Audit recommendation for privacy protection in Personal Health Record systems

Personal Health Record (PHR) systems store a large amount of users´ health information, which is very sensitive for users. So privacy protection is an important issue for PHR systems. Although information technology audit can find out improper accesses to users´ sensitive data that violate their privacy policies, it is difficult for inexperienced users to use audit commands. This paper presents an audit recommendation framework to help users appropriately audit their sensitive records so as to have a good understanding of their privacy situation. For an audit requester, we analyze doctors´ historical queries to find the similar users of the requester. Then we analyze the audit commands of those similar users and make some recommendations to the requester. Experiments are performed to verify our method.