• 한국IT서비스학회:학술대회논문집
• /
• 2006.05a
• /
• pp.282-289
• /
• 2006

의료기관의 정보화 수준이 높아짐에 따라 권한 없는 자의 정보 접근 및 유출, 진료정보 및 개인정보의 손실이나 파손, 환자 안전에 대한 위협 등 여러 가지 정보보호 리스크 요인이 대두되고 있다. 의료기관이 취급하고 있는 의료정보는 환자 개인을 식별할 수 있는 개인정보뿐만 아니라 개인의 사생활보호 차원에서 신중하게 취급해야 하는 매우 민감한 진료 정보를 포함하고 있으므로 정보보호의 중요성이 매우 크다고 볼 수 있다. 따라서 개인의료정보를 컴퓨터와 네트워크를 통해 처리하는 의료기관의 정보보호 수준 제고가 매우 중요하고 시급한 과제로 인식되고 있다. 본 연구에서는 의료기관 정보화의 진전과 원격의료/재택의료의 발전, 국가보건의료정보 인프라 구축, e-Health 및 유비쿼터스 건강관리 시대의 도래 등과 같은 중대한 의료정보 패러다임의 변화 속에서 정보보호의 이슈와 해결방안을 모색해 보았으며, 의료정보보호 수준제고를 위한 정책방향을 제시하였다. 개별 의료기관뿐만 아니라 국가 차원의 의료정보 인프라 구축 사업 추진 시에도 본 연구에서 제안한 의료정보 보호 수준제고 방안이 적용되어 정보화의 효율성과 정보보호가 균형을 이룰 수 있을 것으로 기대된다.

• KIPS Transactions on Computer and Communication Systems
• /
• v.3 no.6
• /
• pp.197-208
• /
• 2014

In an information society, privacy protection is one of the most important ethical issues. In medical institutes in which personal medical information is collected and stored, in addition, a privacy breach can cause a serious damage on personal lives. This study attempted to develop privacy concern measurement tool in personal medical information to measure patients' concern on their medical information from medical service consumers' perspective and verify its validity. For this, privacy concern measurement tool in personal medical information was developed based on the results of previous studies. After performing Exploratory Factor Analysis(EFA) and Confirmatory Factor Analysis(CFA) on the measurement tool, its reliability and validity were verified. It appears that the measurement tool would be useful in developing decent privacy protection policy after investigating citizens' concern on the protection of personal medical information and domains they are interested in. For medical institutes as well, they would be helpful in coming up with a reasonable plan after figuring out problems in the protection of personal medical information and current status.

• Information and Communications Magazine
• /
• v.29 no.10
• /
• pp.55-65
• /
• 2012

u-헬스케어 서비스는 개인 의료 정보를 다루는 분야로서 단순한 건강 검진 및 치료의 수준을 넘어 생명과도 밀접한 관계가 있다. 개인 의료 정보 속성은 매우 민감하기 때문에 만약 개인 의료 정보가 불법적으로 노출되거나 악용될 경우 단순한 개인 프라이버시 침해뿐만 아니라 생명까지도 위협받을 수 있다. 이러한 이유로 안전한 개인 의료 정보 공유 및 인증방법이 가장 우선시 되어야 하며 보안성을 고려하여 u-헬스케어 시스템을 구축해야 한다. 또한 개인의 건강 정보에 대한 관리를 체계적으로 수행하여 의료 서비스기관에 의한 개인 의료 정보 남용을 방지하기 위해 보안 감사 시스템이 강화되어야 한다. 따라서 본고에서는 u-헬스케어 서비스와 관련된 다양한 보안 취약점 및 최신 정보보호 기술 동향에 관해 알아본다.

• Proceedings of the Korea Information Processing Society Conference
• /
• 2012.04a
• /
• pp.983-985
• /
• 2012

빅데이터의 다양한 활용 부문 중 의료정보 관리의 경우 향후 개인 건강관리의 중요한 정보로 사용될 수 있다. 이를 구체화 시키고 실생활에 적용시키기 위해 본 논문에서는 빅데이터 기반의 개인 의료정보 관리 시스템을 설계하였다. 이를 위하여 관련연구로 빅데이터와 PHR에 대해 분석하고, 빅데이터 기반의 개인 의료정보 관리 시스템을 설계하며, 외부와 의료정보 관리 시스템간의 의료정보 교환 프로토콜을 설계하였다.

• The Korean Society of Law and Medicine
• /
• v.21 no.2
• /
• pp.75-103
• /
• 2020

There is a growing voice that medical information should be shared because it can prepare for genetic diseases or cancer by analyzing and utilizing medical information in big data or artificial intelligence to develop medical technology and improve patient care. The utilization and protection of patients' personal information are the same as two sides of the same coin. Medical institutions or medical personnel should take extra caution in handling personal information with high environmental distinct characteristics and sensitivity, which is different from general information processors. In general, the patient's personal information is processed by medical personnel or medical institutions through the processes of collection, creation, and destruction. Still, the use of terms related to personal information in the Medical Service Act is jumbled, or the scope of application is unclear, so it relies on the interpretation of precedents. For the medical personnel or the founder of the medical institution, in the case of infringement of Article 24(4), it cannot be regarded that it means only medical treatment information among personal information, whether or not it should be treated the same as the personal information under Article 23, because the sensitive information of patients is recorded, saved, and stored in electronic medical records. Although the prohibition of information leakage under Article 19 of the Medical Service Act has a revision; 'secret' that was learned in business was revised to 'information', but only the name was changed, and the benefit and protection of the law is the same as the 'secret' of the criminal law, such that the patient's right to self-determination of personal information is not protected. The Privacy Law and the Local Health Act consider the benefit and protection of the law in 'information learned in business' as the right to self-determination of personal information and stipulate the same penalties for personal information infringement such as leakage, forgery, alteration, and damage. The privacy regulations of the Medical Service Act require that the terms be adjusted uniformly because the jumbled use of terms can confuse information subjects, information processors, and shows certain limitations on the protection of personal information because the contents or scope of the regulations of the Medical Service Law for special corporations and the Privacy Law may cause confusion in interpretation. The patient's personal information is sensitive and must be safely protected in its use and processing. Personal information must be processed in accordance with the protection principle of Privacy Law, and the rights such as privacy, freedom, personal rights, and the right to self-determination of personal information of patients or guardians, the information subject, must be guaranteed.

• The Journal of the Korea Contents Association
• /
• v.14 no.11
• /
• pp.164-174
• /
• 2014

The purpose of this study is to explore ways to resolve the conflicting issues that are currently applied in medical Act and medical privacy Act through the comparative Analysis of the Privacy Act and the Medical Information Protection Act foreign. the results run to establish the Public Health Act coming for the protection of health information is a characteristic of many countries, France in Europe, the United States and Canada had been running an independent medical information laws are enacted. Prescribes penalties of up to a fairly systematic method from the case records of patients would not have occurred in the management and implementation of the law and the protection of the author of the book focuses on the subject of medical records and physician records between patient confidentiality and privacy it can be seen that the method defined in. This indicates the need for the establishment of an independent medical information laws to protect all records relating to the patient systematically Korea also.

• Information Systems Review
• /
• v.20 no.1
• /
• pp.159-177
• /
• 2018

With an extensive proliferation of information and communication technology, the volume and amount of digital information collected and utilized on the Internet have been increasing rapidly. Also on the rapid rise are side effects such as unintended breach of accumulated personal information and consequent invasion of personal privacy. Informational self-determination is rarely practiced, despite various states' legal efforts to redress data subjects' damage. Personal health information, in particular, is a subcategory of personal information where informational self-determination is hardly practiced enough. The observation is contrasted with the socio-economic inconvenience that may follow due to its sensitive nature containing individuals' physical and health conditions. This research, therefore, reviews factors of self-determination on personal health information while referring to the protection motivation theory (PMT), the long-time framework to understand personal information protection. Empirical analysis of 200 data surveyed reveals threat-appraisal (perceived vulnerability and perceived severity of threats) and coping-appraisal (perceived response effectiveness), in addition to individual levels of concern regarding provided personal health information, influence self-determination to protect personal health information. The research proposes theoretical findings and practical suggestions along with reference for future research topics.

• Proceedings of the Korea Information Processing Society Conference
• /
• 2021.05a
• /
• pp.144-147
• /
• 2021

헬스케어 분야에서 제공되는 서비스는 의료 및 건강과 같은 의료정보를 다루기 때문에 개인의 생명과 밀접한 관계를 가지고 있다. 개인 의료 정보는 매우 민감하고 개인적인 정보이기 때문에 만약 이 정보가 불법적으로 유출되거나 악용된다면 개인의 프라이버시 침해뿐만 아니라 생명까지도 위협받을 것이다. 그렇기 때문에 개인의 건강 및 의료 정보가 체계적으로 관리되고 의료 서비스 기관에 의한 개인 의료 정보 유출 및 남용을 방지하기 위해 정보 보안 시스템이 강화되어야 한다. 따라서 본 논문에서는 헬스 케어 분야에서 발생할 수 있는 정보 보안 취약점에 대한 이슈를 분석하고 블록체인 기술을 바탕으로 보안 취약점에 대한 해결책을 제시하고자 한다.

• Journal of the Korea Institute of Information and Communication Engineering
• /
• v.19 no.11
• /
• pp.2683-2688
• /
• 2015

Internet of Things(IoT) using a variety of technologies in combination provides a convenient, elevated range of services to users. IoT has been noted in combining the fields of medical service in particular. However, with the advent and growing of IoT, the more medical services are evolving, security problems caused by leakage of personal health information will become more serious. U-Health and medical devices, which deal mainly the personal health information, is required to a high level of privacy and security of health information. Therefore, the introduction of the IoT in the healthcare industry requires the medical information security as a prerequisite. This study analyzes security status and trend of IoT, personal medical information leakage cases, the health information protection measures in accordance with the life cycle of medical information, and the standardized protection technologies.

• The Journal of Korean Institute of Next Generation Computing
• /
• v.13 no.6
• /
• pp.66-76
• /
• 2017

In this study, we investigated how to protect personal healthcare information when constructing OMOP (Observational Medical Outcomes Partnership) CDM (Common Data Model). There are two proposed methods; to restrict data corresponding to HIPAA (Health Insurance Portability and Accountability Act) PHI (Protected Health Information) to be extracted to CDM or to disable identification of it. While processing sensitive information is restricted by Korean Personal Information Protection Act and medical law, there is no clear regulation about what is regarded as sensitive information. Therefore, it was difficult to select the sensitive information for protecting personal healthcare information. In order to solve this problem, we defined HIPAA PHI as restriction criterion of Article 23 of the Personal Information Protection Act and maps data corresponding to CDM data. Through this study, we expected that it will contribute to the spread of CDM construction in Korea as providing solutions to the problem of protection of personal healthcare information generated during CDM construction.