Using digital rights management for securing data in a medical research environment

ABSTRACT

We propose a digital rights management approach for sharing electronic health records in a health research facility and argue advantages of the approach. We also give an outline of the system under development and our implementation of the security features and discuss challenges that we faced and future directions.

References

1. }}Microsoft Active Directory Rights Management Service. http://technet.microsoft.com/en-ca/windowsserver/dd448611.asp.
2. }}Microsoft Office SharePoint Server. http://sharepoint.microsoft.com.
3. }}eXtensible rights Markup Language version 1.2. http://www.xrml.org/XrML_12.asp, 2001.
4. }}International Standards Organization, Information Technology, Multimedia Framework (MPEG-21), part 4: Intellectual Property Management and Protection Components. ISO/IEC 21000-4, 2006.
5. }}A. Fragopoulos, J. Gialelis, and D. Serpanos. Security Framework for Pervasive Healthcare Architectures Utilizing MPEG-21 IPMP Components. International Journal of Telemedicine and Applications, 2009.
6. }}B. C. M. Fung, K. Wang, R. Chen, and P. S. Yu. Privacy-preserving data publishing: A survey of recent developments. ACM Computing Surveys, 42(4):1--53, 2010.
7. }}M. Jafari, R. Safavi-Naini, C. Saunders, and N. P. Sheppard. Securing medical research data with a rights management system. In USENIX HealthSec'10: 1st USENIX Workshop on Health Security and Privacy (to appear), 2010.
8. }}S. Kenny and L. Korba. Applying digital rights management systems to privacy rights management. Computers & Security, 21(7):648 -- 664, 2002.
9. }}W. Leister, T. Fretland, and I. Balasingham. Security and Authentication Architecture Using MPEG-21 for Wireless Patient Monitoring Systems. International Journal On Advances in Security, 2(1):16--29, 2009.
10. }}Q. Liu, R. Safavi-Naini, and N. P. Sheppard. Digital rights management for content distribution. In ACSW Frontiers '03, pages 49--58, 2003.
11. }}Microsoft. Rights Management Services (RMS): Client-to-Server Protocol Specification. http://msdn.microsoft.com/en-us/library/cc243191%28v=PROT.13%29.aspx, 2010.
12. }}M. Petković, S. Katzenbeisser, and K. Kursawe. Rights management technologies: A good choice for securing electronic health records?, In ISSE'07: Proceedings of the International Conference on Information Security Solutions Europe, pages 178--187, 2007.
13. }}N. P. Sheppard and R. Safavi-Naini. Protecting Privacy with the MPEG-21 IPMP Framework. In PET'06: Proceedings of the International Workshop on Privacy Enhancing Technologies, pages 152--171, 2006.
14. }}N. P. Sheppard, R. Safavi-Naini, and M. Jafari. A digital rights management model for healthcare. In POLICY'09: Proceedings of the IEEE International Workshop on Policies for Distributed Systems and Networks, pages 106--109, London, UK, 2009.
15. }}N. P. Sheppard, R. Safavi-Naini, and M. Jafari. A secure electronic healthcare record infrastructure in the digital rights management model. Technical report, 2009-939-18, Department of Computer Science, University of Calgary, 2009.
16. }}S. H. Woolf. The meaning of translational research and why it matters. The Journal of American Medical Association, 2008.

Index Terms

• Security and privacy

• Social and professional topics

  • Computing / technology policy

    • Computer crime