A PHR system with policy-based fine-grained access control and revocation mechanism

Collaborative sharing of information is becoming much more needed technique to achieve complex goals in today's fast-paced tech-dominant world. Personal Health Record (PHR) system has become a popular research area for sharing patients informa- tion very quickly among health professionals. PHR systems store and process sensitive information, which should have proper security mechanisms to protect patients' private data. Thus, access control mechanisms of the PHR should be well-defined. Secondly, PHRs should be stored in encrypted form. Cryptographic schemes offering a more suitable solution for enforcing access policies based on user attributes are needed for this purpose. Attribute-based encryption can resolve these problems, we propose a patient-centric framework that protects PHRs against untrusted service providers and malicious users. In this framework, we have used Ciphertext Policy Attribute Based Encryption scheme as an efficient cryptographic technique, enhancing security and privacy of the system, as well as enabling access revocation. Patients can encrypt their PHRs and store them on untrusted storage servers. They also maintain full control over access to their PHR data by assigning attribute-based access control to selected data users, and revoking unauthorized users instantly. In order to evaluate our system, we implemented CP-ABE library and web services as part of our framework. We also developed an android application based on the framework that allows users to register into the system, encrypt their PHR data and upload to the server, and at the same time authorized users can download PHR data and decrypt it. Finally, we present experimental results and performance analysis. It shows that the deployment of the proposed system would be practical and can be applied into practice.

Behavioral Perspectives on Organizational Change: Practice Adoption, Product Culling, and Technological Search

This dissertation explores the complex process of organizational change, applying a behavioral lens to understand change in processes, products, and search behaviors. Chapter 1 examines new practice adoption, exploring factors that predict the extent to which routines are adopted “as designed” within the organization. Using medical record data obtained from the hospital’s Electronic Health Record (EHR) system I develop a novel measure of the “gap” between routine “as designed” and routine “as realized.” I link this to a survey administered to the hospital’s professional staff following the adoption of a new EHR system and find that beliefs about the expected impact of the change shape fidelity of the adopted practice to its design. This relationship is more pronounced in care units with experienced professionals and less pronounced when the care unit includes departmental leadership. This research offers new insights into the determinants of routine change in organizations, in particular suggesting the beliefs held by rank-and-file members of an organization are critical in new routine adoption. Chapter 2 explores changes to products, specifically examining culling behaviors in the mobile device industry. Using a panel of quarterly mobile device sales in Germany from 2004-2009, this chapter suggests that the organization’s response to performance feedback is conditional upon the degree to which decisions are centralized. While much of the research on product exit has pointed to economic drivers or prior experience, these central finding of this chapter—that performance below aspirations decreases the rate of phase-out—suggests that firms seek local solutions when doing poorly, which is consistent with behavioral explanations of organizational action. Chapter 3 uses a novel text analysis approach to examine how the allocation of attention within organizational subunits shapes adaptation in the form of search behaviors in Motorola from 1974-1997. It develops a theory that links organizational attention to search, and the results suggest a trade-off between both attentional specialization and coupling on search scope and depth. Specifically, specialized unit attention to a more narrow set of problems increases search scope but reduces search depth; increased attentional coupling also increases search scope at the cost of depth. This novel approach and these findings help clarify extant research on the behavioral outcomes of attention allocation, which have offered mixed results.

Mortality trends among people with type 1 and type 2 diabetes in Australia: 1997-2010

OBJECTIVE: With improvements in cardiovascular disease (CVD) rates among people with diabetes, mortality rates may also be changing. However, these trends may be influenced by coding practices of CVD-related deaths on death certificates. We analyzed trends of mortality over 13 years in people with diabetes and quantified the potential misclassification of CVD mortality according to current coding methods. RESEARCH DESIGN AND METHODS: A total of 1,136,617 Australians with diabetes registered on the National Diabetes Services Scheme between 1997 and 2010 were linked to the National Death Index. Excess mortality relative to the Australian population was reported as standardized mortality ratios (SMRs). Potential misclassification of CVD mortality was determined by coding CVD according to underlying cause of death (COD) and then after consideration of both the underlying and other causes listed in part I of the death certificate. RESULTS: For type 1 diabetes, the SMR decreased in males from 4.20 in 1997 to 3.08 in 2010 (Ptrend < 0.001) and from 3.92 to 3.46 in females (Ptrend < 0.01). For type 2 diabetes, the SMR decreased in males from 1.40 to 1.21 (Ptrend < 0.001) and from 1.56 to 1.22 in females (Ptrend < 0.001). CVD deaths decreased from 35.6 to 31.2% and from 31.5 to 27.2% in males and females with type 1 diabetes, respectively (Ptrend < 0.001 for both sexes). For type 2 diabetes, CVD decreased from 44.5 to 29.2% in males and from 45.5 to 31.6% in females (Ptrend < 0.001 for both sexes). Using traditional coding methods, ∼38 and 26% of CVD deaths are underestimated in type 1 diabetes and type 2 diabetes, respectively. CONCLUSIONS: All-cause and CVD mortality has decreased in diabetes. However, the total CVD mortality burden is underestimated when only underlying COD is considered. This has important ramifications for understanding mortality patterns in diabetes.

An evaluation of an action research nursing documentation project

AIMS AND OBJECTIVES: The aim of this study is to describe healthcare professionals' experiences and perceptions of an intervention implemented in an action research project conducted to improve nursing documentation practices in four municipalities in Norway.

BACKGROUND: Documentation of individualized patient care is a continuing concern in healthcare services and could impacts the quality and safety of healthcare. Use of electronic systems has made some aspects of documentation more comprehensive, but creation of an individualized care plan remains a pressing issue.

DESIGN: A qualitative descriptive design was used.

METHODS: An action research project was conducted between 2010 and 2012 to improve the content and quality of nursing documentation in community healthcare services in four municipalities. One year after the project was completed four focus group interviews were conducted with healthcare professionals, one for each involved municipality. Two unit managers were interviewed individually. Qualitative content analysis was used.

RESULTS: Three themes emerged: healthcare professionals perceived competing interest; they experienced that they had to manage complexity and changes; and they highlighted a clear and visible leader as important for success.

CONCLUSIONS: Quality improvement activities are essential. Healthcare professionals experience a complicated situation when electronic health record systems do not support workflow. Further research is recommended to focus on the functionality and user interface of EHR systems, and on the role of leadership when implementing changes in clinical practice. This article is protected by copyright. All rights reserved.

Análisis de las barreras para la unificación de una Historia Clínica Electrónica -HCE- en Colombia

Objetivo: Identificar las barreras para la unificación de una Historia Clínica Electrónica –HCE- en Colombia. Materiales y Métodos: Se realizó un estudio cualitativo. Se realizaron entrevistas semiestructuradas a profesionales y expertos de 22 instituciones del sector salud, de Bogotá y de los departamentos de Cundinamarca, Santander, Antioquia, Caldas, Huila, Valle del Cauca. Resultados: Colombia se encuentra en una estructuración para la implementación de la Historia Clínica Electrónica Unificada -HCEU-. Actualmente, se encuentra en unificación en 42 IPSs públicas en el departamento de Cundinamarca, el desarrollo de la HCEU en el país es privado y de desarrollo propio debido a las necesidades particulares de cada IPS. Conclusiones: Se identificaron barreras humanas, financieras, legales, organizacionales, técnicas y profesionales en los departamentos entrevistados. Se identificó que la unificación de la HCE depende del acuerdo de voluntades entre las IPSs del sector público, privado, EPSs, y el Gobierno Nacional.

Improving health behaviours during pregnancy: A new direction for the pregnancy handheld record

Obstetric documentation processes may influence the clinical, behavioural, and psychological outcomes of pregnancy, although recent alterations to integrate obstetric documentation with pregnancy handheld records have been unsuccessful. Woman-held records as a companion to usual obstetric documentation have the potential to improve pregnancy-related health behaviours with a demonstrated association with maternal and infant health outcomes, and recommendations for their format and content are provided.

Does conurbation affect the risk of poor mental health? A population based record linkage study

To determine if urban residence is associated with an increased risk of anxiety/depression independent of psychosocial stressors, concentrated disadvantage or selective migration between urban and rural areas, this population wide record-linkage study utilised data on receipt of prescription medication linked to area level indicators of conurbation and disadvantage. An urban/rural gradient in anxiolytic and antidepressant use was evident that was independent of variation in population composition. This gradient was most pronounced amongst disadvantaged areas. Migration into increasingly urban areas increased the likelihood of medication. These results suggest increasing conurbation is deleterious to mental health, especially amongst residents of deprived areas

Privacy Preserving Probabilistic Record Linkage (P3RL): a novel method for linking existing health-related data and maintaining participant confidentiality.

BACKGROUND Record linkage of existing individual health care data is an efficient way to answer important epidemiological research questions. Reuse of individual health-related data faces several problems: Either a unique personal identifier, like social security number, is not available or non-unique person identifiable information, like names, are privacy protected and cannot be accessed. A solution to protect privacy in probabilistic record linkages is to encrypt these sensitive information. Unfortunately, encrypted hash codes of two names differ completely if the plain names differ only by a single character. Therefore, standard encryption methods cannot be applied. To overcome these challenges, we developed the Privacy Preserving Probabilistic Record Linkage (P3RL) method. METHODS In this Privacy Preserving Probabilistic Record Linkage method we apply a three-party protocol, with two sites collecting individual data and an independent trusted linkage center as the third partner. Our method consists of three main steps: pre-processing, encryption and probabilistic record linkage. Data pre-processing and encryption are done at the sites by local personnel. To guarantee similar quality and format of variables and identical encryption procedure at each site, the linkage center generates semi-automated pre-processing and encryption templates. To retrieve information (i.e. data structure) for the creation of templates without ever accessing plain person identifiable information, we introduced a novel method of data masking. Sensitive string variables are encrypted using Bloom filters, which enables calculation of similarity coefficients. For date variables, we developed special encryption procedures to handle the most common date errors. The linkage center performs probabilistic record linkage with encrypted person identifiable information and plain non-sensitive variables. RESULTS In this paper we describe step by step how to link existing health-related data using encryption methods to preserve privacy of persons in the study. CONCLUSION Privacy Preserving Probabilistic Record linkage expands record linkage facilities in settings where a unique identifier is unavailable and/or regulations restrict access to the non-unique person identifiable information needed to link existing health-related data sets. Automated pre-processing and encryption fully protect sensitive information ensuring participant confidentiality. This method is suitable not just for epidemiological research but also for any setting with similar challenges.