title: Security challenges in integration of a PHR-S into a standards based national EHR.
abstract: Health related data provided by patients themselves is expected to play a major role in future healthcare. Data from personal health devices, vaccination records, health diaries or observations of daily living, for instance, is stored in personal health records (PHR) which are maintained by personal health record systems (PHR-S). Combining this information with medical records provided by healthcare providers in electronic health records (EHR) is one of the next steps towards "personal care". Austria currently sets up a nationwide EHR system that incorporates all healthcare providers and is technically based on international standards (IHE, HL7, OASIS, ...). Looking at the expected potential of merging PHR and EHR data it is worth to analyse integration approaches. Although knowing that an integration requires the coordination of processes, information models and technical architectures, this paper specifically focuses on security issues by evaluating general security requirements for a PHR-S (based on HL7 PHR-S FM), comparing them with the information security specifications for the Austrian's national EHR (based on ISO/IES 27000 series) and identifying the main challenges as well as possible approaches.
authors.affiliation: University of Applied Sciences Vienna.
authors.forename: Alexander
authors.initials: A
authors.lastname: Mense
authors.affiliation: University of Applied Sciences Vienna.
authors.forename: Franz
authors.initials: F
authors.lastname: Hoheiser Pförtner
authors.affiliation: University of Applied Sciences Vienna.
authors.forename: Stefan
authors.initials: S
authors.lastname: Sauermann
mesh_terms: D001317:Austria; D016494:Computer Security / Q000592:standards*; D003219:Confidentiality / Q000592:standards*; D057286:Electronic Health Records / Q000592:standards*; D057208:Health Level Seven / Q000592:standards*; D055991:Health Records, Personal; D009313:National Health Programs / Q000592:standards*; D012648:Self Care / Q000592:standards*; D018511:Systems Integration