Ubiquitous Healthcare Information System: Toward Crossing the Security Chasm

Abstract

Ubiquitous healthcare information system is increasingly seen as a viable option for reducing the inherent time lag and inaccuracies in the traditional model of healthcare and promoting the delivery and practice of evidence-based healthcare-as and when needed-without any location and time constraints. Although promising, the realization of ubiquitous healthcare information system brings several threats and risks rooted in real-time collection, analysis, storage, transmission, and access of critical medical data. In this research, we address information security concerns pertaining to the paradigm of ubiquitous healthcare information system. To accomplish this we use National Institute for Standards and Technology's (NIST's) system development lifecycle model (SDLC) as the underlying framework to explore the current state of ubiquitous healthcare from the perspective of security. We then leverage the model to propose future research directions in this area. By implementing the NIST's SDLC model in such a manner, we offer a different dynamic of healthcare security that has not been addressed in literature before.

Keeping pace with the healthcare transformation: a literature review and research agenda for a new decade of health information systems research

“…Cluster 2b, encompassing nine publications, was derived from the observation that studies within the organizational level concentrated strongly on HIS use and maintenance and the consequences of HIS research. Herein, a vast array of topics was observed, such as the potential for cost reduction through HIS (Byrd & Byrd, 2009), the impact of HIS on product and process innovation in European hospitals (Arvanitis & Loukis, 2014), and the perceived effectiveness of security risk management in healthcare (Zafar et al, 2012). Moreover, we found that practice-oriented methods, such as mixed-method approaches, surveys, data analyses, and case studies, are used predominantly within this cluster.…”

“…Apart from these clusters, quite a few research articles refer to the infrastructure level of observation, addressing information sharing in general (Li et al, 2008), electronic medical records (George & Kohnke, 2018;Wessel et al, 2017), and security and privacy issues (Zafar & Sneha, 2012).…”