Interoperability, Safety and Security in IoT. Third International Conference, InterIoT 2017, and Fourth International Conference, SaSeIot 2017, Valencia, Spain, November 6-7, 2017, Proceedings

Research Article

Privacy Preserving and Resilient Cloudified IoT Architecture to Support eHealth Systems

Download
212 downloads
  • @INPROCEEDINGS{10.1007/978-3-319-93797-7_15,
        author={Jarkko Paavola and Jani Ekqvist},
        title={Privacy Preserving and Resilient Cloudified IoT Architecture to Support eHealth Systems},
        proceedings={Interoperability, Safety and Security in IoT. Third International Conference, InterIoT 2017, and Fourth International Conference, SaSeIot 2017, Valencia, Spain, November 6-7, 2017, Proceedings},
        proceedings_a={INTERIOT \& SASEIOT},
        year={2018},
        month={7},
        keywords={IoT Cloud eHealth Information security Resiliency Privacy Tokenization},
        doi={10.1007/978-3-319-93797-7_15}
    }
    
  • Jarkko Paavola
    Jani Ekqvist
    Year: 2018
    Privacy Preserving and Resilient Cloudified IoT Architecture to Support eHealth Systems
    INTERIOT & SASEIOT
    Springer
    DOI: 10.1007/978-3-319-93797-7_15
Jarkko Paavola1,*, Jani Ekqvist1,*
  • 1: Turku University of Applied Sciences
*Contact email: jarkko.paavola@turkuamk.fi, jani.ekqvist@turkuamk.fi

Abstract

Significant improvement in eHealth services in both quality and financial points of view are possible if public cloud infrastructures could be utilized in storing and processing personal health information (PHI) from IoT devices monitoring and collecting data from persons. The challenge is that personal health records are highly sensitive and health related organization are not willing to trust the cybersecurity of public clouds. Another challenge is that strict regulation is in place regarding the physical location of PHI. This paper addresses these issues by proposing tokenization architecture and crypto-implementation for personal identity number (PIN). This will allow the storage and processing of the personal health information (PII) in the public cloud as the data cannot be identified to a specific person. The proposal follows the general data protection regulation (GDPR) by offering secure and highly resilient architecture for the separation of health data and person identity.