EMRlog method for computer security for electronic medical records with logic and data mining.
The proper functioning of a hospital computer system is an arduous work for managers and staff. However, inconsistent policies are frequent and can produce enormous problems, such as stolen information, frequent failures, and loss of the entire or part of the hospital data. This paper presents a new method named EMRlog for computer security systems in hospitals. EMRlog is focused on two kinds of security policies: directive and implemented policies. Security policies are applied to computer systems that handle huge amounts of information such as databases, applications, and medical records. Firstly, a syntactic verification step is applied by using predicate logic. Then data mining techniques are used to detect which security policies have really been implemented by the computer systems staff. Subsequently, consistency is verified in both kinds of policies; in addition these subsets are contrasted and validated. This is performed by an automatic theorem prover. Thus, many kinds of vulnerabilities can be removed for achieving a safer computer system.
Departamento de Ciencias Computacionales, Tecnológico de Monterrey, Campus Cuernavaca, Autopista del Sol Km 104, Colonia Real del Puente, 62790 Xochitepec, MOR, Mexico.
Sergio Mauricio
SM
Martínez Monterrubio
Tecnológico Nacional de México, Instituto Tecnológico de Ciudad Madero, Avenida 1 de Mayo, Esquina Sor Juana Inés de la Cruz s/n, Colonia Los Mangos, 89440 Madero, TAMPS, Mexico.
Juan
J
Frausto Solis
Tecnológico de Monterrey, Escuela de Ingeniería y Ciencias, Carretera Lago de Guadalupe, Km. 3.5, 52926, MEX, Mexico.
Raúl
R
Monroy Borja
D000465:Algorithms; D016494:Computer Security / Q000592:standards*; D003219:Confidentiality / Q000592:standards*; D057225:Data Mining / Q000592:standards*; D057286:Electronic Health Records / Q000458:organization & administration*; D019983:Guideline Adherence / Q000458:organization & administration; D008800:Mexico; D011785:Quality Assurance, Health Care / Q000379:methods / Q000458:organization & administration