Compliant Secured Specialized Electronic Patient Record Platform

Distributed medical information systems are prone to security flaws at three main different levels: storage, processing and transmission. Among implemented security mechanisms, few concern intrinsic patient records multimedia content protection. This article presents a secured specialized electronic patient record (SSEPR) based on a JPEG2000-XML structure designed to provide interaction with the medical information system (MIS) security mechanisms and policies. Such SSEPR is an electronic patient record (EPR) elementary resource, containing data and information generated by daily practice in a technical medical unit, grouping information that belongs to one patient examination (images, examination data, medical report). Devoted to be handled and shared, it integrates different security attributes that are used to certify information reliability (information integrity and authenticity), while controlling information access in a compliant MIS. Aiming to be as generic as possible, the presented SSEPR and its platform prototype have been developed in the framework of a nuclear medicine service. Properly defined, EPR security layer can be used to improve security in handling and sharing medical information