Search PubMed⌕ Search

Biomedical subjects

G Pangalos

Publications and source records attributed to G Pangalos.

12 recordsLinked to original sources

Implementing security on a prototype hospital database.

This paper describes the methodology used and the experience gained from the application of a new secure database design approach and database security policy in a real life hospital environment. The applicability of the proposed database security policy in a major Greek general hospital is demonstrated. Moreover, the security and quality assurance of the developed prototype secure database is examined, taking into consideration the results from the study of the user acceptance.

Computer Security↗

Security of medical image databases.

Medical images are an integral and indispensable part of health care information systems. Because of the critical nature of image information and stringent privacy requirements in medical environments, the medical images database systems must provide reasonable safeguards to assure confidentiality, integrity and availability of images to be deployable. In this paper we address mainly the confidentiality issues. Only authorized users should have for example access to medical images. Access to images is usually based on certain security constraints. Security constraints processing is a widely used mechanism for obtaining the appropriate level of the security required in traditional (non-multimedia) database systems. However, the security constraints processing in multimedia environments possess a number of interesting problems. In this paper we address the advantages and problems of using content-based security constraints on medical image databases. We also propose a methodology for the integration of security constraints into medical image databases, taking into account the true multimedia nature of the medical images (e.g. the content of the medical images).

Computer Communication Networks↗

Security aspects for medical device vigilance information exchange.

The implementation of appropriate security mechanisms for an effective and efficient medical device vigilance information exchange is very important, as the system handles sensitive information. These mechanisms have to be designed in such a way that they maintain confidentiality, integrity and availability of the data of medical devices. In this paper the security aspects of the information exchange on medical device vigilance is examined in detail.

Computer Security↗

Cardiological database management system as a mediator to clinical decision support.

An object-oriented medical database management system is presented for a typical cardiologic center, facilitating epidemiological trials. Object-oriented analysis and design were used for the system design, offering advantages for the integrity and extendibility of medical information systems. The system was developed using object-oriented design and programming methodology, the C++ language and the Borland Paradox Relational Data Base Management System on an MS-Windows NT environment. Particular attention was paid to system compatibility, portability, the ease of use, and the suitable design of the patient record so as to support the decisions of medical personnel in cardiovascular centers. The system was designed to accept complex, heterogeneous, distributed data in various formats and from different kinds of examinations such as Holter, Doppler and electrocardiography.

Cardiovascular Diseases↗

An integrated secure design of a medical database system.

An integrated secure design methodology for the enhancement of database security in a hospital environment is presented in this paper. The proposed design methodology is based on both the discretionary and the mandatory database security policies. In this way, the advantages of both approaches are combined to enhance medical database security. The experimental implementation of the methodology in a major Greek hospital is also presented. The implementation has shown that the combined discretionary and mandatory security enforcement effectively limits unauthorized access to the medical database, without severely restricting the capabilities of the system.

Computer Security↗

Enhancing medical database security.

A methodology for the enhancement of database security in a hospital environment is presented in this paper which is based on both the discretionary and the mandatory database security policies. In this way the advantages of both approaches are combined to enhance medical database security. An appropriate classification of the different types of users according to their different needs and roles and a User Role Definition Hierarchy has been used. The experience obtained from the experimental implementation of the proposed methodology in a major general hospital is briefly discussed. The implementation has shown that the combined discretionary and mandatory security enforcement effectively limits the unauthorized access to the medical database, without severely restricting the capabilities of the system.

Computer Security↗

Design of hospital database systems in a non-relational environment.

The lack of an appropriate, widely accepted, design procedure for use with non-relational database management systems has been a major, common problem in many efforts to develop an integrated hospital database. The availability of such a design procedure is particularly important today since the majority of the database management systems currently in use are non-relational. A database design procedure is proposed which should assist with the design of optimal non-relational hospital database systems. The proposed design procedure is separated into two distinct steps: the development of an appropriate intermediate relational database structure and the subsequent development of an equivalent non-relational one. A set of rules is given for the move from the proposed intermediate relational to the equivalent non-relational structure. An example application from the hospital environment is also included in order to better demonstrate the process.

Computer Communication Networks↗

Development of an experimental hospital database system using a relational database management system.

The development of an integrated database system for the satisfactory support of the information processing requirements of a modern hospital is clearly a major task with many associated problems. A design and implementation procedure for the development of a relational hospital database system based on an experimental relational database management system is presented which should help overcome some of the problems currently encountered. A brief outline of the application and the underlying database management system is given and a standardized procedure for the design of the multilevel database schemata is presented. The associated problems and procedures required for such a development are also examined and a number of theoretical conclusions and claims are tested in a real life application environment.

Database Management Systems↗

Design and implementation of computer-readable patient data cards--applications in Europe.

Computers have been widely accepted today as essential tools for handling and processing an ever-increasing flood of information. At the same time people, including patients and medical staff, are becoming more mobile and face the problem of interacting with the different computerized systems. We are also experiencing the acceptance of the small rectangular plastic cards as the instrument for vast numbers of transactions throughout the world. These factors have highlighted the possible attractions of machine-readable patient data cards that can be carried by the patients themselves. The patient data card is expected to provide quick reference information to any physician or health worker consulted by the carrier. This information should avoid duplication of diagnostic, therapeutic and prescription measures and help give a conveniently structured summary of the patient's medical history. Advances in technology have made it possible to move from the familiar credit card which can store only a limited amount of information, to new, similarly shaped cards with much greater capabilities. The basic technologies for patient data cards are examined. An analysis is then attempted of the possible information contents of such a card that could be used at a national and European level, and of the field trials in Europe so far. Questions of security and standardization are also addressed. A number of conclusions and recommendations are also made which are based on the experience gained from a relevant implementation attempted, and participation in a recent study undertaken by the EEC in the area.

Computer Security↗

A generic methodology for health care data security.

The aim is to outline the framework of a generic methodology for specifying countermeasures in health care environments. The method is specifically aimed at the enhancement of security in existing health care systems, and a key element is the use of predetermined 'profiles' by which these may be classified. Example scenarios are presented to illustrate how the concept could be applied in practice. The paper is based upon work that was initially carried out as part of the Commission of European Communities SEISMED (Secure Environment for Information Systems in MEDicine) project, the aim of which is to provide security recommendations for European health care establishments (HCEs).

Computer Security↗

EDI system definition for a European medical device vigilance system.

EDI is expected to be the dominant form of business communication between organizations moving to the Electronic Commerce era of 2000. The healthcare sector is already using EDI in the hospital supply function as well as in the clinical area and the reimbursement process. In this paper, we examine the use of EDI in the healthcare administration sector and more specifically its application to the Medical Device Vigilance System. Firstly, the potential of this approach is examined, followed by the definition of the EDI System Reference Model and the specification of the required system architecture. Each of the architecture's components are then explained in more detail, followed by the most important implementation options relating to them.

Computer Communication Networks↗