Browsing by Author "Kayem, Anne V.D.M."

Now showing 1 - 2 of 2

On the Challenge of Adopting Standard EHR Systems in Developing Countries
(Association for Computing Machinery (ACM), 2013) Ssembatya, Richard; Kayem, Anne V.D.M.; Mardsen, Gary
Electronic health record (EHR) systems are a popular mechanism for accessing health records in the developed world and have contributed towards improved and cost-effective health care management. However, the development of appropriate and scalable EHR systems in developing countries has been difficult to achieve because of certain limitations inherent in the technological infrastructure. In this paper, we present a comparative study of 19 EHR systems in terms of the security and usability of these systems within the context of the developing world. Our aim was to investigate whether online health services designed for developed countries can be adopted for EHR systems in developing countries. The investigation was based on a number of dimensions such as development environment, system platform, type and access control standards found in the National Institute for Standard and Technology (NIST) and Certification Commission for Health Information Technology (CCHIT). Our research indicates that all the systems evaluated require online access control decisions. Solely relying on an online access control system is limiting, particularly in developing countries where access to the server can be disrupted by a number of disastrous events.
Secure and Efficient Mobile Personal Data Sharing in Resource Constrained Environments
(IEEE 29th International Conference on Advanced Information Networking and Applications Workshop (WAINA), 2015) Ssembatya, Richard; Kayem, Anne V.D.M.
Although personal health record (PHR) systems are widely used in the developed world, little has been done to explore the utility of these PHR systems in the developing world. One of the key reasons behind this is the fact that a lot of areas in the developing world suffer from technological impediments that are a result of poor infrastructure, low literacy, intermittent power connectivity, and unstable bandwidth connectivity. In technological resource constrained environments such as these, deploying standard PHR systems is challenging and so it makes sense to redesign these systems to cope with the environmental limitations in order to offer users a usable and reliable platform. Furthermore, healthcare data is inherently privacy and security sensitive so, in re-designing the PHR system the security and privacy requirements need also be taken into consideration. The idea in this case, is to opt for security mechanisms that offer the same levels of security as is the case in the standard PHR systems that are used in the developed world, but that are also lightweight in terms of performance and storage overhead. In this paper, based on the observation that mobile phone use is widely proliferated in developing countries, we propose an access control framework supported by identity-based encryption for a secure Mobile-PHR system. Results from our prototype evaluation (laboratory and field studies) indicate that the proposed IBE scheme effectively secures PHRs beyond the healthcare provider's security domain and is efficient performance-wise.