Sahi Aqeel, Lai David, Li Yan
Department of Math and Computing, University of Southern Queensland, 487/521-535 West St, Darling Heights, QLD 4350, Australia; Computer Center, University of ThiQar, ThiQar, Iraq.
Department of Math and Computing, University of Southern Queensland, 487/521-535 West St, Darling Heights, QLD 4350, Australia.
Comput Biol Med. 2016 Nov 1;78:1-8. doi: 10.1016/j.compbiomed.2016.09.003. Epub 2016 Sep 12.
Cloud computing was introduced as an alternative storage and computing model in the health sector as well as other sectors to handle large amounts of data. Many healthcare companies have moved their electronic data to the cloud in order to reduce in-house storage, IT development and maintenance costs. However, storing the healthcare records in a third-party server may cause serious storage, security and privacy issues. Therefore, many approaches have been proposed to preserve security as well as privacy in cloud computing projects. Cryptographic-based approaches were presented as one of the best ways to ensure the security and privacy of healthcare data in the cloud. Nevertheless, the cryptographic-based approaches which are used to transfer health records safely remain vulnerable regarding security, privacy, or the lack of any disaster recovery strategy. In this paper, we review the related work on security and privacy preserving as well as disaster recovery in the eHealth cloud domain. Then we propose two approaches, the Security-Preserving approach and the Privacy-Preserving approach, and a disaster recovery plan. The Security-Preserving approach is a robust means of ensuring the security and integrity of Electronic Health Records, and the Privacy-Preserving approach is an efficient authentication approach which protects the privacy of Personal Health Records. Finally, we discuss how the integrated approaches and the disaster recovery plan can ensure the reliability and security of cloud projects.
云计算作为一种替代存储和计算模型，在医疗领域以及其他领域被引入，用于处理大量数据。许多医疗保健公司已将其电子数据迁移到云端，以降低内部存储、信息技术开发和维护成本。然而，将医疗记录存储在第三方服务器可能会引发严重的存储、安全和隐私问题。因此，人们提出了许多方法来在云计算项目中保护安全和隐私。基于加密的方法被视为确保云端医疗数据安全和隐私的最佳方法之一。尽管如此，用于安全传输健康记录的基于加密的方法在安全性、隐私性或缺乏任何灾难恢复策略方面仍然存在漏洞。在本文中，我们回顾了电子健康云领域中有关安全和隐私保护以及灾难恢复的相关工作。然后，我们提出了两种方法，即安全保护方法和隐私保护方法，以及一个灾难恢复计划。安全保护方法是确保电子健康记录安全和完整性的有力手段，而隐私保护方法是一种保护个人健康记录隐私的有效认证方法。最后，我们讨论了综合方法和灾难恢复计划如何确保云项目的可靠性和安全性。
