{"id":{"repo_id":"uiuc","oai_identifier":"oai:www.ideals.illinois.edu:2142/44212"},"canonical_url":"https://search.dev.ndltd.org/etd/uiuc/oai:www.ideals.illinois.edu:2142/44212","repository":{"repo_id":"uiuc","name":"University of Illinois - Urbana-Champaign","base_url":"https://www.ideals.illinois.edu/oai-pmh"},"display":{"title":"Implementing health information exchange with searchable encryption","abstract":"Health Information Exchange (HIE) is an infrastructure that facilitates exchange of electronic health records between healthcare organizations. Because medical records are highly sensitive data subject to various federal and local regulation, in addition to company policies, it is imperative to provide privacy and security guarantees, as well as audit trail. In this thesis, we consider the problem of providing the functionality of a HIE composed of a distributed collection of providers (sources) who contribute to a centralized repository represented by a cryptographic file system, and suggest an implementation that demonstrates its feasibility. While security-enhanced file systems have been extensively studied before, more recent research establishes a rigorous standard of formally provable security properties. However, since encryption imposes overhead and loss of functionality, we propose a novel cryptographic construction called BlindStorage that enables keyword search capability over encrypted indices. The major contribution of this work is the demonstration how an advanced encryption technique can be deployed in a context close to the requirements for a standards-based HIE. We emphasize practical aspect of our design by using Web Services-based transactions that closely follow a subset of the state-of-the-art Cross-Enterprise Document Sharing-b (XDS.b) standard in the architecture. Document Repository and Document Registry gateways are being used to interface between hospital-facing Web Services and the central BlindStorage parts of the network, so that hospital applications can use the established XDS.b exchange standard without being affected by the core BlindStorage-based implementation.","abstract_html":"Health Information Exchange (HIE) is an infrastructure that facilitates exchange of electronic health records between healthcare organizations. Because medical records are highly sensitive data subject to various federal and local regulation, in addition to company policies, it is imperative to provide privacy and security guarantees, as well as audit trail. In this thesis, we consider the problem of providing the functionality of a HIE composed of a distributed collection of providers (sources) who contribute to a centralized repository represented by a cryptographic file system, and suggest an implementation that demonstrates its feasibility. While security-enhanced file systems have been extensively studied before, more recent research establishes a rigorous standard of formally provable security properties. However, since encryption imposes overhead and loss of functionality, we propose a novel cryptographic construction called BlindStorage that enables keyword search capability over encrypted indices. The major contribution of this work is the demonstration how an advanced encryption technique can be deployed in a context close to the requirements for a standards-based HIE. We emphasize practical aspect of our design by using Web Services-based transactions that closely follow a subset of the state-of-the-art Cross-Enterprise Document Sharing-b (XDS.b) standard in the architecture. Document Repository and Document Registry gateways are being used to interface between hospital-facing Web Services and the central BlindStorage parts of the network, so that hospital applications can use the established XDS.b exchange standard without being affected by the core BlindStorage-based implementation.","abstract_has_math":false,"creators":["Svecs, Igors"],"institution":"University of Illinois at Urbana-Champaign","degree_name":"M.S.","degree_level":"Thesis","degree_discipline":"Computer Science","degree_department":null,"school":null,"contributors":["Gunter, Carl A."],"advisors":[],"committee_chairs":[],"committee_members":[],"year":2013,"date_issued":"2013-05-24T21:54:22Z","date_published":"2013-05-24T21:54:22Z","updated_at":"2026-07-22T22:25:33Z","subjects":["Cryptography","Healthcare","Searchable Encryption","Health Information Exchange"],"languages":["en"],"rights":["Copyright 2013 Igors Svecs"],"rights_urls":[],"identifier_entries":[]},"links":{"outbound_url":"http://hdl.handle.net/2142/44212","outbound_label":"Handle","outbound_source":"dc:identifier"},"metadata_groups":[{"id":"people","label":"People","entries":[{"key":"dc:contributor","label":"Contributor","values":["Gunter, Carl A."]},{"key":"dc:creator","label":"Author","values":["Svecs, Igors"]}]},{"id":"academic_context","label":"Academic Context","entries":[{"key":"dc:date","label":"Dc Date","values":["2013-05-24T21:54:22Z","2013-05"]},{"key":"dc:type","label":"Dc Type","values":["text"]},{"key":"thesis:degree_discipline","label":"Discipline","values":["Computer Science"]},{"key":"thesis:degree_level","label":"Degree Level","values":["Thesis"]},{"key":"thesis:degree_name","label":"Degree Name","values":["M.S."]},{"key":"thesis:institution_name","label":"Thesis Institution Name","values":["University of Illinois at Urbana-Champaign"]}]},{"id":"subjects_keywords","label":"Subjects and Keywords","entries":[{"key":"dc:subject","label":"Dc Subject","values":["Cryptography","Healthcare","Searchable Encryption","Health Information Exchange"]}]},{"id":"language_rights","label":"Language and Rights","entries":[{"key":"dc:language","label":"Dc Language","values":["en"]},{"key":"dc:rights","label":"Dc Rights","values":["Copyright 2013 Igors Svecs"]}]},{"id":"identifiers","label":"Identifiers","entries":[{"key":"dc:identifier","label":"Identifier","values":["http://hdl.handle.net/2142/44212"]}]},{"id":"additional","label":"Additional Metadata","entries":[{"key":"dc:description","label":"Description","values":["Health Information Exchange (HIE) is an infrastructure that facilitates exchange of electronic health records between healthcare organizations. Because medical records are highly sensitive data subject to various federal and local regulation, in addition to company policies, it is imperative to provide privacy and security guarantees, as well as audit trail. In this thesis, we consider the problem of providing the functionality of a HIE composed of a distributed collection of providers (sources) who contribute to a centralized repository represented by a cryptographic file system, and suggest an implementation that demonstrates its feasibility. While security-enhanced file systems have been extensively studied before, more recent research establishes a rigorous standard of formally provable security properties. However, since encryption imposes overhead and loss of functionality, we propose a novel cryptographic construction called BlindStorage that enables keyword search capability over encrypted indices. The major contribution of this work is the demonstration how an advanced encryption technique can be deployed in a context close to the requirements for a standards-based HIE. We emphasize practical aspect of our design by using Web Services-based transactions that closely follow a subset of the state-of-the-art Cross-Enterprise Document Sharing-b (XDS.b) standard in the architecture. Document Repository and Document Registry gateways are being used to interface between hospital-facing Web Services and the central BlindStorage parts of the network, so that hospital applications can use the established XDS.b exchange standard without being affected by the core BlindStorage-based implementation.","Item withdrawn by Mark Zulauf (zulauf@illinois.edu) on 2013-04-23T21:20:13Z Item was in collections: University of Illinois Theses & Dissertations (ID: 1) No. of bitstreams: 1 Svecs_Igors.pdf: 1079660 bytes, checksum: a45d7485cd1484ce27369d54fb0c7381 (MD5)","Made available in DSpace on 2013-05-24T21:54:22Z (GMT). No. of bitstreams: 2 Igors_Svecs.pdf: 1079660 bytes, checksum: a45d7485cd1484ce27369d54fb0c7381 (MD5) license.txt: 4059 bytes, checksum: 5c1ab9b2ceefd461a8e6491262345148 (MD5)"]},{"key":"dc:title","label":"Title","values":["Implementing health information exchange with searchable encryption"]}]}],"canonical_facts":{"dc:contributor":["Gunter, Carl A."],"dc:creator":["Svecs, Igors"],"dc:date":["2013-05-24T21:54:22Z","2013-05"],"dc:description":["Health Information Exchange (HIE) is an infrastructure that facilitates exchange of electronic health records between healthcare organizations. Because medical records are highly sensitive data subject to various federal and local regulation, in addition to company policies, it is imperative to provide privacy and security guarantees, as well as audit trail. In this thesis, we consider the problem of providing the functionality of a HIE composed of a distributed collection of providers (sources) who contribute to a centralized repository represented by a cryptographic file system, and suggest an implementation that demonstrates its feasibility. While security-enhanced file systems have been extensively studied before, more recent research establishes a rigorous standard of formally provable security properties. However, since encryption imposes overhead and loss of functionality, we propose a novel cryptographic construction called BlindStorage that enables keyword search capability over encrypted indices. The major contribution of this work is the demonstration how an advanced encryption technique can be deployed in a context close to the requirements for a standards-based HIE. We emphasize practical aspect of our design by using Web Services-based transactions that closely follow a subset of the state-of-the-art Cross-Enterprise Document Sharing-b (XDS.b) standard in the architecture. Document Repository and Document Registry gateways are being used to interface between hospital-facing Web Services and the central BlindStorage parts of the network, so that hospital applications can use the established XDS.b exchange standard without being affected by the core BlindStorage-based implementation.","Item withdrawn by Mark Zulauf (zulauf@illinois.edu) on 2013-04-23T21:20:13Z Item was in collections: University of Illinois Theses & Dissertations (ID: 1) No. of bitstreams: 1 Svecs_Igors.pdf: 1079660 bytes, checksum: a45d7485cd1484ce27369d54fb0c7381 (MD5)","Made available in DSpace on 2013-05-24T21:54:22Z (GMT). No. of bitstreams: 2 Igors_Svecs.pdf: 1079660 bytes, checksum: a45d7485cd1484ce27369d54fb0c7381 (MD5) license.txt: 4059 bytes, checksum: 5c1ab9b2ceefd461a8e6491262345148 (MD5)"],"dc:identifier":["http://hdl.handle.net/2142/44212"],"dc:language":["en"],"dc:rights":["Copyright 2013 Igors Svecs"],"dc:subject":["Cryptography","Healthcare","Searchable Encryption","Health Information Exchange"],"dc:title":["Implementing health information exchange with searchable encryption"],"dc:type":["text"],"thesis:degree_discipline":["Computer Science"],"thesis:degree_level":["Thesis"],"thesis:degree_name":["M.S."],"thesis:institution_name":["University of Illinois at Urbana-Champaign"]},"updated_at":"2026-07-22T22:25:33Z"}