Trust assessment of security for e-health systems

• Published in: Electronic commerce research and applications 2014-05, Vol.13 (3), p.164-177
• Main Authors: Bahtiyar, Serif, Çaglayan, Mehmet Ufuk
• Format: Article
• Language: English
• Subjects: Architecture; Assessment; Computer architecture; E-health; Electronic commerce; Health services; Network security; Security; Trust
• ISSN: 1567-4223; 1873-7846
• DOI: 10.1016/j.elerap.2013.10.003

•We proposed a model for assessing the trust of the security of an e-healthcare service from an entity point of view.•We introduced new trust assessment architecture of security for an entity.•We proposed novel trust assessment metrics for an entity.•We compared our trust model and architecture with other models in literature.•We provided a case study to illustrate the applicability of our trust model and our architecture in real life. The expansive connectivity of emerging information systems has set the stage for pervasive access to healthcare services via e-health systems for selecting the best possible healthcare services. Emerging systems are expected to be highly dynamic open environments connecting diverse number of healthcare services and autonomous entities that are autonomous agents or software applications representing patients. Entities in such dynamic environments may have different security needs from e-health systems raising the challenge of trust computations regarding security. In this research, we proposed a trust assessment model of an e-health service from the viewpoint of an entity. The model contains a comprehensive architecture applicable to different types of entities, and a novel set of trust assessment metrics may be used to assess a specific property of a security system (i.e. partial metrics) or all properties (i.e. total metrics). The simulation based evaluation of proposed model in the context of a Hospital Online Appointment Service has shown that the proposed model provides better trust computation results than existing trust models for e-health systems. Furthermore, the entities are also able to assess the trust even with incomplete security information.