title: Analysis of ISO/IEEE 11073 built-in security and its potential IHE-based extensibility.
abstract: The ISO/IEEE 11073 standard for Personal Health Devices (X73PHD) aims to ensure interoperability between Personal Health Devices and aggregators-e.g. health appliances, routers-in ambulatory setups. The Integrating the Healthcare Enterprise (IHE) initiative promotes the coordinated use of different standards in healthcare systems (e.g. Personal/Electronic Health Records, alert managers, Clinical Decision Support Systems) by defining profiles intended for medical use cases. X73PHD provides a robust syntactic model and a comprehensive terminology, but it places limited emphasis on security and on interoperability with IHE-compliant systems and frameworks. However, the implementation of eHealth/mHealth applications in environments such as health and fitness monitoring, independent living and disease management (i.e. the X73PHD domains) increasingly requires features such as secure connections to mobile aggregators-e.g. smartphones, tablets-, the sharing of devices among different users with privacy, and interoperability with certain IHE-compliant healthcare systems. This work proposes a comprehensive IHE-based X73PHD extension consisting of additive layers adapted to different eHealth/mHealth applications, after having analyzed the features of X73PHD (especially its built-in security), IHE profiles related with these applications and other research works. Both the new features proposed for each layer and the procedures to support them have been carefully chosen to minimize the impact on X73PHD, on its architecture (in terms of delays and overhead) and on its framework. Such implications are thoroughly analyzed in this paper. As a result, an extended model of X73PHD is proposed, preserving its essential features while extending them with added value.
authors.affiliation: eHealthZ Research Group, Communications Networks and Information Technologies for E-health and Quality of Experience Group (CeNITEQ), Aragón Institute of Engineering Research (University of Zaragoza), Edif. Ada Byron, C/María de Luna 3, 50018 Zaragoza, Spain. Electronic address: orubio@unizar.es.
authors.forename: Óscar J
authors.initials: ÓJ
authors.lastname: Rubio
authors.affiliation: Department of Electrical and Electronic Engineering, Public University of Navarre, Campus de Arrosada, 31006 Pamplona, Spain. Electronic address: jesusdaniel.trigo@unavarra.es.
authors.forename: Jesús D
authors.initials: JD
authors.lastname: Trigo
authors.affiliation: eHealthZ Research Group, Communications Networks and Information Technologies for E-health and Quality of Experience Group (CeNITEQ), Aragón Institute of Engineering Research (University of Zaragoza), Edif. Ada Byron, C/María de Luna 3, 50018 Zaragoza, Spain. Electronic address: alesanco@unizar.es.
authors.forename: Álvaro
authors.initials: Á
authors.lastname: Alesanco
authors.affiliation: Department of Electrical and Electronic Engineering, Public University of Navarre, Campus de Arrosada, 31006 Pamplona, Spain. Electronic address: lserrano@unavarra.es.
authors.forename: Luis
authors.initials: L
authors.lastname: Serrano
authors.affiliation: eHealthZ Research Group, Communications Networks and Information Technologies for E-health and Quality of Experience Group (CeNITEQ), Aragón Institute of Engineering Research (University of Zaragoza), Edif. Ada Byron, C/María de Luna 3, 50018 Zaragoza, Spain. Electronic address: jogarmo@unizar.es.
authors.forename: José
authors.initials: J
authors.lastname: García
mesh_terms: D000465:Algorithms; D016494:Computer Security; D003199:Computer Systems; D057286:Electronic Health Records / Q000592:standards*; D006801:Humans; D011381:Programming Languages; D012984:Software; D018511:Systems Integration; D017216:Telemedicine / Q000592:standards*
keywords: Authentication; IHE; ISO/IEEE 11073; Privacy; Security