Study of Out-Of-Hospital Access to HIS System: A Security Perspective

In light of the need for Extramural Hospital Information System (HIS) access through mobile devices outside the hospital, this research analyzes situational information security threats, including the circumstances in which a mobile device may get lost and personal data may be stolen. Moreover, the...

Full description

Bibliographic Details
Main Authors: Chih-Yung Chen, Yi-Chang Hsu, Chang-Ching Lin, Jeyhun Hajiyev, Chia-Rong Su, Ching-His Tseng
Format: Article
Language:English
Published: MDPI AG 2019-06-01
Series:Sensors
Subjects:
Online Access:https://www.mdpi.com/1424-8220/19/11/2628
_version_ 1828109967616376832
author Chih-Yung Chen
Yi-Chang Hsu
Chang-Ching Lin
Jeyhun Hajiyev
Chia-Rong Su
Ching-His Tseng
author_facet Chih-Yung Chen
Yi-Chang Hsu
Chang-Ching Lin
Jeyhun Hajiyev
Chia-Rong Su
Ching-His Tseng
author_sort Chih-Yung Chen
collection DOAJ
description In light of the need for Extramural Hospital Information System (HIS) access through mobile devices outside the hospital, this research analyzes situational information security threats, including the circumstances in which a mobile device may get lost and personal data may be stolen. Moreover, the system needs to be implemented in accordance with the regulations. Based on the security threat analysis, it is proposed to use a security control module to provide a security-enabled HIS proxy module, two-way authentication module, and One-Time Password (OTP). The sending module and cryptographic technology computing module with Micro SD encryption card form a set of HIS extension system, which includes the SMS OTP method to simultaneously verify the two-way authentication mechanism of a user and the device that the user owns.
first_indexed 2024-04-11T11:12:37Z
format Article
id doaj.art-185a7b4f98374090b86fbde94fe7688c
institution Directory Open Access Journal
issn 1424-8220
language English
last_indexed 2024-04-11T11:12:37Z
publishDate 2019-06-01
publisher MDPI AG
record_format Article
series Sensors
spelling doaj.art-185a7b4f98374090b86fbde94fe7688c2022-12-22T04:27:26ZengMDPI AGSensors1424-82202019-06-011911262810.3390/s19112628s19112628Study of Out-Of-Hospital Access to HIS System: A Security PerspectiveChih-Yung Chen0Yi-Chang Hsu1Chang-Ching Lin2Jeyhun Hajiyev3Chia-Rong Su4Ching-His Tseng5Department of Multimedia Design, St. John’s University, New Taipei City 251, TaiwanDepartment of Multimedia Design, St. John’s University, New Taipei City 251, TaiwanDepartment of Management Sciences, Tamkang University, New Taipei City 251, TaiwanDepartment of Information Management, Chang Gung University, Taoyuan City 333, TaiwanDepartment of Information Technology, Takming University of Science and Technology, Taipei City 114, TaiwanDepartment of Information Management, Chang Gung University, Taoyuan City 333, TaiwanIn light of the need for Extramural Hospital Information System (HIS) access through mobile devices outside the hospital, this research analyzes situational information security threats, including the circumstances in which a mobile device may get lost and personal data may be stolen. Moreover, the system needs to be implemented in accordance with the regulations. Based on the security threat analysis, it is proposed to use a security control module to provide a security-enabled HIS proxy module, two-way authentication module, and One-Time Password (OTP). The sending module and cryptographic technology computing module with Micro SD encryption card form a set of HIS extension system, which includes the SMS OTP method to simultaneously verify the two-way authentication mechanism of a user and the device that the user owns.https://www.mdpi.com/1424-8220/19/11/2628m-healthuser authenticationSMS OTPdynamic accountprivacy protectionencryption card
spellingShingle Chih-Yung Chen
Yi-Chang Hsu
Chang-Ching Lin
Jeyhun Hajiyev
Chia-Rong Su
Ching-His Tseng
Study of Out-Of-Hospital Access to HIS System: A Security Perspective
Sensors
m-health
user authentication
SMS OTP
dynamic account
privacy protection
encryption card
title Study of Out-Of-Hospital Access to HIS System: A Security Perspective
title_full Study of Out-Of-Hospital Access to HIS System: A Security Perspective
title_fullStr Study of Out-Of-Hospital Access to HIS System: A Security Perspective
title_full_unstemmed Study of Out-Of-Hospital Access to HIS System: A Security Perspective
title_short Study of Out-Of-Hospital Access to HIS System: A Security Perspective
title_sort study of out of hospital access to his system a security perspective
topic m-health
user authentication
SMS OTP
dynamic account
privacy protection
encryption card
url https://www.mdpi.com/1424-8220/19/11/2628
work_keys_str_mv AT chihyungchen studyofoutofhospitalaccesstohissystemasecurityperspective
AT yichanghsu studyofoutofhospitalaccesstohissystemasecurityperspective
AT changchinglin studyofoutofhospitalaccesstohissystemasecurityperspective
AT jeyhunhajiyev studyofoutofhospitalaccesstohissystemasecurityperspective
AT chiarongsu studyofoutofhospitalaccesstohissystemasecurityperspective
AT chinghistseng studyofoutofhospitalaccesstohissystemasecurityperspective