Today, many organizations allow their employees to bring their own smartphones or tablets to work and to access the corporate network, which is known as a bring your own device (BYOD). However, many such companies overlook potential security risks concerning privacy and confidentiality. This paper provides a review of existing literature concerning the preservation of privacy and confidentiality, with a focus on recent trends in the use of BYOD. This review spans a large spectrum of information security research, ranging from management (risk and policy) to technical aspects of privacy and confidentiality in BYOD. Furthermore, this study proposes a policy-based framework for preserving data confidentiality in BYOD. This framework considers a number of aspects of information security and corresponding techniques, such as policy, location privacy, centralized control, cryptography, and operating system level security, which have been omitted in previous studies. The main contribution is to investigate recent trends concerning the preservation of confidentiality in BYOD from the perspective of information security and to analyze the critical and comprehensive factors needed to strengthen data privacy in BYOD. Finally, this paper provides a foundation for developing the concept of preserving confidentiality in BYOD and describes the key technical and organizational challenges faced by BYOD-friendly organizations.

Background A hospital is an unfamiliar place to patients because of its style, atmosphere, and procedures. These hospital characteristics cause patients to become confused about responding to protocols, which slows down the procedural flows. Some additional information technology infrastructure facilities and human resources may be needed to solve these problems. However, this solution needs high investment and cannot guarantee an accuracy of information sent to patients. To handle this limitation, EasyHos has been developed to help patients recognize their status (for example, “waiting for an appointment at 11am“) during their stay in a hospital using all existing infrastructure and hospital data and without changing existing hospital's process. Objective The objective of this study was to provide a design of the EasyHos system and the case study in hospitals in Thailand. The design is usable and repeatable for small- and medium-sized hospitals where internet infrastructure is in place. Methods The EasyHos system has been designed based on existing infrastructure, hospital data and hospital processes. The main components include mobile devices, existing hospital data, wireless communication network. The EasyHos was deployed at 2 hospitals in Thailand, one small and the other with a medium size. The experimental process was focused on solving the problem of unfamiliarity in the hospital. The criteria and pretest conditions regarding the unexpected problem have been defined before the experiment. Results The results are presented in terms of criteria, pretest conditions, posttest conditions in the hospitals. The posttest conditions show the experimental results and impact of the system on users such as hospital nurses/staff and patients. For example, the questions from patients were reduced by 83.3% after using EasyHos system while nurses/hospital staff had 5 min more to do their routine work each day. In addition, another impact is that hospitals can create new information values from existing data, which now can be visible and valuable to patients. Conclusions Hospitals' unexpected problems have been reduced by the EasyHos system. The EasyHos system has been developed with self-service and patient-centered concepts to assist patients with necessary information. The system makes interaction easier for nurses/hospital staff members and patients working or waiting in the hospital. The nurses/hospital staff members would have more time to do their routine works. Hospitals can easily set up the EasyHos system, which will have a low or nearly zero implementation cost.

No abstract

No abstract