Simetrična enkripcija kliničnih podatkov zaradi zaščite zasebnosti pacienta

STARC, JAN (author), Bajec, Marko (mentor)

Na področju zdravstva se za potrebe elektronskih kartotek, napotnic, receptov, izvidov,... shranjujejo velike količine kliničnih podatkov. Podatki, ki se shranjujejo, morajo biti pooblaščenim osebam na različnih lokacijah v vsakem trenutku hitro dostopni. Ker shranjeni podatki vsebujejo tudi zasebne podatke pacientov, predstavlja njihova hramba varnostno tveganje. Podatke je torej potrebno čim bolje zaščititi, da maksimalno zmanjšamo tveganje razkritja podatkov, hkrati pa to ne sme opazno vplivati na funkcionalnost same rešitve s stališča končnega uporabnika. Cilj diplomske naloge je raziskati možne pristope k reševanju tega problema in opisati koncept shranjevanja občutljivih podatkov v podatkovni bazi s pomočjo simetrične enkripcije. Prav tako je potrebno opisani koncept tudi preizkusiti v praksi in za ta namen implementirati prototip.

• Language: Slovenian
• Keywords: simetrična enkripcija, klinični podatki, e-kartoteka, mikrostoritve, REST API, FHIR, HL7, Java EE
• Work type: Bachelor thesis/paper
• Organization: FRI - Faculty of Computer and Information Science
• Year: 2018
• PID: 20.500.12556/RUL-103201
• Publication date in RUL: 14.09.2018

Secondary language

• Language: English
• Title: Symmetric encryption of clinical data to ensure privacy of the patient

Abstract

In the medical field, huge amount of clinical data is stored for the needs of e-records, referrals, recipes, test results,... It is crucial that stored data is accessible to authorized persons at any time, from any location. The problem is that stored data contains sensitive personal information of patients, and consequently storing clinical data poses a security risk. Clinical data needs to be protected as good as possible, but at the same time, this must not affect the functionality of the software solution from the user's point of view. The goal of this thesis is to find the possible approaches to solution of this problem and to describe a concept of storing sensitive clinical data in the database, based on symmetric encryption. To prove the adequacy of the concept to solve the above described problem, a prototype must be developed.

• Keywords: symmetric encryption, clinical data, electronic health record, microservices, REST API, FHIR, HL7, Java EE