Der Patient bleibt Herr seiner Daten Realisierung des eGK-Berechtigungskonzepts über ein ticketbasiertes, virtuelles Dateisystem

Health Records and the Cloud Computing Paradigm from a Privacy Perspective

“…In our opinion, the most critical and an open issue in context of health records is the protection of patient's privacy. This is due to the sensitive nature of medical data and especially actual concepts only cover specific issues [11,12,13,14]. As a consequence, it would be desirable to have a holistic view which integrates all relevant privacy aspects.…”

“…To achieve unlinkability between the objects (PATIENT, FOLDER, etc. ), pseudonymization of relationships [12,20,21] is adopted. In order to pseudonymize a relationship (e.g., PATIENT to FOLDER), the creator of the record chooses a second random primary key per record, encrypted and then integrated into the master table (PATIENT).…”

Privacy Patterns for Pseudonymity

“…dentist and general practitioner access different partial identities) [35]. The Fraunhofer ISST designed a concept for the German electronic health card (eGK), which uses ticket-based authorization and challenge-based authentication to allow fine-granular access control to data fragments, which are unlinkable by default [5]. Biskup and Flegel use a secret sharing scheme to assign each event in an intrusion detection system a unique pseudonym, which keeps events unlinkable until enough evidence for re-identification is available [2].…”

“…Caumanns describes an architecture developed for the German electronic health insurance card [5], which was developed at the Fraunhofer Institute for Software and Systems Engineering. The approach uses a ticket-based (challengeresponse) method to authenticate users, while keeping links between data fragments hidden using pseudonyms.…”