Increasing The Level Of Protection Of Patients' Personal Data On Telemedicine Platforms
Keywords:
Telemedicine, data security, privacy, HIPAA, GDPR, multilayered protection, blockchain, patient data, Defense in depth.Abstract
This thesis provides a comprehensive analysis of data protection mechanisms in modern telemedicine platforms and identifies their main technical, legal, and human-factor vulnerabilities. As a solution to the identified problem, a holistic protection model based on the “Defense-in-Depth” concept is proposed. The proposed model integrates three main components: 1) advanced technical measures such as end-to-end encryption (E2EE) and blockchain; 2) regulatory and legal improvements, including the harmonization of HIPAA and GDPR standards and strengthening the ownership of patient data; 3) a human-factor-oriented approach, which involves continuous cybersecurity education and training for healthcare professionals and patients.
References
Kruse, C. S., et al. (2017). Security techniques for the electronic health records. Journal of Medical Systems, 41(8), 127.
European Union Agency for Cybersecurity (ENISA). (2021). Data Protection in the Health Sector.
U.S. Department of Health & Human Services. (2020). HIPAA for Professionals.
Zhang, R., & Liu, L. (2020). Security models and requirements for healthcare cloud computing. IEEE Transactions on Cloud Computing.
Avancha, S., et al. (2012). Privacy in mobile technology for personal healthcare. ACM Computing Surveys.
Д.М. Монаков, В.А.Шадеркина, С.А.Рева, А.А.Грицкевич. Защита персональных данных пациентов при использовании телемедицинских технологий в период пандемии COVID-19. https://doi.org/10.29188/2712-9217-2021-7-4-48-57.
