Security approaches for electronic health data handling through the Semantic Web: A scoping review

Autor(es)

Lima, Vinicius Costa ; Alves, Domingos ; Bernardi, Filipe Andrade ; Rijo, Rui Pedro Charters Lopes

• Tipo de documento: Artigo Científico
• Fonte: SEMANTIC WEB; v. 14, n. 4, p. 14-pg., 2023-01-01.

Resumo

Integration of health information systems are crucial to advance the effective delivery of healthcare for individuals and communities across organizational boundaries. Semantic Web technologies may be used to connect, correlate, and integrate heterogeneous datasets spread over the internet. However, when working with sensitive data, such as health data, security mechanisms are needed. A scoping review of the literature was undertaken to provide a broad view of security mechanisms applied to, or along with, Semantic Web technologies that could allow its use with health data. Searches were conducted in the most relevant databases for the scope of this work. The findings were classified according to the main objective and features presented by each solution. Twenty-six studies were included in the review. They introduced mechanisms that addressed several security attributes, such as authentication, authorization, integrity, availability, confidentiality, privacy, and provenance. These mechanisms support access control frameworks, semantic and functional interoperability infrastructures, and privacy compliance solutions. The findings suggest that the application and use of Semantic Web technologies is still growing, with the healthcare area being particularly interested. The main security mechanisms for SemanticWeb technologies, the key security attributes and properties, and the main gaps in the literature were identified, helping to understand the technical needs to mitigate the risks of handling personal health information over the SemanticWeb. Also, this research has shown that complex and robust solutions are available to successfully address several security properties and features, depending on the context that the electronic health data is being managed. (AU)

• Processo FAPESP: 22/02683-7 - Gestão de treinamento e implantação no DRS XIII e HCFMRP- USP
• Beneficiário: Vinicius Costa Lima
• Modalidade de apoio: Bolsas no Brasil - Programa Capacitação - Treinamento Técnico
• Processo FAPESP: 20/01975-9 - Saúde digital para a estratégia End TB: da integração de dados ligados a uma melhor tomada de decisão baseada em evidências
• Beneficiário: Domingos Alves
• Modalidade de apoio: Auxílio à Pesquisa - Programa eScience e Data Science - Regular