Data Protection and Privacy of the Internet of Healthcare Things (IoHTs)
Source abstract
Abstract
The Internet of Things (IoT) is an emerging field consisting of Internet-based globally connected network architecture. A subset of IoT is the Internet of Healthcare Things (IoHT) that consists of smart healthcare devices having significant importance in monitoring, processing, storing, and transmitting sensitive information. It is experiencing novel challenges regarding data privacy protection. This article discusses different components of IoHT and categorizes various healthcare devices based on their functionality and deployment. This article highlights the possible points and reasons for data leakage, such as conflicts in laws, the use of sub-standard devices, lack of awareness, and the non-availability of dedicated local law enforcement agencies. This article draws attention to the escalating demand for a suitable regulatory framework and analyzes compliance problems of IoHT devices concerning healthcare data privacy and protection regulations. Furthermore, the article provides some recommendations to improve the security and privacy of IoHT implementation.
Source: crossref · Quality: baseline
Research context
OpenAlex topics: IoT and Edge/Fog Computing · Blockchain Technology Applications and Security · Internet of Things and AI
SciVX discovery tags are terminology-based. OpenAlex topics are source-provided classifications.
Affiliations
School of Electrical Engineering and Computer Science, National University of Sciences and Technology (NUST), Islamabad 44000, Pakistan
Essex Pathways Department, University of Essex, Colchester CO4 3SQ, UK
Security and Trust Unit, Fondazione Bruno Kessler, 38123 Trento, Italy
SAUDI ARAMCO Cybersecurity Chair, Department of Computer Information Systems, College of Computer Science and Information Technology, Imam Abdulrahman Bin Faisal University, P.O. Box 1982, Dammam 31441, Saudi Arabia
SAUDI ARAMCO Cybersecurity Chair, Department of Networks and Communications, College of Computer Science and Information Technology, Imam Abdulrahman Bin Faisal University, P.O. Box 1982, Dammam 31441, Saudi Arabia
Funding
SAUDI ARAMCO Cybersecurity Chair, Imam Abdulrahman Bin Faisal University
References (82)
Show source-provided references
1. (2001). International Telecommunication Union Yearbook of Statistics, 1991–2000, ITU.
2. Ahmad, T., and Ranise, S. (2018). Validating Requirements of Access Control for Cloud-Edge IoT Solutions (Short Paper). International Symposium on Foundations and Practice of Security, Springer.10.1007/978-3-030-18419-3_9 ↗
3. Culler, D., Chakrabarti, S., and Infusion, I.P. (2021, October 01). 6LoWPAN: Incorporating IEEE 802.15. 4 into the IP Architecture, IPSO Alliance; White Paper. Available online: https://www.omaspecworks.org/wp-content/uploads/2018/03/6lowpan.pdf.
4. Al Alkeem, E., Yeun, C.Y., and Zemerly, M.J. (2015, January 8–10). Security and privacy framework for ubiquitous healthcare IoT devices. Proceedings of the 10th IEEE International Conference for Internet Technology and Secured Transactions (ICITST), London, UK.10.1109/ICITST.2015.7412059 ↗
5. Internet of things: Vision, applications and research challenges10.1016/j.adhoc.2012.02.016 ↗
6. The quest for privacy in the internet of things10.1109/MCC.2016.28 ↗
7. Smart health: A context-aware health paradigm within smart cities10.1109/MCOM.2014.6871673 ↗
8. The pursuit of citizens’ privacy: A privacy-aware smart city is possible10.1109/MCOM.2013.6525606 ↗
9. Privacy in the smart city- applications, technologies, challenges, and solutions10.1109/COMST.2017.2748998 ↗
10. Alghanim, A.A., Rahman, S.M.M., and Hossain, M.A. (2017, January 11–13). Privacy analysis of smart city healthcare services. Proceedings of the 2017 IEEE International Symposium on Multimedia (ISM), Taichung, Taiwan.10.1109/ISM.2017.79 ↗
11. Storm, D. (2021, October 01). MEDJACK: Hackers Hijacking Medical Devices to Create Backdoors in Hospital Networks Computer World. Available online: https://www.computerworld.com/article/2932371/medjack-hackers-hijacking-medical-devices-to-create-backdoors-in-hospital-networks.html.
12. McMahon, E., Williams, R., El, M., Samtani, S., Patton, M., and Chen, H. (2017, January 22–24). Assessing medical device vulnerabilities on the Internet of Things. Proceedings of the IEEE International Conference on Intelligence and Security Informatics (ISI), Beijing, China.10.1109/ISI.2017.8004903 ↗
13. ISA evaluation framework for security of internet of health things system using AHP-TOPSIS methods10.1109/ACCESS.2020.3017221 ↗
14. A secure, private, and explainable IoHT framework to support sustainable health monitoring in a smart city10.1016/j.scs.2021.103083 ↗
15. Secure and provenance enhanced Internet of health things framework: A blockchain managed federated learning approach10.1109/ACCESS.2020.3037474 ↗
16. Mishra Internet of Healthcare Things: A contemporary survey10.1016/j.jnca.2021.103179 ↗
17. Authentication and Identity Management of IoHT Devices: Achievements, Challenges, and Future Directions10.1016/j.cose.2021.102491 ↗
18. Review of security challenges in healthcare internet of things10.1007/s11276-020-02340-0 ↗
19. Sivan, R., and Zukarnain, Z.A. (2021). Security and Privacy in Cloud-Based E-Health System. Symmetry, 13.10.3390/sym13050742 ↗
20. Parashar, A., and Rishishwar, S. (2017, January 27–28). Security challenges in IoT. Proceedings of the Third International Conference on Advances in Electrical, Electronics, Information, Communication and Bio-Informatics (AEEICB), Chennai, India.10.1109/AEEICB.2017.7972351 ↗
21. Morghan, H., Hashmi, U.S., and Imran, A. (2019). Edge computing in smart health care systems: Review, challenges, and research directions. Trans. Emerg. Telecommun. Technol., e3710.
22. Cao, Y., Hou, P., Brown, D., Wang, J., and Chen, S. (2015, January 21). Distributed analytics and edge intelligence: Pervasive health monitoring at the era of fog computing. Proceedings of the 2015 Workshop on Mobile Big Data (Mobidata), Hangzhou, China.10.1145/2757384.2757398 ↗
23. Hu, R., Pham, H., Buluschek, P., and Gatica-Perez, D. (2017, January 23). Elderly people living alone: Detecting home visits with ambient and wearable sensing. Proceedings of the 2nd International Workshop on Multimedia for Personal Health and Health Care (MMHealth), Mountain View, CA, USA.10.1145/3132635.3132649 ↗
24. SDN-based multi-tier computing and communication architecture for pervasive healthcare10.1109/ACCESS.2018.2873907 ↗
25. Brito, C., Pinto, L., Marinho, V., Paiva, S., and Pinto, P. (2021, January 23–26). A Review on Recent Advances in Implanted Medical Devices Security. Proceedings of the 2021 16th Iberian Conference on Information Systems and Technologies (CISTI), 2021, Chaves, Portugal.10.23919/CISTI52073.2021.9476435 ↗
26. Thakar, A.T., and Pandya, S. (2017, January 18–19). Survey of IoT enables healthcare devices. Proceedings of the 2017 International Conference on Computing Methodologies and Communication (ICCMC), Erode, India.10.1109/ICCMC.2017.8282640 ↗
27. EdgeCare: Leveraging edge computing for collaborative data management in mobile healthcare systems10.1109/ACCESS.2019.2898265 ↗
28. Perez, A.J., and Zeadally, S. (2021). Recent Advances in Wearable Sensing Technologies. Sensors, 21.10.3390/s21206828 ↗
29. Qu, Y., Zheng, G., Ma, H., Wang, X., Ji, B., and Wu, H. (2019). A Survey of Routing Protocols in WBAN for Healthcare Applications. Sensors, 19.10.3390/s19071638 ↗
30. Internet of things for smart healthcare: Technologies, challenges, and opportunities10.1109/ACCESS.2017.2775180 ↗
31. Saboor, A., Mustafa, A., Ahmad, R., Khan, M.A., Haris, M., and Hameed, R. (2019, January 13–15). Evolution of Wireless Standards for Health Monitoring. Proceedings of the 2019 9th Annual Information Technology, Electromechanical Engineering and Microelectronics Conference (IEMECON), Jaipur, India.10.1109/IEMECONX.2019.8877040 ↗
32. On Research Challenges in Hybrid Medium-Access Control Protocols for IEEE 802.15.6 WBANs10.1109/JSEN.2018.2883786 ↗
33. Wireless technologies, medical applications and future challenges in WBAN: A survey10.1007/s11276-021-02780-2 ↗
34. Hämäläinen, M., Paso, T., and Mucchi, L. (September, January 28). ETSI SmartBAN in Medical IoT. Proceedings of the 2021 XXXIVth General Assembly and Scientific Symposium of the International Union of Radio Science (URSI GASS), Rome, Italy.10.23919/URSIGASS51995.2021.9560624 ↗
35. Wireless body area networks: Applications and technologies10.1016/j.procs.2016.04.266 ↗
36. A low-energy ultra-wideband internet-of-things radio system for multi-standard smart-home energy management10.5573/IEIESPC.2015.4.5.354 ↗
37. Internet of Health Things (IoHT) for personalized health care using integrated edge-fog-cloud network10.1007/s12652-020-02113-9 ↗
38. Hassanien, A.E., Azar, A., Gaber, T., Oliva, D., and Tolba, F. (2020). Outlook on Security and Privacy. IoHT: Key Challenges and Future Vision, Proceedings of the International Conference on Artificial Intelligence and Computer Vision (AICV 2020). Advances in Intelligent Systems and Computing, Cairo, Egypt, 8–10 April, 2020, Springer.10.1007/978-3-030-44289-7 ↗
39. Meyer, J., Kazakova, A., Büsing, M., and Boll, S. (2016, January 16). Visualization of complex health data on mobile devices. Proceedings of the 2016 ACM Workshop on Multimedia for Personal Health and Health Care (MMHealth), Amsterdam, The Netherlands.10.1145/2985766.2985774 ↗
40. Rolim, C.O., Koch, F.L., Westphall, C.B., Werner, J., Fracalossi, A., and Salvador, G.S. (2010, January 2–16). A cloud computing solution for patient’s data collection in health care institutions. Proceedings of the 2010 Second International Conference on eHealth, Telemedicine, and Social Medicine, St. Maarten, The Netherlands.10.1109/eTELEMED.2010.19 ↗
41. Perera, C., McCormick, C., Bandara, A.K., Price, B.A., and Nuseibeh, B. (2016, January 7–9). Privacy-by-design framework for assessing internet of things applications and platforms. Proceedings of the 6th International Conference on the Internet of Things, Stuttgart, Germany.10.1145/2991561.2991566 ↗
42. Stork, M., and Vancura, V. (2014, January 9–10). Hidden pacemaker pulses detection based on wavelet and Hilbert-Huang transform. Proceedings of the IEEE International Conference on Applied Electronics, Pilsen, Czech Republic.10.1109/AE.2014.7011721 ↗
43. Samani, M.M., and Mahnam, A. (2010, January 3–4). Design and implementation of an ultra low power wireless neuro-stimulator system. Proceedings of the 17th Iranian Conference of Biomedical Engineering (ICBME), Isfahan, Iran.10.1109/ICBME.2010.5704971 ↗
44. Glucose monitoring in individuals with diabetes using a long-term implanted sensor/telemetry system and mode
45. Hiremath, S., Yang, G., and Mankodiya, K. (2014, January 3–5). Wearable internet of things: Concept, architectural components and promises for person-centered healthcare. Proceedings of the International Conference on Wireless Mobile Communication and Healthcare-Transforming Healthcare Through Innovations in Mobile and Wireless Technologies (MOBIHEALTH), Athens, Greece.10.4108/icst.mobihealth.2014.257440 ↗
46. Farina, D., Jensen, W., and Akay, M. (2013). ActiGait®: A Partly Implantable Drop-Foot Stimulator System. Introduction to Neural Engineering for Motor Rehabilitation, IEEE.10.1002/9781118628522 ↗
47. Hansen, J.H., Ali, H., Saba, J.N., Charan, M.R., Mamun, N., Ghosh, R., and Brueggeman, A. (2019, January 19–22). Cci-mobile: Design and evaluation of a cochlear implant and hearing aid research platform for speech scientists and engineers. Proceedings of the 2019 IEEE EMBS International Conference on Biomedical & Health Informatics (BHI), Chicago, IL, USA.10.1109/BHI.2019.8834652 ↗
48. Caffey, S., Po-Ying, L., and Jeffrey, B. (2012). Remote-Controlled Drug Pump Devices. (8,285,328), U.S. Patent.
49. Flexible and Wearable EMG and PSD Sensors Enabled Locomotion Mode Recognition for IoHT Based In-home Rehabilitation10.1109/JSEN.2021.3058429 ↗
50. Rao, S., Dubey, S., Deb, S., Hughes, Z., Seo, Y.S., Nguyen, M.Q., Tang, S.J., Abell, T., Lahr, C., and Chiao, J.C. (2014, January 3–4). Wireless gastric stimulators. Proceedings of the Texas Symposium on Wireless and Microwave Circuits and Systems, Waco, TX, USA.10.1109/WMCaS.2014.7015875 ↗
51. Zareei, M., Zarei, A., Budiarto, R., and Omar, M.A. (2011, January 2–5). A comparative study of short range wireless sensor network on high density networks. Proceedings of the 17th Asia-Pacific Conference on Communications, APCC, Sabah, Malaysia.10.1109/APCC.2011.6152813 ↗
52. Fouladi, B., and Ghanoun, S. (2013). Security Evaluation of the Z-Wave Wireless Protocol, Black Hat.
53. ITriple-Band circular polarized antenna for WLAN/WiFi/Bluetooth/WiMAX applications10.2528/PIERC20121207 ↗
54. Varshney, G., and Gupta, H. (2017, January 10–11). A security framework for IOT devices against wireless threats. Proceedings of the 2nd International Conference on Telecommunication and Networks (TEL-NET), Noida, India.10.1109/TEL-NET.2017.8343548 ↗
55. Heterogeneous integration of bio-sensing system-on-chip and printed electronics10.1109/JETCAS.2012.2223554 ↗
56. The use of the personal digital assistant (PDA) among personnel and students in health care: A review10.2196/jmir.1038 ↗
57. Jung, J.Y., and Lee, J. (2007, January 12–14). Automatic discovery and installation of wearable bio signal devices in ubiquitous healthcare system. Proceedings of the 9th International Conference on Advanced Communication Technology, Gangwon, Korea.10.1109/ICACT.2007.358383 ↗
58. Internet of health things: Toward intelligent vital signs monitoring in hospital wards10.1016/j.artmed.2018.05.005 ↗
59. Rajit, N., and Thanachayanont, A. (2019, January 23–26). A 1-V CMOS low-power resistor-based temperature sensor for human body temperature monitoring. Proceedings of the 34th International Technical Conference on Circuits/Systems, Computers and Communications (ITC-CSCC), JeJu, Korea.10.1109/ITC-CSCC.2019.8793401 ↗
60. A BJT-based temperature-to-digital converter with inaccuracy from −55 °C to +125 °C in 0.1610.1109/JSSC.2016.2638464 ↗
61. Security and provenance for Internet of Health Things: A systematic literature review10.1002/smr.2335 ↗
62. Esha, N.H., Tasmim, M.R., Huq, S., Mahmud, M., and Kaiser, M.S. (2021, January 10–11). Trust IoHT: A Trust Management Model for Internet of Healthcare Things. Proceedings of the International Conference on Data Science and Applications, Kolkata, India.10.1007/978-981-15-7561-7_3 ↗
63. MacDermott, A., Kendrick, P., Idowu, I., Ashall, M., and Shi, Q. (2019, January 7–21). Securing things in the healthcare internet of things. Proceedings of the Global IoT Summit (GIoTS), New York, NY, USA.10.1109/GIOTS.2019.8766383 ↗
64. Baccelli, E., Hahm, O., Günes, M., Wählisch, M., and Schmidt, T. (2013, January 22). OS for the IoT-goals, challenges, and solutions. Proceedings of the Interdisciplinaire sur la Sécurité Globale (WISG2013) Workshop, Troyes, France.
65. Chung, B., Kim, J., and Jeon, Y. (2016, January 19–21). On-demand security configuration for IoT devices. Proceedings of the International Conference on Information and Communication Technology Convergence (ICTC), Jeju, Korea.10.1109/ICTC.2016.7763373 ↗
66. The effect of IoT new features on security and privacy: New threats, existing solutions, and challenges yet to be solved10.1109/JIOT.2018.2847733 ↗
67. Foukia, N., Billard, D., and Solana, E. (2016, January 12–14). PISCES: A framework for privacy by design in IoT. Proceedings of the 14th Annual Conference on Privacy, Security and Trust (PST), Auckland, New Zealand.10.1109/PST.2016.7907022 ↗
68. Designing privacy-by-design
69. Internet of things-new security and privacy challenges10.1016/j.clsr.2009.11.008 ↗
70. Neuhaus, C., Polze, A., and Chowdhury, M.M. (2011). Survey on Healthcare IT Systems: Standards, Regulations and Security, University Potsdam.
71. Canada reviews PIPEDA
72. EUROHEALTH Programme
73. The proposed data protection regulation replacing directive 95/46/EC: A sound system for the protection of individuals10.1016/j.clsr.2012.01.011 ↗
74. Georgiou, D., and Lambrinoudakis, C. (2020). Compatibility of a security policy for a cloud-based healthcare system with the EU general data protection regulation (GDPR). Information, 11.10.20944/preprints202010.0577.v1 ↗
75. E-government in Australia: The challenge to privacy of personal information
76. Balkhair, A. (2021, October 01). Kingdom of Saudi Arabia The National eHealth Program. Available online: https://www.itu.int/ITU-D/cyb/events/2012/e-health/Nat_eH_Dev/Session%204/KSA-MOH-Presentation-SaudiArabia%20FINAL.pdf.
77. Zheng, M. (2021). Surveillance and disease control in COVID-19: Big data application in public health. Proceeding of the International Conference on Applications and Techniques in Cyber Security and Intelligence, Fuyang, China, 19–21 June 2021, Springer.10.1007/978-3-030-79197-1_82 ↗
78. Validation of a common data model for active safety surveillance research10.1136/amiajnl-2011-000376 ↗
79. International data flows and privacy: The conflict and its resolution10.1093/jiel/jgy044 ↗
80. Monitoring and securing the healthcare data harnessing IOT and blockchain technology
81. Standard tools for non-standard care: The values and scripts of a person-centred assessment protocol10.1177/1363459319851541 ↗
82. Validity of FitBit, Jawbone UP, Nike+ and other wearable devices for level and stair walking10.1016/j.gaitpost.2016.04.025 ↗