Log Analysis of Human Computer Interactions Regarding Break The Glass Accesses to Genetic Reports

Ana Ferreira, Pedro Farinha, Cátia Santos-Pereira, Ricardo Correia, Pedro P. Rodrigues, Altamiro Costa-Pereira, Verónica Orvalho

2013

Abstract

Patients’ privacy is critical in healthcare but users of Electronic Health Records (EHR) frequently circumvent existing security rules to perform their daily work. Users are so-called the weakest link in security but they are, many times, part of the solution when they are involved in systems’ design. In the healthcare domain, the focus is to treat patients (many times with scarce technological, time and human resources) and not to secure their information. Therefore, security must not interfere with this process but be present, nevertheless. Security usability issues must also be met with interdisciplinary knowledge from human-computer-interaction, social sciences and psychology. The main goal of this paper is to raise security and usability awareness with the analysis of users’ interaction logs of a BreakTheGlass (BTG) feature. This feature is used to restrict access to patient reports to a group of healthcare professionals within an EHR but also permit access control override in emergency and/or unexpected situations. The analysis of BTG user interaction logs allows, in a short time span and transparently to the user, revealing security and usability problems. This log analysis permits a better choice of methodologies to further apply in the investigation and resolution of the encountered problems.

Paper Citation

in Harvard Style

Ferreira A., Farinha P., Santos-Pereira C., Correia R., P. Rodrigues P., Costa-Pereira A. and Orvalho V. (2013). Log Analysis of Human Computer Interactions Regarding Break The Glass Accesses to Genetic Reports . In Proceedings of the 15th International Conference on Enterprise Information Systems - Volume 3: ICEIS, ISBN 978-989-8565-61-7, pages 46-53. DOI: 10.5220/0004419200460053

in Bibtex Style

@conference{iceis13,
author={Ana Ferreira and Pedro Farinha and Cátia Santos-Pereira and Ricardo Correia and Pedro P. Rodrigues and Altamiro Costa-Pereira and Verónica Orvalho},
title={Log Analysis of Human Computer Interactions Regarding Break The Glass Accesses to Genetic Reports},
booktitle={Proceedings of the 15th International Conference on Enterprise Information Systems - Volume 3: ICEIS,},
year={2013},
pages={46-53},
publisher={SciTePress},
organization={INSTICC},
doi={10.5220/0004419200460053},
isbn={978-989-8565-61-7},
}

in EndNote Style

TY - CONF
JO - Proceedings of the 15th International Conference on Enterprise Information Systems - Volume 3: ICEIS,
TI - Log Analysis of Human Computer Interactions Regarding Break The Glass Accesses to Genetic Reports
SN - 978-989-8565-61-7
AU - Ferreira A.
AU - Farinha P.
AU - Santos-Pereira C.
AU - Correia R.
AU - P. Rodrigues P.
AU - Costa-Pereira A.
AU - Orvalho V.
PY - 2013
SP - 46
EP - 53
DO - 10.5220/0004419200460053