Secure Cloud Architecture for Hospital Information System

Abstract

Presently the users can store their information in a remote server and utilize the required services from collective computing resources dynamically without maintaining large amount of information in their local servers. This leads to the concept of cloud computing. Hospital Information system such as Telemedicine is an important application which is recently gaining momentum on cloud. As telemedicine not only promises to dramatically reduce the costs, but at the same time it makes access to care easier for patients and makes more revenue attainable for practices. Despite cloud's attractiveness, it has got tremendous security concerns including accessibility issues, user authentication, confidentiality concerns, and verification of data integrity, risk identification and mitigation, as well as insider threats from cloud provider staff. Precise identification of the patient/clinician during authentication process is a vital requirement for telemedicine cloud services as it involves sensitive physiological data. This paper proposes a secure cloud architecture which includes an authentication system for telemedicine cloud using a set of different unobtrusive physiological sensors (ECG) and web camera that continuously authenticate the identity of the user. This new type of authentication is called dynamic authentication. In the proposed Architecture auditing of the data providers are also included using third Party Auditing (TPA).