Analysis of data security for hospital management using data transparent encryption and role based access control

Abstract

Currently, the issue of security is a key concern for organizations, especially those operating within the healthcare sector. The authors thus propose to enhance the integrity of existing healthcare systems through the incorporation of an essential security layer that involves encryption techniques to avoid data leakage or misuse by third parties. Unlike other sectors, a number of healthcare organizations are still reliant upon traditional paper based systems, although the use of electronic patient record systems is steadily growing. The benefits provided by computerized online patient records is offset by the increased risk of unauthorized access to the personal information of the patients. The encryption technique proposed aims to ensure patient medical data is encrypted and safe in the event the storage media or data file is stolen. Furthermore, the developer has used Role Based Authentication Control (RBAC) to assign permissions to roles and roles to users. These roles correspond to positions in an organization and align with the duties of a particular position. In addition, other than encryption techniques the developer has used the MD5 hashing technique to hash and store username and passwords in a hexadecimal character. This increases adds an extra level of difficultly for an authorized individual to access the information in the database. The authors have also implemented additional security features during the login process, thus access to the system is contingent upon the user successfully passing through all of the security procedures.