title: A novel key management solution for reinforcing compliance with HIPAA privacy/security regulations.
abstract: Digitizing medical records facilitates the healthcare process. However, it can also cause serious security and privacy problems, which are the major concern in the Health Insurance Portability and Accountability Act (HIPAA). While various conventional encryption mechanisms can solve some aspects of these problems, they cannot address the illegal distribution of decrypted medical images, which violates the regulations defined in the HIPAA. To protect decrypted medical images from being illegally distributed by an authorized staff member, the model proposed in this paper provides a way to integrate several cryptographic mechanisms. In this model, the malicious staff member can be tracked by a watermarked clue. By combining several well-designed cryptographic mechanisms and developing a key management scheme to facilitate the interoperation among these mechanisms, the risk of illegal distribution can be reduced.
authors.affiliation: Department of Information Engineering and Computer Science, Feng Chia University, Taichung 40724, Taiwan. P9521801@fcu.edu.tw
authors.forename: Chien-Ding
authors.initials: CD
authors.lastname: Lee
authors.forename: Kevin I-J
authors.initials: KI
authors.lastname: Ho
authors.forename: Wei-Bin
authors.initials: WB
authors.lastname: Lee
mesh_terms: D016494:Computer Security / Q000331:legislation & jurisprudence*; D020408:Health Insurance Portability and Accountability Act / Q000331:legislation & jurisprudence*; D006801:Humans; D007091:Image Processing, Computer-Assisted; D016347:Medical Records Systems, Computerized / Q000331:legislation & jurisprudence*; D018907:Privacy / Q000331:legislation & jurisprudence*; D014481:United States