Europe - GIT Verlag

Hospital Post Europe 04/08
The second Baltic Conference
on e-Health – under the
Patronage of Ulla Schmidt,
Federal Minister of Health,
Germany – takes place on
September 26 in Hamburg.
The primary aim of the conference
organized by the Baltic
Sea Forum, the Hamburg
Chamber of Commerce, and
IBM, in cooperation with the
U.S. Commercial Service, is to
provide a cross sector forum
for healthcare providers from
Germany, Poland, Lithuania,
Estonia, Latvia, Russia, Finland,
Norway, Sweden, and
Denmark.
The European healthcare sectors are faced
with many common challenges associated
with delivering affordable, quality care. In
view of rising costs, the healthcare industry
needs to make the transformation to an
interconnected, cost-efficient and, above
all, patient-centric system. Representatives
from hospitals, governments, health insur-
ance organizations, service providers, and
media will have the opportunity to discuss
potential solutions in patient-centric health
management during the Baltic Conference
on e-Health.
The conference presents a well-balanced
mix of best practices and strategyoriented
presentations. Keynote speakers
from Poland, Denmark, Lithuania, Estonia,
Russia, and Germany, workshops and
a panel discussion are the basic features
of the meeting. Moreover, international
solution and service providers will display
and present their product and service
achievements to policymakers, users,
suppliers, and implementation managers.
The conference program will focus on
the following topics:
Best Practices and Case Studies from the
Baltic Sea region countries.
Disease Management as concept of
reducing healthcare costs and improving
quality of life for individuals with
chronic disease conditions by preventing
or minimizing the effects of a disease
through integrative care.
It & coMMunIcAtIons 19
Baltic Sea Region Countries Discuss Innovations for Health Management
Second Baltic Conference on e-Health in Hamburg
Identity management systems
(IDM) control user access to
specific information in an
organization, based on user
identity, duties, and responsibilities.
Increasingly today’s
enterprises are turning also
to the next level of security
with the use of network access
control systems (NAC) to
verify the integrity of devices
as they access healthcare networks.
There is little doubt that IDM and NAC
security systems are necessary for sound
access control but they fail to address a potentially
more dangerous threat. One that
in recent months has loomed ever larger
in the concerns of CIOs: the risk of data
breach through inappropriate behaviour
by someone who is authorized to access
the network and its information.
Unauthorized Access and
Improper Use
Let’s consider a situation where a user
has been granted access to the network,
applications, and databases in order to
undertake their normal business activity;
but whose behaviour becomes mischievous
after authorization. Perhaps they are
downloading entire patient or customer
databases to their laptop or seeking to
email sensitive data to an address outside
the company, or copy it to a removable medium
such as a USB stick. Either way they
are abusing the access rights they have
been granted and will need to be stopped
urgently to protect against the loss of valuable
company information assets.
Lars Davies, a lawyer and provider of
compliance consultancy services in the
Optimization of clinical and business
processes as well as of hospital information
and communication systems in
order to increase the quality and economics
of patient care.
Latest developments in the EU regarding
standardization, interoperability, and
patient safety.
The international conference – which
is, among others, supported by the Koch-
Mechnikov-Forum – features presentations
e.g. on disease management in Russia and
the future of health management in Poland.
Main objectives of the conference organizers
are to exchange views and experiences
among all those involved in health
management, to learn from each other,
and to work with one another.
Another very important topic is the
crucial financial situation of hospitals and
clinics: Due to rising costs (personnel,
energy, food, etc.) and increasing regulatory
constraints, many hospitals are underfunded.
How the deployment of highquality
e-Health solutions will contribute
to solve these problems, is presented by
several speakers. Their presentations deal
with process optimization and change
management in hospitals, improvement of
continuity and quality of care by e-Health
solutions as well as increasing efficiency by
technological partnerships.
However, a win-win strategy for all e-
Health stakeholders is only possible if solutions
respond to patients’ needs and have
direct impact on access, quality, cost, and
safety of healthcare. The acceptance of e-
Health among patients and consumers is
essential. A panel discussion on “Patient-
The Threat Within
Patient Privacy Issues from Unauthorized Access and Improper Use
U.S. notes: “If an authorized individual,
for example, has inappropriately accessed
or copied information then potentially an
unauthorized access under the Computer
Misuse Act has occurred; it could also be a
breach of copyright law. If any personal data
is involved, it could also constitute a breach
of the Data Protection Act (DPA), The
Health Insurance Portability and Accountability
Act (HIPAA) or similar privacy legislation.
This type of act by a senior employee
could also result in a breach of their duty of
confidence and a breach of their terms of
employment.” The issue for the organization
however is more immediate; it needs
to be able to identify the inappropriate use
of the organisations information and protect
against its loss. The main legal issue is
again the DPA. The organization can be accused
of having failed to put in sufficient
safeguards in place to prevent a breach and
the directors and managers could be implicated
for failure in their fiduciary duties to
protect stakeholders from loss.
Data Leak Prevention
In response to this type of threat the information
security industry has, in recent
years, developed a flurry of so-called data
leakage prevention (DLP) systems which
seek to address this emerging exposure for
companies. While the goal of DLP systems
is undoubtedly well intended, the effectiveness
of these technologies relies upon
the satisfactory matching of user access authorisation
levels with the classification of
all corporate information assets according
to their sensitivity and “value”. The logic of
such systems is clear but inflexibility and
the administrative overheads of such systems
are prohibitively high.
The bottom line is that the thief may be
a disgruntled employee, a doctor, an ex-
Geoff Sweeney, Co-founder &
Chief Technology Officer, Tier-3
ternal contractor or even a trusted senior
executive; there are no rules to predicting
human behaviour. Inappropriate action of
this type by anyone who has the authority
to access sensitive information can and still
does occur. What is required is the means
by which suspicious or unusual movement
of sensitive data, irrespective of the initiator
can be detected and assessed for legitimacy.
Beyond IDM and NAC systems
– Behavioural Anomaly
Detection
Behavioural Anomaly Detection uses intelligent
analysis technology to inspect and
immediately alert on inappropriate user
or system behaviour as soon as it deviate
from the norm. Without the need for complex
access and asset prioritisation rules
and the resulting configuration and management
overheads the technology simply
blocks and flags unusual system or user
activity to security administrators and risk
managers.
A lot of companies with inspection
technology claim behavioural analysis ca-
pabilities yet limit themselves to looking
at the data, network and transport layers
(i.e. Layers 2–4 of the OSI stack). This unfortunately
is insufficient for effective data
protection capabilities, which requires the
monitoring of multiple layers. The fact is
that few vendors provide sufficient visibility
of anomalous events to enable meaningful
risk alerting and protection against
data loss.
Data breaches from unauthorized access
and improper use are a growing
problem, but they can be detected and
prevented with appropriate security strategy
and technology. Behavioural Anomaly
Detection technology identifies when a legitimate
user’s behaviour begins to deviate
from the norm, blocks it and systematically
stores a copy of all access logs in foren-
Innovation For Modality Imaging
The installed base of modality devices inside
the hospitals is constantly growing.
Nearly all of them require a display device.
A lot of those are already installed for a
long time. Quite often here are CRT monitors
connected which are almost at the end
of their lifetime. Those units need to be replaced
quickly and easily.
“Exactly for those purposes Totoku offers
now the new 19 inch, 1,3 Megapixel
grayscale display ME191L. It is able to support
all modality devices of the most common
manufacturers but fits also perfect for
special applications like cardiology,” explains
Dirk Cordt, General Manager Sales
and Marketing department Totoku Europe.
Thanks to the various gamma presets the
display can be adapted easily to the connected
modality device.
Centric Healthcare Systems” will bring together
the different stakeholders in order
to review the necessary transformation
processes and to develop visions for the
future of healthcare.
All conference presentations are held in
English (no simultaneous interpretation).
For further information and registration,
please cf. the website.
www.baltic-conference-on-ehealth.
com
sic repository which can have evidential
weight in any resulting action against an
individual. Using smart technology Behavioural
Anomaly Detection can automatically
detect and prevent a potential data theft
as it occurs rather than respond “after the
horse (and its valuable information) has
bolted”.
Contact:
Geoff Sweeney
Co-founder & Chief Technology
Officer
Tier-3
Sydney, Australia
Tel.: +61 2 9419 3200
www.tier-3.com
The display fulfills all requirements of a
high quality medical imaging device. With
a maximum brightness of 1000 cd/m² and
a contrast ratio of 900:1 even under bad
circumstances a very high image quality is
secured. With the integrated lambda sentinel
the calibrated brightness is kept permanently
on the right level.
The display offers a flexible input concept;
thanks to this also non standard timings
are displayed. “In addition to this the
supported frequency range is wider than
usual. That’s the reason why signals can be
displayed where other displays fail,” Cordt
explains further. A wide viewing angle of
178° in vertical and horizontal axis ensures
always an accurate view at the X-ray images.
www.totoku.com