• Journal of Korea Multimedia Society
• /
• v.22 no.11
• /
• pp.1288-1299
• /
• 2019

As life expectancy increases, chronic diseases become a problem, and health management in daily life becomes important. With the development of IT convergence technology, personal health records have been collected through various data sources, but they are saved separately by each medical services. Distributed storage of personal health records caused inconvenience about managing the user's health records. In this paper, we designed and implemented an integrated repository and web-based dashboard UI components to solve that inconvenience. The proposed method shows that users can manage their personal health records in the integrated repository effectively and show them through dashboard UI components.

• Journal of the Semiconductor & Display Technology
• /
• v.11 no.3
• /
• pp.45-50
• /
• 2012

In this paper, we propose a real-time ECG monitoring system for personal health records. This study aims to provide services that help patients to monitor their own physical condition and manage their own health records consistently, whereas existing medical services are Medical Institute-Centric model. The system is composed of web server, smart phone, and ECG meter, and web page. Without time and space restraints, It provides us with managing personal health records by performing patient's ECG measurement and real-time monitoring. And also Real-time bidirectional communication between smart phone and web page can be performed rapidly by applying the ECG monitoring with WebSocket Technology that follows HTML5 standard. Through this system, It can handle patient in need immediately.

• KSII Transactions on Internet and Information Systems (TIIS)
• /
• v.11 no.7
• /
• pp.3699-3719
• /
• 2017

Conjunctive keyword search encryption is an important technique for protecting sensitive personal health records that are outsourced to cloud servers. It has been extensively employed for cloud storage, which is a convenient storage option that saves bandwidth and economizes computing resources. However, the process of searching outsourced data may facilitate the leakage of sensitive personal information. Thus, an efficient data search approach with high security is critical. The multi-user search function is critical for personal health records (PHRs). To solve these problems, this paper proposes a novel multi-user conjunctive keyword search scheme (mNCKS) without a secure channel against keyword guessing attacks for personal health records, which is referred to as a secure channel-free mNCKS (SCF-mNCKS). The security of this scheme is demonstrated using the Decisional Bilinear Diffie-Hellman (DBDH) and Decision Linear (D-Linear) assumptions in the standard model. Comparisons are performed to demonstrate the security advantages of the SCF-mNCKS scheme and show that it has more functions than other schemes in the case of analogous efficiency.

• Journal of Arbitration Studies
• /
• v.31 no.2
• /
• pp.119-135
• /
• 2021

South Korea has the most advanced technology in the Fourth Industrial Revolution era because of its high-speed Internet commercialization. However, the industry is shrinking due to its various regulations in building and its utilization of personal information as big data. Currently, South Korea's personal data utilization business is in its early stages. In the era of the 4th Industrial Revolution, it is difficult for startups to use data. There are various causes here. Above all, legal regulations to protect personal information are emphasized. This study confirms that transactions of personal medical records through My Data can be made. Moreover, it confirms that there is a need for a mediating role between stakeholders. This study lacks statistical access in the process of performing stakeholder roles. However, personal medical records will be traded safely in the future, and new subjects will enter the market. Furthermore, the domestic bio-industry will develop. Through this study, various problems were derived in establishing Medical MyData in Korea. Moreover, it looks forward to continuing various studies in the health care sector in the future.

• Journal of the Korea Institute of Information Security & Cryptology
• /
• v.30 no.6
• /
• pp.999-1012
• /
• 2020

As the utilize of personal health records increases in recent years, research on cryptographic protocol for protecting personal information of personal health records has been actively conducted. Currently, personal health records are commonly encrypted and outsourced to the cloud. However, this method is limited in verifying the integrity of personal health records, and there is a problem with poor data availability because it is essential to use it in decryption. To solve this problem, this paper proposes a verifiable cloud-based personal health record management scheme using Redactable signature scheme and zero-knowledge proof. Verifiable cloud-based personal health record management scheme can be used to verify the integrity of the original document while preserving privacy by deleting sensitive information by using Redactable signature scheme, and to verify that the redacted document has not been deleted or modified except for the deleted part of the original document by using the zero-knowledge proof. In addition, it is designed to increase the availability of data than the existing management schemes by designing to recover deleted parts only when necessary through the Redact Recovery Authority. And we propose a verifiable cloud-based personal health record management model using the proposed scheme, and analysed its efficiency by implementing the proposed scheme.

• Journal of Korea Society of Digital Industry and Information Management
• /
• v.6 no.3
• /
• pp.91-101
• /
• 2010

By using the U-Healthcare environment, it is possible to receive the health care services anywhere anytime. However, since the user's personal information can be easily exposed in the U-Healthcare environment, it is necessary to strengthen the security system. This thesis proposes the technique which can be used to protect the personal medical records at hospital safely, in order to avoid the exposure of the user's personal information which can occur due to the frequent usage of the electronic chart according to the computerization process of medical records. In the proposed system, the following two strategies are used: i) In order to reduce the amount of the system load, it is necessary to apply the partial encryption process for electronic charts. ii) Regarding the user's authentication process for each patient, the authentication number for each electronic chart, which is in the encrypted form, is transmitted through the patient's mobile device by the National Health Insurance Corporation, when the patient register his or her application at hospital. Regarding the modern health care services, it is important to protect the user's personal information. The proposed technique will be an important method of protecting the user's information.

• Journal of Digital Contents Society
• /
• v.10 no.3
• /
• pp.433-439
• /
• 2009

With the help of fast growing popularization of internet, all areas of e-Health have expanded rapidly; such that people have become interested in digital personal health record and its management. This paper examined the characteristics of personal health record and made the analysis of the structure of Google Health, the internet-based personal health record system. Google Health allows you to store and manage all of your health information, import medical records from hospitals and pharmacies, share your health records, and explore online health services. This examples represents not only a significant change of current medical systems but also enables to estimate the future stream of it. As a result, this paper, in the areas of e-Health which will be expanded in various service areas, may give you a greater sense of importance of personal health record and will eventually provide more complemental structure of future personal health record through comparative studies on the strength and weakness of it.

• KSII Transactions on Internet and Information Systems (TIIS)
• /
• v.15 no.12
• /
• pp.4400-4419
• /
• 2021

In the 4th Industrial Revolution, the healthcare industry is undergoing a paradigm shift from post-care and management systems based on diagnosis and treatment to disease prevention and management based on personal precision medicine. To optimize medical services for individual patients, an open ecosystem for the healthcare industry that allows the exchange and utilization of personal health records (PHRs) is required. However, under the current system of hospital-centered data management, it is difficult to implement the linking and sharing of PHRs in practice. To address this problem, in this study, we present the design and implementation of a patient-centered PHR platform using blockchain technology. This platform achieved transparency and reliability in information management by eliminating the risk of leakage and tampering/altering personal information, which could occur when using a PHR. In addition, the patient-consent system was applied to a PHR; thus, the patient acted as the user with ownership. The proposed blockchain-based PHR platform enables the integration of personal medical information with scattered distribution across multiple hospitals, and allows patients to freely use their health records in their daily lives and emergencies. The proposed platform is expected to serve as a stepping stone for patient-centered healthcare data management and utilization.

• The Korean Society of Law and Medicine
• /
• v.13 no.1
• /
• pp.359-395
• /
• 2012

In a broad term, health and medical data means all patient information that has been generated or circulated in government health and medical policies, such as medical research and public health, and all sorts of health and medical fields as well as patients' personal data, referred as medical data (filled out as medical record forms) by medical institutions. The kinds of health and medical data in medical records are prescribed by Articles on required medical data and the terms of recordkeeping in the Enforcement Decree of the Medical Service Act. As EMR, OCS, LIS, telemedicine and u-health emerges, sharing and protecting digital health and medical data is at issue in these days. At medical institutions, health and medical data, such as medical records, is classified as "sensitive information" and thus is protected strictly. However, due to the circulative property of information, health and medical data can be public as well as being private. The legal grounds of health and medical data as such are based on the right to informational self-determination, which is one of the fundamental rights derived from the Constitution. In there, patients' rights to refuse the collection of information, to control recordkeeping (to demand access, correction or deletion) and to control using and sharing of information are rooted. In any processing of health and medical data, such as generating, recording, storing, using or disposing, privacy can be violated in many ways, including the leakage, forgery, falsification or abuse of information. That is why laws, such as the Medical Service Act and the Personal Data Protection Law, and the Guideline for Protection of Personal Data at Medical Institutions (by the Ministry of Health and Welfare) provide for technical, physical, administrative and legal safeguards on those who handle personal data (health and medical information-processing personnel and medical institutions). The Personal Data Protection Law provides for the collection, use and sharing of personal data, and the regulation thereon, the disposal of information, the means of receiving consent, and the regulation of processing of personal data. On the contrary, health and medical data can be inspected or delivered of the copies, based on the principle of restriction on fundamental rights prescribed by the Constitution. For instance, Article 21(Access to Record) of the Medical Service Act, and the Personal Data Protection Law prescribe self-disclosure, the release of information by family members or by laws, the exchange of medical data due to patient transfer, the secondary use of medical data, such as medical research, and the release of information and the release of information required by the Personal Data Protection Law.

• The Transactions of The Korean Institute of Electrical Engineers
• /
• v.67 no.7
• /
• pp.969-975
• /
• 2018

The purpose of this study is to develop a healthcare service based on standard protocol and information communication technology for mother's sustainable postpartum care. The developed service was consisted of a client area where mothers measure, manage and transmit their vital signs using their own smartphone and personal health devices, and a server area that manages and shares with the received mother's vital signs and the results of examination results and personal health records. The client area collects vital signs through the IEEE 11073 Personal Health Device (PHD) using the m-health application of the previous study and Continua Health alliance certified personal health devices and transfers to Health Level Seven (HL7) V2.4, Continuity of Care Record (CCR) and Continuity of Care Document (CCD). The server area consists of a mobile web that manages and shares the HL7 Fast Healthcare Interoperability Resources (FHIR)-compliant personal health records to ensure interoperability of examination results, and a mobile web where the postpartum caregiver enters and manages the results of the mother's examination results and provides it to the mother. In this way, the healthcare service of this study securing continued exchanges between the mother and postpartum caregiver improves the quality of life of the mother not only to satisfy the needs of the mother who was discharged but also through self-management and postpartum. In the future, we will conduct a study applying mothers and postpartum caregiver after approval of a clinical trail at a university hospital to evaluate developed healthcare services.