• Journal of Digital Convergence
• /
• v.10 no.6
• /
• pp.341-347
• /
• 2012

Network Access Control system of medical asset protection solutions that installation and operation on system and network to provide a process that to access internal network after verifying the safety of information communication devices. However, there are still the internal medical-data leakage threats due to spoof of authorized devices and unauthorized using of users are away hours. In this paper, Network 2-Factor Access Control Model proposed for prevention the medical-data leakage by improving the current Network Access Control system. The proposed Network 2-Factor Access Control Model allowed to access the internal network only actual users located in specific place within the organization and used authorized devices. Therefore, the proposed model to provide a safety medical asset environment that protecting medical-data by blocking unauthorized access to the internal network and unnecessary internet access of authorized users and devices.

• The Korean journal of internal medicine
• /
• v.33 no.6
• /
• pp.1160-1168
• /
• 2018

Background/Aims: The Republic of Korea is a country where the hemodialysis population is growing rapidly. It is believed that the numbers of treatments related to vascular access-related complications are also increasing. This study investigated the current status of treatment and medical expenses for vascular access in Korean patients on hemodialysis. Methods: This was a descriptive observational study. We inspected the insurance claims of patients with chronic kidney disease who underwent hemodialysis between January 2008 and December 2016. We calculated descriptive statistics of the frequencies and medical expenses of procedures for vascular access. Results: The national medical expenses for access-related treatment were 7.12 billion KRW (equivalent to 6.36 million USD) in 2008, and these expenses increased to 42.12 billion KRW (equivalent to 37.67 million USD) in 2016. The population of hemodialysis patients, the annual frequency of access-related procedures, and the total medical cost for access-related procedures increased by 1.6-, 2.6-, and 5.9-fold, respectively, over the past 9 years. The frequency and costs of access care increased as the number of patients on hemodialysis increased. The increase in vascular access-related costs has largely been driven by increased numbers of percutaneous angioplasty. Conclusions: The increasing proportion of medical costs for percutaneous angioplasty represents a challenge in the management of end-stage renal disease in Korea. It is essential to identify the clinical and physiological aspects as well as anatomical abnormalities before planning angioplasty. A timely surgical correction could be a viable option to control the rapid growth of access-related medical expenses.

• Journal of Chest Surgery
• /
• v.45 no.6
• /
• pp.421-423
• /
• 2012

Transradial access is a widely accepted method for percutaneous coronary diagnostic and interventional procedures, and it has dramatically reduced access site vascular complications compared to transfemoral access. Arteriovenous fistula formation at the access site is an especially rare complication in transradial access. We report an extremely rare case of delayed radial arteriovenous fistula that developed one year after transradial coronary angiography, which was successfully treated by surgical repair.

• Journal of Internet Computing and Services
• /
• v.18 no.6
• /
• pp.75-84
• /
• 2017

As there has been growing interests in PHR-based personalized health management project, various institutions recently explore safe methods of recording personal medical and health information. In particular, innovative medical solution can be realized when medical researchers and medical service institutes can generally get access to patient data. As EMR data is extremely sensitive, there has been no progress in clinical information exchange. Moreover, patients cannot get access to their own health data and exchange it with researchers or service institutions. It can be operated in terms of technology, yet policy environment are affected by state laws as well as Privacy and Security Policy. Blockchain technology-independent, in transaction, and under test-is introduced in the medical industry in order to settle these problems. In other words, medical organizations can grant preliminary approval on patient information exchange by using the safely encrypted and distributed Blockchain ledger and can be managed independently and completely by individuals. More apparently, medical researchers can gain access to information, thereby contributing to the scientific advance in rare diseases or minor groups in the world. In this paper, we focused on how to manage personal medical information and its protective use and proposes medical treatment exchange system for patients based on a permissioned Blockchain network for the safe PHR operation. Trusted Model for Sharing Medical Data (TMSMD), that is proposed model, is based on exchanging information as patients rely on hospitals as well as among hospitals. And introduce medical treatment exchange system for patients based on a permissioned Blockchain network. This system is a model that encrypts and records patients' medical information by using this permissioned Blockchain and further enhances the security due to its restricted counterfeit. This provides service to share medical information uploaded on the permissioned Blockchain to approved users through role-based access control. In addition, this paper presents methods with smart contracts if medical institutions request patient information complying with domestic laws by using the distributed Blockchain ledger and eventually granting preliminary approval for sharing information. This service will provide an independent information transaction and the Blockchain technology under test will be adopted in the medical industry.

• Convergence Security Journal
• /
• v.9 no.2
• /
• pp.49-58
• /
• 2009

In medical Institution, Electronic Health Record (EHR) is "must access information" to medical staff considering it as medical information. However, this unnecessary exploration of personal information must be treated confidentially because the information is highly related to other's private concerns. It is necessary that medical workers should be also restricted to their access to EHR depending on their roles and duties. As the result, this article explains that "EHR access control will be executed by differentiating authorized medical staff from non medical-related staff as well as EHR access will be only permitted to authorized medical staff depending on their work status conditions. By using Advanced RBAC model on medical situation, we expect to minimize unnecessary leak of EHR information; especially, emergency medical care is needed, access control is highly required depending on a person in charge of the cases or not, and restricted medical information defined by the patient one-self is only allowed to be accessed.

• KIISE Transactions on Computing Practices
• /
• v.22 no.9
• /
• pp.441-448
• /
• 2016

RBAC(Role-Based Access Control), which is widely used in Medical Information Systems, is vulnerable to illegal access through abuse/misuse of permissions. In order to solve this problem, treatment based risk assessment of access requests is necessary. In this paper, we propose a risk evaluation method based on treatment information. We use network analysis to determine the correlation between treatment information and access objects. Risk evaluation can detect access that is unrelated to the treatment. It also provides indicators for information disclosure threats of insiders. We verify the validity using large amounts of data in real medical information systems.

• Journal of Cerebrovascular and Endovascular Neurosurgery
• /
• v.26 no.2
• /
• pp.223-226
• /
• 2024

Percutaneous techniques for femoral arterial access are increasingly being performed due to advances in endovascular cerebral procedures, as they provide a less morbid and minimally invasive approach than open procedures. Common complications associated with this peripheral puncture include hematoma, bleeding, pseudoaneurysm, arteriovenous fistula, retroperitoneal bleeding, inadvertent venous puncture, dissection, etc. The retrograde femoral access is currently the most frequently used arterial access as it is technically straightforward, allows for the use of larger size sheaths and catheters, allows repeated attempts, etc. Although being technically less challenging, grave complications can occur due to hardware failure. Here, we present a case of unruptured posterior inferior cerebellar artery (PICA) aneurysm, who underwent uneventful diagnostic cerebral digital substraction angiography (DSA) via right femoral artery route on first attempt, but on second attempt for therapeutic intervention, landed up with stuck guide wire and faced decannulation difficulty due to unravelling of guide wire and multiple knot formation, which was finally removed after multiple attempts at pulling and improvised manoeuvres. Such cannulation and decannulation difficulties have been reported multiple times for central venous access, but extremely rarely for femoral routes, making this case a rarity and worth reporting.

• The Journal of the Korea institute of electronic communication sciences
• /
• v.11 no.10
• /
• pp.1003-1008
• /
• 2016

Recently hospitals have divided into many divisions, specialized the medical service, and shown organic cooperation, all to provide patients with various and high quality medical service. They have also showed improvement in information protection by introducing an information protection system to regulate the access to patients' medical and personal information. The purpose of this paper is to present a case study to implement of a limited hospital medical information system that can regulate the access to medical information. For this, a router-based virtual network applying an ACL(: Access Control List) to regulate access to information was made using a packet tracer.

• Journal of Internet Computing and Services
• /
• v.22 no.1
• /
• pp.99-107
• /
• 2021

With the recent establishment of a ubiquitous-based medical and healthcare environment, the medical information system for obtaining situation information from various sensors is increasing. In the medical information system environment based on context-awareness, the patient situation can be determined as normal or emergency using situational information. In addition, medical staff can easily access patient information after simple user authentication using ID and Password through applications on smart devices. However, these services of authentication and patient information access are staff-oriented systems and do not fully consider the ubiquitous-based healthcare information system environment. In this paper, we present a authentication service model based context-awareness system for providing situational information-driven authentication services to users who access medical information, and implemented proposed system. The authentication service model based context-awareness system is a service that recognizes patient situations through sensors and the authentication and authorization of medical staff proceed differently according to patient situations. It was implemented using wearables, biometric data measurement modules, camera sensors, etc. to configure various situational information measurement environments. If the patient situation was emergency situation, the medical information server sent an emergency message to the smart device of the medical staff, and the medical staff that received the emergency message tried to authenticate using the application of the smart device to access the patient information. Once all authentication was completed, medical staff will be given access to high-level medical information and can even checked patient medical information that could not be seen under normal situation. The authentication service model based context-awareness system not only fully considered the ubiquitous medical information system environment, but also enhanced patient-centered systematic security and access transparency.

• Journal of Institute of Control, Robotics and Systems
• /
• v.20 no.6
• /
• pp.676-688
• /
• 2014

The IEEE 802.11e EDCA (Enhanced Distributed Channel Access) mechanism has been proposed to improve the QoS (Quality of Service) of various services in WLANs (Wireless Local Area Networks). By differentiating the channel access delay depending on ACs (Access Categories), this mechanism can provide the relative service differentiation among ACs. In this paper, we consider that WLAN is deployed in medical environments to transfer medical traffic and we reveal that the quality of the medical traffic (in particular, ECG signals) is significantly deteriorated even with the service differentiation by IEEE 802.11e EDCA. Also, we analyze the reason for performance degradation and show that IEEE 802.11e EDCA has difficulty in protecting the transmission opportunity of high-priority traffic against low-priority traffic. In order to assure medical-grade QoS, we firstly define the service priority of medical traffic based on their characteristics and requirements, and then we propose the enhanced channel access scheme, referred to as DIFF-CW. The proposed scheme differentiates CW (Contention Window) depending on the service priority and modifies the channel access procedure for low-priority traffic. The simulation results confirm that the DIFF-CW scheme not only assures the QoS of medical traffic but also improves the overall channel utilization.