Security

Security Strategy for Data Management of the eHealth Platform
Health Professional Identification and Card LuxTrust Integration

Elaborating and disseminating an interoperability agreement for the national security strategy.
Implementing a common platform for medical data exchange with respect to the national laws for private data protection.
Creating synergies between existing and future projects in e-Health domain with respect to security strategies.

The main topics of the work group are

• Identification number and identification card of healthcare professional
• Authenticity of electronic documents
• Secure storage and exchange of medical data
• Access to data only to authorized professionals

Topics derived out of this list:

• Type of medical data to concern: raw data, meta data extraction, files, etc.
• Encryption of data
• De-identification/pseudonymisation of data
• Signing of data
• Access control enforcement
  • for users, user groups, rules that describe user groups
  • restricting the creation, access, modification, deletion/suspension in the data storage
• Extraction of information for statistics
• Triggering events and access logging
• Information stored on a professional card
• Roles and responsibility of actors
• Relationships between different data sources: professionals, position at the institutions, demographic data
• Scenarios and solutions for temporary working without cards: lost, destroyed, forgotten
• Registration and renewing of cards