Security in Clinical Information Systems

Dr Ross J Anderson

Computer Laboratory
University of Cambridge
Pembroke Street
Cambridge CB2 3QG

12th January 1996

This document is also available in pdf and ascii; there are also translations into French and German.

• Contents
• Introduction
  • Scope of the policy
  • Definitions
  • Disclaimers
• Threats and Vulnerabilities
  • The ethical basis of clinical confidentiality
  • Other security requirements for clinical information
  • Threats to clinical confidentiality
  • Other security threats to clinical information
  • Protection priorities
  • Examples of aggregation in NHS systems
• Security Policy
  • Access control
  • Record opening
  • Control
  • Consent and notification
  • Persistence
  • Attribution
  • Information flow
  • Aggregation control
  • The Trusted Computing Base
  • Clinical records or patient records?
• Security Architecture Options
  • Compusec
  • Comsec
  • Evaluation and accreditation
  • European and global standardisation
• Conclusions
• References
• About this document ...