Encrypted storage of medical data on a grid.
OBJECTIVE
In this article we present grids as an architecture for medical image processing and health-care networks. We argue that confidential patient data should not be stored unprotected on a grid and explain why access control systems alone do not offer sufficient protection. The objective of our work is to propose a method that complements access control systems on a grid architecture and thus makes the storage of confidential data more secure.


METHODS
Effective protection can be achieved by storing confidential data in encrypted form. This raises the problem of how authorized users get access to the data, since they need to have the decryption keys.


RESULTS
Our proposal details a key management architecture, that allows encrypted storage and still enables users to access decryption keys for data they are authorized to see. To achieve this functionality we use distributed keyservers storing redundant shares of the keys.


CONCLUSIONS
The resulting architecture achieves our primary objective of making the storage of confidential data more secure without loosing the data sharing properties of the grid architecture. Furthermore our architecture is robust against breakdowns and denial of service attacks. It scales well with the number of users and does not introduce a single point of failure into the system.
Seitz
L
L
LIRIS, CNRS UMR 5205, INSA de Lyon, av. Jean Capelle, 69621 Villeurbanne cedex, France. ludwig.seitz@liris.cnrs.fr
Pierson
J-M
JM
Brunie
L
L
D022126:Access to Information; D016494:Computer Security; D003219:Confidentiality; D003628:Database Management Systems; D016208:Databases, Factual; D005602:France; D006801:Humans; D016247:Information Storage and Retrieval / Q000379:methods*; D020407:Internet; D016347:Medical Records Systems, Computerized / Q000592:standards*; D016730:Program Development; D011873:Radiology Information Systems; D018511:Systems Integration