A PHR system with policy-based fine-grained access control and revocation mechanism

Collaborative sharing of information is becoming much more needed technique to achieve complex goals in today's fast-paced tech-dominant world. Personal Health Record (PHR) system has become a popular research area for sharing patients informa- tion very quickly among health professionals. PHR systems store and process sensitive information, which should have proper security mechanisms to protect patients' private data. Thus, access control mechanisms of the PHR should be well-defined. Secondly, PHRs should be stored in encrypted form. Cryptographic schemes offering a more suitable solution for enforcing access policies based on user attributes are needed for this purpose. Attribute-based encryption can resolve these problems, we propose a patient-centric framework that protects PHRs against untrusted service providers and malicious users. In this framework, we have used Ciphertext Policy Attribute Based Encryption scheme as an efficient cryptographic technique, enhancing security and privacy of the system, as well as enabling access revocation. Patients can encrypt their PHRs and store them on untrusted storage servers. They also maintain full control over access to their PHR data by assigning attribute-based access control to selected data users, and revoking unauthorized users instantly. In order to evaluate our system, we implemented CP-ABE library and web services as part of our framework. We also developed an android application based on the framework that allows users to register into the system, encrypt their PHR data and upload to the server, and at the same time authorized users can download PHR data and decrypt it. Finally, we present experimental results and performance analysis. It shows that the deployment of the proposed system would be practical and can be applied into practice.

How does employer support and educational background effect an Ergonomics Practitioner’s awareness of the relationship between ergonomics and psychosocial hazard control?

There is a growning need to address psychological health and safety in the workplace. Ergonomics tends to be widely recognized for its physical applications, such as ¨office¨ and ¨manual materials handling¨ however the other domains of specialization of ergonomics (cognitive and organizational) appear to be less well known. This study evaluates the level of understanding that professionals who practice ergonomics have of the relation between ergonomics and the control of psychosocial hazards in the workplace. A survey was distributed to ergonomics practitioners and asked them about their awareness of the relation between ergonomics and workplace psychosocial hazard control. Ergonomists and human factors specialists demonstrated a greater awareness of this relationship than other allied occupational groups that also practice ergonomics, however they indicated that there may be difficulties in the “real world” applying these areas of knowledge into practice. Participants who demonstrated a high level of awareness of the relation between ergonomics and psychosocial hazard control demonstrated stronger organizational commitment than participants with a low awareness. Ergonomics practitioners who reported having employer support for professional development also demonstrated a higher degree of awareness of the relation between ergonomics and psychosocial hazard control, as did the professionals who had been practicing in the field the longest. This research provides some insight for professional associations for Ergonomists, employers of Ergonomists, and human resource professionals about how ergonomics practitioners perceive the ergonomics field and the profession as well as their employing organization.