SECURE INFORMATION FLOW AWARENESS for smart wireless ehealth systems

Size: px

Start display at page:

Download "SECURE INFORMATION FLOW AWARENESS for smart wireless ehealth systems"

Darcy Murphy
9 years ago
Views:

1 www. sec.org SECURE INFORMATION FLOW AWARENESS for smart wireless ehealth systems SSD 12 - SCI Chemnitz 2012 stefan pfeiffer, andreas lehmann, sebastian unger, dirk timmermann

2 Lab-on-a-Chip-Implants (Online Bio-Sensing) Remote Diagnosis Online Drugstores and Remote Drug Ordering Wireless Hospital Administration Online Health Monitoring Remote Patient Supervision

3 nurse nurse Primary Care Physician Primary Care Physician nurse

4 nurse nurse Primary Care Physician Primary Care Physician nurse

5 nurse nurse Primary Care Physician Primary Care Physician nurse

6 nurse nurse Primary Care Physician Primary Care Physician nurse

7 Reliable Secure?!?

8 Two-Layer-Approach

9 Two-Layer-Approach Technology Devices Users Network Technology

10 Two-Layer-Approach Technology Security Mechanisms Devices Cryptography Users Security Protocols Network Technology Security Architectures

11 Two-Layer-Approach Infrastructure Layer Technology Security Mechanisms Devices Cryptography Users Security Protocols Network Technology Security Architectures

12 Two-Layer-Approach Process Definition Layer (Workflows / Automation Processes) Infrastructure Layer Technology Security Mechanisms Devices Cryptography Users Security Protocols Network Technology Security Architectures

13 Process Definition Layer Security Information Flow Control Security Domain: Public (Low) Public Private Security Domain: Private (High)

14 Process Definition Layer Security Information Flow Control Security Domain: Public (Low) Information Flow: Low High Public Information Flow: High Low Private Security Domain: Private (High)

15 Example Process

16 Infrastructure Layer - Users Primary Care Physician Patient Emergency Physician

17 Infrastructure Layer - Devices Primary Care Physician Body Area Network Bluetooth Compliant 3G Smartphone Patient Sensor EHR Database Medical In-Car- Information-System Emergency Physician

18 Infrastructure Layer - Networking Primary Care Physician 3G Transmission Tower Body Area Network Internet Carrier Internet Gateway Forwarding Send / Receive Send / Receive Bluetooth Compliant 3G Smartphone Patient Sensor EHR Database Medical In-Car- Information-System Emergency Physician

19 Infrastructure Layer - Security Primary Care Physician 3G Transmission Tower Body Area Network Internet Carrier Internet Gateway Forwarding Send / Receive Send / Receive Bluetooth Compliant 3G Smartphone Patient Sensor EHR Database Medical In-Car- Information-System Emergency Physician

20 Process Definition Layer Process Security Policy: Only Primary Care Physician and Patient have access to the patients EHR database.

21 Process Definition Layer Process Security Policy: Only Primary Care Physician and Patient have access to the patients EHR database. Process Model (informal): FALL DETECTION sensor alarm patient fell to ground BLOOD PRESSURE sensor alarm drop in blood pressure

22 Process Definition Layer Process Security Policy: Only Primary Care Physician and Patient have access to the patients EHR database. Process Model (informal): FALL DETECTION sensor alarm patient fell to ground BLOOD PRESSURE sensor alarm drop in blood pressure EMERGENCY CALL sent autonomously (location, ID, )

23 Process Definition Layer Process Security Policy: Only Primary Care Physician and Patient have access to the patients EHR database. Process Model (informal): FALL DETECTION sensor alarm patient fell to ground BLOOD PRESSURE sensor alarm drop in blood pressure EMERGENCY CALL sent autonomously (location, ID, ) Emergency doctor receives call immediately STARTS DRIVING to location MEDICAL IN-CAR-INFORMATION-SYSTEM accesses the central EHR DATABASE requesting for: drug intolerances medicamentous specialities

24 Process Definition Layer Process Security Policy: Only Primary Care Physician and Patient have access to the patients EHR database. Process Model (informal): FALL DETECTION sensor alarm patient fell to ground BLOOD PRESSURE sensor alarm drop in blood pressure EMERGENCY CALL sent autonomously (location, ID, ) Emergency doctor receives call immediately STARTS DRIVING to location MEDICAL IN-CAR-INFORMATION-SYSTEM accesses the central EHR DATABASE requesting for: drug intolerances medicamentous specialities emergency doctor provides a PERSONALIZED EMERGENCY TREATMENT

25 Verification Framework

26 Verification Framework 1. Process Modeling w.r.t. Infrastructure Layer BPMN 2.0 Model: (ID)

27 Verification Framework 2. Security Annotation in Business Process Model w.r.t. Security Policy Annotated BPMN 2.0 Model: (ID)

28 Verification Framework 3. Transformation from Business Process Model to Formalism (here: Petri nets) Annotated BPMN 2.0 Model Petri net Model

29 Verification Framework 4. Fully Automated Verification of Process Definition Layer Security Properties Tool Support (Full Automation) ANICA secure?!? LoLA Information Flow Violations Witness Path

30 Verification Framework 5. Information Flow Violation BP-Model-Feedback (Witness Path) Petri net Model

31 Verification Framework 5. Information Flow Violation BP-Model-Feedback (Witness Path) BPMN 2.0 Model Petri net Model

32 Conclusion 1. Detect ALL Information Leaks in mhealth workflows 2. Reliable Secure Workflows in mhealth Applications

33 Thank you for your attention! For further information and details, don t hesitate to ask... Stefan Pfeiffer Andreas Lehmann... or visit our websites... www. sec.org

34 Backup Slides

35 ehealth Information Flow Violations 1. Emergency Information Flow Violation 2. Untrusted / Not Certified System Components 3. Information Flow Policy Violation by Design

36 Verification Framework

37 Security The Ancient Way Security Mechanisms: guarded single entry point guarded walls built upon hills ALARM in-castle information system

38 Security The Ancient Way

Health Care 2.0: How Technology is Transforming Health Care

Health Care 2.0: How Technology is Transforming Health Care Matthew Kaiser, CEBS, SPHR Director, HR Technology and Outsourcing Lockton Kansas City, Missouri The opinions expressed in this presentation