Search

In the last few years, Electronic Health Record (EHR) systems have received a great attention in the literature, as well as in the industry. They are expected to lead to health care savings, increase health care quality and reduce medical errors. This interest has been accompanied by the development of different standards and frameworks to meet EHR challenges. One of the most important initiatives that was developed to solve problems of EHR is IHE (Integrating the Healthcare Enterprise), which adapts the distributed approach to store and manage healthcare data. IHE aims at standardizing the way healthcare systems exchange information in distributed environments. For this purpose it defines several so called Integration Profiles that specify the interactions and the interfaces (Transactions) between various healthcare systems (Actors) or entities. Security was considered also in few profiles that tackled the main security requirements, mainly authentication and audit trails. The security profiles of IHE currently suffer two drawbacks. First, they apply end point security methodology, which has been proven recently to be insufficient and cumbersome in distributed and heterogeneous environment. Second, the current security profiles for more complex security requirements are oversimplified, vague and do not consider architectural design. This recently changed to some extend e.g., with the introduction of newly published white papers regarding privacy [5] and access control [9]. In order to solve the first problem we utilize results of previous studies conducted in the area of security-aware IHE-based systems and the state-of-the-art Security-as-a-Service approach as a convenient methodology to group domain-wide security needs and overcome the end point security shortcomings.

Introduction: The ubiquitous availability of medical or care data for authorized clinicians and nurses is expected to increase quality while reducing costs in the health care sector. The standardized, distributed provision of medical or care data is capable to support the vision of patient centered shared electronic health records (SEHRs). A main contribution to cross-institutional data exchange is provided by Integrating the Healthcare Enterprise (IHE). However, holistic implementations of IHE based eHealth infrastructures for SEHRs are currently rare and security and privacy regulations are not fully covered by existing IHE Integration Profiles. This work aims to point out our experiences and lessons learned from five years of development and the implementation of IHE compliant products., Methods: Cross-Enterprise Document Sharing (XDS) describes the base components for exchanging medical or care data. A unique patient Identification is described by the Patient Identifier Cross-referencing (PIX) and the Patient Demographics Query (PDQ) Integration Profile. All interactions are logged in an "Audit Record Repository" deployed once per Affinity Domain and defined in the Audit Trail and Node Authentication (ATNA) Integration Profile., Results: Based on the IHE Integration Profile XDS and other Integration Profiles high-level components for eHealth infrastructures and applications, supporting a holistic, secure concept and, based on these concepts, software products for a technical cooperative care infrastructure, has been developed. The products are practically evaluated in a project for setting up an IHE XDS Affinity Domain in the Austrian district of Tyrol and a number of lessons have been learned.

Introduction: Optimized workflows and communication between institutions involved in a patient's treatment process can lead to improved quality and efficiency in the healthcare sector. Electronic Health Records (EHRs) provide a patient-centered access to clinical data across institutional boundaries supporting the above mentioned aspects. Interoperability is regarded as vital success factor. However a clear definition of interoperability does not exist. The aim of this work is to define and to assess interoperability criteria as required for EHRs., Methods: The definition and assessment of interoperability criteria is supported by the analysis of existing literature and personal experience as well as by discussions with several domain experts., Results: Criteria for interoperability addresses the following aspects: Interfaces, Semantics, Legal and organizational aspects and Security. The Integrating the Healthcare Enterprises initiative (IHE) profiles make a major contribution to these aspects, but they also arise new problems. Flexibility for adoption to different organizational/regional or other specific conditions is missing. Regional or national initiatives should get a possibility to realize their specific needs within the boundaries of IHE profiles. Security so far is an optional element which is one of IHE greatest omissions. An integrated security approach seems to be preferable., Discussion: Irrespective of the so far practical significance of the IHE profiles it appears to be of great importance, that the profiles are constantly checked against practical experiences and are continuously adapted.

"Electronic health services are important" the EU commission stated in the E-Health action plan. By these means access to health care can be improved and the quality and effect of the offered medical services can be increased. By introducing the e-card in Austria, an overall link-up of nearly all health service providers of the external sector (e.g. family doctors) was achieved. In 2005 the Austrian E-Health Initiative (EHI) of the Austrian Federal Ministry for Health and Women mapped out a strategy to organise the development of the health system towards an integrated patient-centred. Hereby the electronic health record (EHR) plays a decisive role. The aim of this study is to analyse requirements for a virtual, cross-institutional and patient-centred electronic health record from the point of view of the exemplary main actors (Doctor and Patient), to define conditions, and then to evaluate the thus derived, specific concept of implementation. Aside from the two main actors regarding medical acts, namely the institution treating a patient (e.g. doctor, paramedic or nurse) and the patient receiving treatment, a row of other actors could be identified. Group assessment techniques with representatives of these actors resulted in an overview of required functions of an EHR. As a proof-of-concept an information system architecture conformable to the IHE XDS architecture for cross enterprise document sharing is currently being constructed and evaluated in the course of a pilot-project. If the core architecture fulfils the expectations, then a further extension to other hospitals and resident doctors, and subsequently also to the other actors of the health system, is planned. Since both legal and socio-technical requirements are presently not yet entirely met, and since there are also deficits from a methodical viewpoint, a complete implementation and widespread introduction will be a long term goal.

Quality and efficiency of health care services is expected to be improved by the electronic processing and trans-institutional availability of medical data. A prototype architecture based on the IHE-XDS profile is currently being developed. Due to legal and organizational requirements specific adaptations to the IHE-XDS profile have been made. In this work the services of the health@net reference architecture are described in details, which have been developed with focus on compliance to both, the IHE-XDS profile and the legal situation in Austria. We expect to gain knowledge about the development of a shared electronic health record using Medical Data Grids as an Open Source reference implementation and how proprietary Hospital Information systems can be integrated in this environment.