A PHR system with policy-based fine-grained access control and revocation mechanism

Collaborative sharing of information is becoming much more needed technique to achieve complex goals in today's fast-paced tech-dominant world. Personal Health Record (PHR) system has become a popular research area for sharing patients informa- tion very quickly among health professionals. PHR systems store and process sensitive information, which should have proper security mechanisms to protect patients' private data. Thus, access control mechanisms of the PHR should be well-defined. Secondly, PHRs should be stored in encrypted form. Cryptographic schemes offering a more suitable solution for enforcing access policies based on user attributes are needed for this purpose. Attribute-based encryption can resolve these problems, we propose a patient-centric framework that protects PHRs against untrusted service providers and malicious users. In this framework, we have used Ciphertext Policy Attribute Based Encryption scheme as an efficient cryptographic technique, enhancing security and privacy of the system, as well as enabling access revocation. Patients can encrypt their PHRs and store them on untrusted storage servers. They also maintain full control over access to their PHR data by assigning attribute-based access control to selected data users, and revoking unauthorized users instantly. In order to evaluate our system, we implemented CP-ABE library and web services as part of our framework. We also developed an android application based on the framework that allows users to register into the system, encrypt their PHR data and upload to the server, and at the same time authorized users can download PHR data and decrypt it. Finally, we present experimental results and performance analysis. It shows that the deployment of the proposed system would be practical and can be applied into practice.

The development of an online neonatal intensive care unit family education

Background: British Columbia’s Fraser Health Authority (FHA) neonatal intensive care units (NICUs) value family centered care (FCC). Nevertheless, there is limited evidence that FCC is actually incorporated into practice, as well as some concern that FHA NICU education is inaccessible, inconsistent, or disorganized. Purpose: The mission of this project is to support the principles of FCC throughout the development of an FHA online NICU family education guide by reflecting upon the needs of families throughout their NICU journey. Methods: A needs assessment was initially completed and included literature reviews, consultations, and an environmental scan. This data informed development of an online NICU family education guide which plots current education materials along key stages of the NICU journey: prenatal, admission, early days, growing and developing, discharge and at home. For the purposes of this practicum, only the prenatal stage was fully developed and will serve as a template for other stages following a formative evaluation. A pamphlet and revised FHA Neonatal Checkpoint will also be developed to augment teaching by health care professionals. Implementation and evaluation plans were adapted from the Center for Disease Control Framework for Program Evaluation in Public Health. Results: The needs assessment validates and directs the development, implementation, and evaluation of the online guide illustrating an FCC approach. The online guide centralizes and organizes education by selecting education topics that relate to each stage of the NICU journey. This family-directed design enables families’ access to consistent and reliable information and offers them an opportunity to learn at their own pace. Conclusion: The process of creating, implementing, and evaluating an online family education program for FHA NICUs elucidates the intricacies and the advantages of integrating FCC into NICU practice.