Problem of Cybersecurity in Context of Medical Information System «Register of Palliative Patients»

摘要

The project of a special purpose medical information system for use in the field of palliative care “Register of palliative patients” is proposed. The project provides that the system should have the following basic functionality: providing system administration; maintaining a patient register; searching for patient data by specified parameters; maintaining a patient’s medical record including information about prescriptions; searching for prescriptions by specified parameters; generating summary reports and reports for a group of prescriptions. The prototype of the system, presented by its structural-functional and informational models, and its implementation are described. The cybersecurity issues of MISs are analyzed in terms of meeting regulatory requirements. An initial protection level of the «Palliative Patient Register» system was assessed, and the most relevant threats were identified to build a threat model. A scheme for ensuring information security was proposed. A model of data protection in the system based on the exchange of only anonymized personal data between the client and the server is proposed. To do this, we suggest using cryptographic security tools. The General scheme of interaction between the client and server using the REST architecture is described. The possibilities of the Yii framework for implementing the RestFull API are considered.