simple reasoning scheme can be used based on the “need to know” principle.
Electronic Medical Records; Privacy; Policies; Workflow