Journal of Korean Library and Information Science Society (한국도서관정보학회지)

Korean Library and Information Science Society (한국도서관정보학회)
권호 표지
DOI QR코드

DOI QR Code

Considerations for the Migration of Electronic Medical Records to Cloud Based Storage

전자의무기록의 클라우드 기반 저장소 이동시 고려사항

  • 이명호 (상명대학교 문헌정보학과)
  • Received : 2016.02.26
  • Accepted : 2016.03.23
  • Published : 2016.03.31
Download PDF
⟨ Previous Next ⟩

Abstract

As cloud computing becomes more and more popular and ubiquitous, many organizations are deciding to move their whole information infrastructure to the cloud. The healthcare industry is one of those that is beginning to utilize cloud-based solutions en masse. Cloud based computing and storage offers numerous benefits including scalability, cost efficiency, and accessibility, which in turn have the potential to streamline hospital operations. Despite the potential benefits of acquiring this system, considerations must still be given to the migration of the massive amounts of personal and highly protected data to a cloud-based solution. Health care organizations must consider all matters of security, reliability, and availability, to ensure that patients' data remains compliant to the Health Insurance Portability and Accountability Act (HIPAA) compliant. This paper will examine the benefits and challenges of such operation to determine the best practices for the utilization of Electronic Medical Record (EMR) cloud based networking and storage for small to mid-sized hospitals.

클라우드 컴퓨팅에 대한 관심이 많아짐으로 인해 많은 기관들이 클라우드 컴퓨팅으로 전환을 결정하고 있다. 확장성, 비용 효율성, 접근성 등 다양한 장점으로 인해 의료 기관들도 정보 인프라를 클라우드 기반으로 전환하는 것을 추진하고 있다. 이러한 장점에도 불구하고 많은 양의 민감한 개인정보를 이동 (migration) 하는 것에 대한 여러 가지가 고려되어야 한다. 의료 기관은 민감한 환자 정보에 대한 보안, 안정성, 가용성을 고려하고 또한 HIPPA와 같은 법적인 요구 사항을 만족시켜야 한다. 본 연구는 전자의무기록을 클라우드 기반 저장소로 이동시 장점 및 문제점을 조사하고 또한 고려사항을 제안하고자 한다.

Keywords

References

  1. Ahuja, S. P., Mani, S., and Zambrano, J. 2012. "A survey of the state of cloud computing in healthcare." Network and Communication Technologies, 1(2): 12-19
  2. Apostu, A., Puican, F., Ularu, G., Suciu, G., and Todoran, G. 2013. "Study on advantages and disadvantages of Cloud Computing-the advantages of Telemetry Applications in the Cloud." Recent Advances in Applied Computer Science and Digital Services. New York: Wseas: 118-123.
  3. Ardagna, C. A., De Capitani di Vimercati, S., Foresti, S., Grandison, T. W., Jajodia, S., and Samarati, P. 2010. "Access control for smarter healthcare using policy spaces." Computers & Security, 29(8): 848-858. https://doi.org/10.1016/j.cose.2010.07.001
  4. Botts, N., Thoms, B., Noamani, A., and Horan, T. A. 2010. Cloud computing architectures for the underserved: Public health cyberinfrastructures through a network of healthatms. In System Sciences (HICSS), 43rd Hawaii International Conference.
  5. CareCloud. 2012. How Modern Technology Helped a Multi-Location Orthopedic Group Boost Financial Results and Reporting. White Paper.
  6. Carpathia. 2013. 5 Benefits of EMR vs. Paper Medical Records.
  7. Congdon, K. 2014. Is Epic Future Proof?. [cited 2015. 7. 28].
  8. Cloud Standards Customer Council. 2012. Impact of Cloud Computing on Healthcare. [cited 2016. 3. 10].
  9. Curran, K., and Carlin, S. 2013. Cloud Computing Security. In Pervasive and Ubiquitous Technology Innovations for Ambient Intelligence Environments. Hershey: IGI Global.
  10. Danny Yadron, and Beck, M. 2015. Health Insurer Anthem Didn't Encrypt Data in Theft. [cited 2015. 4. 28].
  11. Department of Health and Human Services. 2009. HITECH Breach Notification Interim Final Rule. [cited 2015. 4. 28].
  12. Egdom, R. V. 2013. 7 Benefits of a Cloud-Based EHR. [cited 2015. 5. 2].
  13. Ferraiolo, D. F., and Kuhn, D. R. 1992. Role-Based Access Controls. Paper presented at the 15th National Computer Security Conference, Baltimore MD.
  14. Gilmer, E. 2013. Privacy and security of patient data in the cloud. IBM Developer Works. [cited 2015. 5. 28].
  15. Gunter, T., and Terry, N. 2005. "The Emergence of National Electronic Health Record Architectures in the United States and Australia: Models, Costs, and Questions." Journal of Medical Internet Research, 7(1).
  16. Hanuscak TL, Szeinbach SL, Seoane-Vazquez E, Reichert BJ, and McCluskey CF. 2009. "Evaluation of causes and frequency of medication errors during information technology downtime." American Journal of Health System Pharmacy, 66(12): 1119-1124. https://doi.org/10.2146/ajhp080389
  17. HealthcareITnews.com. 2014. Network Glitch Brings Down Epic EMR. healthcareITnews.com: [cited 2015. 5. 18].
  18. HealthIT.gov. 2014. Benefits of EHRs. [cited 2015. 5. 13].
  19. Kahn, S., and Sheshadri, V. 2008. "Medical record privacy and security in a digital environment." IT Professional, 10(2): 46-52. https://doi.org/10.1109/MITP.2008.34
  20. ICare.com, 2013. The Enterprise Cloud EHR - Products. White Paper.
  21. Krisnamurthy, Prasant, Chris Clifton, and Matt Bishop. 2010. Introduction of Computer Security. [cited 2016. 3. 11].
  22. Kuo, A. M. H. 2011. "Opportunities and challenges of cloud computing to improve health care services." Journal of medical Internet research, 13(3).
  23. Lee, H. 2013. "The Storage of Electronic Medical Record and Trusted Third Party." Han Yang Law Review, 44: 123-149.
  24. Lohr, H., Sadeghi, A. R., and Winandy, M. 2010. Securing the e-health cloud. Paper presented at the 1st ACM International Health Informatics Symposium.
  25. Maheu, M. 2014. Which Cloud Storage Services are HIPAA Compliant TMHI Blog. [cited 2015. 5. 28].
  26. Mars, M. 2013. "Telemedicine and Advances in Urban and Rural Healthcare Delivery in Africa." Progress in Cardiovascular Diseases, 56(3): 326-335. https://doi.org/10.1016/j.pcad.2013.10.006
  27. McCann, E. 2014. Network glitch brings down Epic EMR. [cited 2016. 3. 10].
  28. Meditouch. 2014. Web-Based EHR - Cloud-Based, SaaS, ASP. HealthFusion.com. [cited 2015. 2. 23].
  29. Myers, J. E. 2012. Data Modeling for Healthcare Systems Integration: Use of the Meta Model. [cited 2015. 6. 28].
  30. Mell, P., and Grance, T. 2011. The NIST definition of cloud computing. [cited 2016. 3. 2].
  31. Miller, S. A., and Blass, G. 2010. "Protection detail: Protecting against breach of electronic protected health information." Journal of Healthcare Information Management, 24(3): 7-8.
  32. Rodrigues, J. J., Torre, I. d. l., Fernandez, G., and Lopez-Coronado, M. (2013). "Analysis of the Security and Privacy Requirements of Cloud-Based Electronic Health Records Systems." Journal of Medical Internet Research, 15(8): 186. https://doi.org/10.2196/jmir.2494
  33. Rolim, C. O., Koch, F. L., Westphall, C. B., Werner, J., Fracalossi, A., and Salvador, G. S. 2010. "A cloud computing solution for patient's data collection in health care institutions. In eHealth, Telemedicine, and Social Medicine, 2010." ETELEMED'10. Second International Conference: 95-99
  34. Roney, K. 2012. 5 Best Practices for Negotiating, Beginning the Transition to Cloud Servers. [cited 2015. 6. 12].
  35. Sabahi, F. 2011. Cloud computing security threats and responses. In Communication Software and Networks (ICCSN), 2011 IEEE 3rd International Conference.
  36. Schweitzer, E. J. 2012. "Reconciliation of the cloud computing model with US federal electronic health record regulations." Journal of the American Medical Informatics Association, 19(2): 161-165. https://doi.org/10.1136/amiajnl-2011-000162
  37. Shin, Y, and Park, J. 2005. "Development of Guideline on Electronic Signatures for Electronic Medical Record." Journal of the Korea Contents Association, 5(6): 120-128.
  38. Taylor, K. 2013. ASAE (R) The Center for Association Leadership. [cited 2015. 6. 20].
  39. Williams, F., and Boren, S. A. 2008. "The role of electronic medical record in care delivery in developing countries." International Journal of Information Management, 28(6): 503-507. https://doi.org/10.1016/j.ijinfomgt.2008.01.016