Ruotsalainen Pekka Sakari, Blobel Bernd Gerhard, Seppälä Antto Veikko, Sorvari Hannu Olavi, Nykänen Pirkko Anneli
National Instutute for Health and Welfare, Department of Information, Helsinki, Finland.
J Med Internet Res. 2012 Apr 6;14(2):e52. doi: 10.2196/jmir.1972.
Ubiquitous computing technology, sensor networks, wireless communication and the latest developments of the Internet have enabled the rise of a new concept-pervasive health-which takes place in an open, unsecure, and highly dynamic environment (ie, in the information space). To be successful, pervasive health requires implementable principles for privacy and trustworthiness.
This research has two interconnected objectives. The first is to define pervasive health as a system and to understand its trust and privacy challenges. The second goal is to build a conceptual model for pervasive health and use it to develop principles and policies which can make pervasive health trustworthy.
In this study, a five-step system analysis method is used. Pervasive health is defined using a metaphor of digital bubbles. A conceptual framework model focused on trustworthiness and privacy is then developed for pervasive health. On that model, principles and rules for trusted information management in pervasive health are defined.
In the first phase of this study, a new definition of pervasive health was created. Using this model, differences between pervasive health and health care are stated. Reviewed publications demonstrate that the widely used principles of predefined and static trust cannot guarantee trustworthiness and privacy in pervasive health. Instead, such an environment requires personal dynamic and context-aware policies, awareness, and transparency. A conceptual framework model focused on information processing in pervasive health is developed. Using features of pervasive health and relations from the framework model, new principles for trusted pervasive health have been developed. The principles propose that personal health data should be under control of the data subject. The person shall have the right to verify the level of trust of any system which collects or processes his or her health information. Principles require that any stakeholder or system collecting or processing health data must support transparency and shall publish its trust and privacy attributes and even its domain specific policies.
The developed principles enable trustworthiness and guarantee privacy in pervasive health. The implementation of principles requires new infrastructural services such as trust verification and policy conflict resolution. After implementation, the accuracy and usability of principles should be analyzed.
普适计算技术、传感器网络、无线通信以及互联网的最新发展催生了一个新概念——普适健康,它发生在一个开放、不安全且高度动态的环境(即信息空间)中。为了取得成功,普适健康需要可实施的隐私和可信度原则。
本研究有两个相互关联的目标。第一个目标是将普适健康定义为一个系统,并理解其信任和隐私挑战。第二个目标是构建一个普适健康的概念模型,并利用它来制定能够使普适健康可信的原则和政策。
在本研究中,使用了一种五步系统分析方法。通过数字气泡隐喻来定义普适健康。然后为普适健康开发了一个侧重于可信度和隐私的概念框架模型。在该模型上,定义了普适健康中可信信息管理的原则和规则。
在本研究的第一阶段,创建了普适健康的新定义。利用这个模型,阐述了普适健康与医疗保健之间的差异。经审查的出版物表明,广泛使用的预定义和静态信任原则无法保证普适健康中的可信度和隐私。相反,这样的环境需要个人动态和情境感知政策、意识及透明度。开发了一个侧重于普适健康中信息处理的概念框架模型。利用普适健康的特征和框架模型中的关系,制定了可信普适健康的新原则。这些原则提出个人健康数据应由数据主体控制。个人应有权核实任何收集或处理其健康信息的系统的信任级别。原则要求任何收集或处理健康数据的利益相关者或系统必须支持透明度,并应公布其信任和隐私属性以及其特定领域的政策。
所制定的原则能够在普适健康中实现可信度并保证隐私。原则的实施需要新的基础设施服务,如信任验证和政策冲突解决。实施后,应分析原则的准确性和可用性。