Deniable Authenticated Key Establishment for Internet Protocols

We propose two public-key schemes to achieve “deniable authentication” for the Internet Key Exchange (IKE). Our protocols can be implemented using different concrete mechanisms and we discuss different options; in particular we suggest solutions based on elliptic curve pairings. The protocol designs use the modular construction method of Canetti and Krawczyk which provides the basis for a proof of security. Our schemes can, in some situations, be more efficient than existing IKE protocols as well as having stronger deniability properties.

Modeling key compromise impersonation attacks on group key exchange protocols

A key exchange protocol allows a set of parties to agree upon a secret session key over a public network. Two-party key exchange (2PKE) protocols have been rigorously analyzed under various models considering different adversarial actions. However, the analysis of group key exchange (GKE) protocols has not been as extensive as that of 2PKE protocols. Particularly, the security attribute of key compromise impersonation (KCI) resilience has so far been ignored for the case of GKE protocols. We first model the security of GKE protocols addressing KCI attacks by both outsider and insider adversaries. We then show that a few existing protocols are not secure even against outsider KCI attacks. The attacks on these protocols demonstrate the necessity of considering KCI resilience for GKE protocols. Finally, we give a new proof of security for an existing GKE protocol under the revised model assuming random oracles.

The criminalisation of medical mistakes in Canada : a review

The issue of health professionals facing criminal charges of manslaughter or criminal negligence causing death or grievous bodily harm as a result of alleged negligence in their professional practice was thrown into stark relief by the recent acquittal of four physicians accused of mismanaging Canada’s blood system in the early 1980s. Stories like these, as well as international reports detailing an increase in the numbers of physicians being charged with (and in some cases convicted of) serious criminal offences as the result of alleged negligence in their professional practice, have resulted in some anxiety about the apparent increase in the incidence of such charges and their appropriateness in the healthcare context. Whilst research has focused on the incidence, nature and appropriateness of criminal charges against health professionals, particularly physicians, for alleged negligence in their professional practice in the United Kingdom, the United States, Japan, and New Zealand, the Canadian context has yet to be examined. This article examines the Canadian context and how the criminal law is used to regulate the negligent acts or omissions of a health care professional in the course of their professional practice. It also assesses the appropriateness of such use. It is important at this point to state that the analysis in this article does not focus on those, fortunately few, cases where a health professional has intentionally killed his or her patients but rather when patients’ deaths or grievous injuries were allegedly as a result of that health professional’s negligent acts or omissions when providing health services to that patient.

Paramedic knowledge of infectious disease aetiology and transmission in an Australian Emergency Medical System

Introduction: Paramedics and other emergency health workers are exposed to infectious disease particularly when undertaking exposure-prone procedures as a component of their everyday practice. This study examined paramedic knowledge of infectious disease aetiology and transmission in the pre-hospital care environment.--------- Methods: A mail survey of paramedics from an Australian ambulance service (n=2274) was conducted.--------- Results: With a response rate of 55.3% (1258/2274), the study demonstrated that paramedic knowledge of infectious disease aetiology and modes of transmission was poor. Of the 25 infectious diseases included in the survey, only three aetiological agents were correctly identified by at least 80% of respondents. The most accurate responses for aetiology of individual infectious diseases were for HIV/AIDS (91.4%), influenza (87.4%), and hepatitis B (85.7%). Poorest results were observed for pertussis, infectious mononucleosis, leprosy, dengue fever, Japanese B encephalitis and vancomycin resistant enterococcus (VRE), all with less than half the sample providing a correct response. Modes of transmission of significant infectious diseases were also assessed. Most accurate responses were found for HIV/AIDS (85.8%), salmonella (81.9%) and influenza (80.1%). Poorest results were observed for infectious mononucleosis, diphtheria, shigella, Japanese B encephalitis, vancomycin resistant enterococcus, meningococcal meningitis, rubella and infectious mononucleosis, with less than a third of the sample providing a correct response.--------- Conclusions: Results suggest that knowledge of aetiology and transmission of infectious disease is generally poor amongst paramedics. A comprehensive in-service education infection control programs for paramedics with emphasis on infectious disease aetiology and transmission is recommended.

A medical data reliability assessment model

There is currently a strong focus worldwide on the potential of large-scale Electronic Health Record (EHR) systems to cut costs and improve patient outcomes through increased efficiency. This is accomplished by aggregating medical data from isolated Electronic Medical Record databases maintained by different healthcare providers. Concerns about the privacy and reliability of Electronic Health Records are crucial to healthcare service consumers. Traditional security mechanisms are designed to satisfy confidentiality, integrity, and availability requirements, but they fail to provide a measurement tool for data reliability from a data entry perspective. In this paper, we introduce a Medical Data Reliability Assessment (MDRA) service model to assess the reliability of medical data by evaluating the trustworthiness of its sources, usually the healthcare provider which created the data and the medical practitioner who diagnosed the patient and authorised entry of this data into the patient’s medical record. The result is then expressed by manipulating health record metadata to alert medical practitioners relying on the information to possible reliability problems.

A time-variant medical data trustworthiness assessment model

Electronic Health Record (EHR) systems are being introduced to overcome the limitations associated with paper-based and isolated Electronic Medical Record (EMR) systems. This is accomplished by aggregating medical data and consolidating them in one digital repository. Though an EHR system provides obvious functional benefits, there is a growing concern about the privacy and reliability (trustworthiness) of Electronic Health Records. Security requirements such as confidentiality, integrity, and availability can be satisfied by traditional hard security mechanisms. However, measuring data trustworthiness from the perspective of data entry is an issue that cannot be solved with traditional mechanisms, especially since degrees of trust change over time. In this paper, we introduce a Time-variant Medical Data Trustworthiness (TMDT) assessment model to evaluate the trustworthiness of medical data by evaluating the trustworthiness of its sources, namely the healthcare organisation where the data was created and the medical practitioner who diagnosed the patient and authorised entry of this data into the patient’s medical record, with respect to a certain period of time. The result can then be used by the EHR system to manipulate health record metadata to alert medical practitioners relying on the information to possible reliability problems.

Nutritional status and information needs of medical oncology patients receiving treatment at an Australian public hospital

This study aimed to identify: i) the prevalence of malnutrition according to the scored Patient Generated-Subjective Global Assessment (PG-SGA); ii) utilization of available nutrition resources; iii) patient nutrition information needs; and iv) external sources of nutrition information. An observational, cross-sectional study was undertaken at an Australian public hospital on 191 patients receiving oncology services. According to PG-SGA, 49% of patients were malnourished and 46% required improved symptom management and/or nutrition intervention. Commonly reported nutrition-impact symptoms included: peculiar tastes (31%), no appetite (24%) and nausea (24%). External sources of nutrition information were accessed by 37%, with popular choices being media/internet (n=19) and family/friends (n=13). In a sub-sample (n=65), 32 patients were aware of the available nutrition resources, 23 thought the information sufficient and 19 patients had actually read them. Additional information on supplements and modifying side effects was requested by 26 patients. Malnutrition is common in oncology patients receiving treatment at an Australian public hospital and almost half require improved symptom management and/or nutrition intervention. Patients who read the available nutrition information found it useful, however awareness of these nutrition resources and the provision of information on supplementation and managing symptoms requires attention.

End-of-life care pathways for improving outcomes in caring for the dying (Protocol)

We aim to assess the effects of end-of-life care pathways, compared with usual care or with care guided by another end-of-life care pathway across all healthcare settings (hospitals, residential aged care facilities, community). In particular, we aim to assess the effects on symptom severity and quality of life of people who are dying and/or those related to the care such as families, caregivers and health professionals.

Queensland Emergency Medical System : a structural and organizational model for the emergency medical system in Australia

Objective: The emergency medical system (EMS) can be defined as a comprehensive, coordinated and integrated system of care for patients suffering acute illness and injury. The aim of the present paper is to describe the evolution of the Queensland Emergency Medical System (QEMS) and to recommend a strategic national approach to EMS development. Methods: Following the formation of the Queensland Ambulance Service in 1991, a state EMS committee was formed. This committee led the development and approval of the cross portfolio QEMS policy framework that has resulted in dynamic policy development, system monitoring and evaluation. This framework is led by the Queensland Emergency Medical Services Advisory Committee. Results: There has been considerable progress in the development of all aspects of the EMS in Queensland. These developments have derived from the improved coordination and leadership that QEMS provides and has resulted in widespread satisfaction by both patients and stakeholders. Conclusions: The strategic approach outlined in the present paper offers a model for EMS arrangements throughout Australia. We propose that the Council of Australian Governments should require each state and Territory to maintain an EMS committee. These state EMS committees should have a broad portfolio of responsibilities. They should provide leadership and direction to the development of the EMS and ensure coordination and quality of outcomes. A national EMS committee with broad representation and broad scope should be established to coordinate the national development of Australia's EMS.

Modeling and Verification of Privacy Enhancing Protocols

Privacy enhancing protocols (PEPs) are a family of protocols that allow secure exchange and management of sensitive user information. They are important in preserving users’ privacy in today’s open environment. Proof of the correctness of PEPs is necessary before they can be deployed. However, the traditional provable security approach, though well established for verifying cryptographic primitives, is not applicable to PEPs. We apply the formal method of Coloured Petri Nets (CPNs) to construct an executable specification of a representative PEP, namely the Private Information Escrow Bound to Multiple Conditions Protocol (PIEMCP). Formal semantics of the CPN specification allow us to reason about various security properties of PIEMCP using state space analysis techniques. This investigation provides us with preliminary insights for modeling and verification of PEPs in general, demonstrating the benefit of applying the CPN-based formal approach to proving the correctness of PEPs.

The impact of health information technology on the quality of medical and health care : a systematic review

Objective: To systematically review the published evidence of the impact of health information technology (HIT) on the quality of medical and health care specifically clinicians’ adherence to evidence-based guidelines and the corresponding impact this had on patient clinical outcomes. In order to be as inclusive as possible the research examined literature discussing the use of health information technologies and systems in both medical care such as clinical and surgical, and other health care such as allied health and preventive services.----- Design: Systematic review----- Data Sources: Relevant literature was systematically searched on English language studies indexed in MEDLINE and CINAHL(1998 to 2008), Cochrane Library, PubMed, Database of Abstracts of Review of Effectiveness (DARE), Google scholar and other relevant electronic databases. A search for eligible studies (matching the inclusion criteria) was also performed by searching relevant conference proceedings available through internet and electronic databases, as well as using reference lists identified from cited papers.----- Selection criteria: Studies were included in the review if they examined the impact of Electronic Health Record (EHR), Computerised Provider Order-Entry (CPOE), or Decision Support System (DS); and if the primary outcomes of the studies were focused on the level of compliance with evidence-based guidelines among clinicians. Measures could be either changes in clinical processes resulting from a change of the providers’ behaviour or specific patient outcomes that demonstrated the effectiveness of a particular treatment given by providers. ----- Methods: Studies were reviewed and summarised in tabular and text form. Due to heterogeneity between studies, meta-analysis was not performed.----- Results: Out of 17 studies that assessed the impact of health information technology on health care practitioners’ performance, 14 studies revealed a positive improvement in relation to their compliance with evidence-based guidelines. The primary domain of improvement was evident from preventive care and drug ordering studies. Results from the studies that included an assessment for patient outcomes however, were insufficient to detect either clinically or statistically important improvements as only a small proportion of these studies found benefits. For instance, only 3 studies had shown positive improvement, while 5 studies revealed either no change or adverse outcomes.----- Conclusion: Although the number of included studies was relatively small for reaching a conclusive statement about the effectiveness of health information technologies and systems on clinical care, the results demonstrated consistency with other systematic reviews previously undertaken. Widescale use of HIT has been shown to increase clinician’s adherence to guidelines in this review. Therefore, it presents ongoing opportunities to maximise the uptake of research evidence into practice for health care organisations, policy makers and stakeholders.