{"id":{"repo_id":"uiuc","oai_identifier":"oai:www.ideals.illinois.edu:2142/49712"},"canonical_url":"https://search.dev.ndltd.org/etd/uiuc/oai:www.ideals.illinois.edu:2142/49712","repository":{"repo_id":"uiuc","name":"University of Illinois - Urbana-Champaign","base_url":"https://www.ideals.illinois.edu/oai-pmh"},"display":{"title":"Privacy-preserving audit for broker-based health information exchange","abstract":"Item marked as restricted to the 'UIUC Users [automated]' Group (id=2) by Seth Robbins (robbins.sd@gmail.com) on 2014-05-30T17:09:48Z Item is restricted until 2016-05-30T17:09:03Z","abstract_html":"Item marked as restricted to the 'UIUC Users [automated]' Group (id=2) by Seth Robbins (robbins.sd@gmail.com) on 2014-05-30T17:09:48Z Item is restricted until 2016-05-30T17:09:03Z","abstract_has_math":false,"creators":["Oh, Se Eun"],"institution":"University of Illinois at Urbana-Champaign","degree_name":"M.S.","degree_level":"Thesis","degree_discipline":"Computer Science","degree_department":null,"school":null,"contributors":["Gunter, Carl A."],"advisors":[],"committee_chairs":[],"committee_members":[],"year":2014,"date_issued":"2014-05-30T17:06:02Z","date_published":"2014-05-30T17:06:02Z","updated_at":"2026-07-22T22:25:38Z","subjects":["Audit","Health information technology","Formal logic","Hierarchical identity based encryption"],"languages":["en"],"rights":["Copyright 2014 Se Eun Oh"],"rights_urls":[],"identifier_entries":[]},"links":{"outbound_url":"http://hdl.handle.net/2142/49712","outbound_label":"Handle","outbound_source":"dc:identifier"},"metadata_groups":[{"id":"people","label":"People","entries":[{"key":"dc:contributor","label":"Contributor","values":["Gunter, Carl A."]},{"key":"dc:creator","label":"Author","values":["Oh, Se Eun"]}]},{"id":"academic_context","label":"Academic Context","entries":[{"key":"dc:date","label":"Dc Date","values":["2014-05-30T17:06:02Z","2016-09-22T20:59:19Z","2014-05"]},{"key":"dc:type","label":"Dc Type","values":["text"]},{"key":"thesis:degree_discipline","label":"Discipline","values":["Computer Science"]},{"key":"thesis:degree_level","label":"Degree Level","values":["Thesis"]},{"key":"thesis:degree_name","label":"Degree Name","values":["M.S."]},{"key":"thesis:institution_name","label":"Thesis Institution Name","values":["University of Illinois at Urbana-Champaign"]}]},{"id":"subjects_keywords","label":"Subjects and Keywords","entries":[{"key":"dc:subject","label":"Dc Subject","values":["Audit","Health information technology","Formal logic","Hierarchical identity based encryption"]}]},{"id":"language_rights","label":"Language and Rights","entries":[{"key":"dc:language","label":"Dc Language","values":["en"]},{"key":"dc:rights","label":"Dc Rights","values":["Copyright 2014 Se Eun Oh"]}]},{"id":"identifiers","label":"Identifiers","entries":[{"key":"dc:identifier","label":"Identifier","values":["http://hdl.handle.net/2142/49712"]}]},{"id":"additional","label":"Additional Metadata","entries":[{"key":"dc:description","label":"Description","values":["Item marked as restricted to the 'UIUC Users [automated]' Group (id=2) by Seth Robbins (robbins.sd@gmail.com) on 2014-05-30T17:09:48Z Item is restricted until 2016-05-30T17:09:03Z","Restriction data tranferred 2014-07-01T11:39:01-05:00 Original Data Group with Access UIUC Users [automated] Release Date: 2016-05-30 12:09:03 UTC Reason: Author requested U of Illinois access only (OA after 2yrs) in Vireo ETD system","U of I Only Restriction Lifted for Item 49763 on 2016-09-22T20:59:19Z.","Health Information Technology has spurred the development of distributed systems known as Health Information Exchanges (HIEs) to enable the sharing of patient records between different health care organizations. Participants using these exchanges wish to disclose the minimum possible amount of information that is needed due to patient privacy concerns over sensitive medical information. Therefore, broker-based HIEs aim to keep limited information in exchange repositories and to ensure faster and more efficient patient care. It is essential to audit these exchanges carefully to minimize the risk of illegitimate data sharing. This thesis presents a design for auditing broker-based HIEs in a way that controls the information available in audit logs and regulates its release during audit investigations based on the requirements of applicable privacy policy. In our design, we utilized formal rules to verify access to HIE and adopted Hierarchical Identity-Based Encryption (HIBE) to support the staged release of data required for audits and a balance between automated and manual reviews. We test our methodology with a consolidated and centralized audit source that incorporates a standard for auditing HIEs called the Audit Trail and Node Authentication Profile (ATNA) protocol with supplementary audit documentation from HIE participants.","Item withdrawn by Mark Zulauf (zulauf@illinois.edu) on 2014-04-24T18:01:03Z Item was in collections: University of Illinois Theses & Dissertations (ID: 1) No. of bitstreams: 1 MSthesisOh.pdf: 3551094 bytes, checksum: 2074d713795518a395518a0dca554541 (MD5)","Made available in DSpace on 2014-05-30T17:06:02Z (GMT). No. of bitstreams: 2 Se Eun_Oh.pdf: 3551094 bytes, checksum: 2074d713795518a395518a0dca554541 (MD5) license.txt: 4059 bytes, checksum: dc79d131744594a8bdb24dacdc8df33d (MD5)"]},{"key":"dc:title","label":"Title","values":["Privacy-preserving audit for broker-based health information exchange"]}]}],"canonical_facts":{"dc:contributor":["Gunter, Carl A."],"dc:creator":["Oh, Se Eun"],"dc:date":["2014-05-30T17:06:02Z","2016-09-22T20:59:19Z","2014-05"],"dc:description":["Item marked as restricted to the 'UIUC Users [automated]' Group (id=2) by Seth Robbins (robbins.sd@gmail.com) on 2014-05-30T17:09:48Z Item is restricted until 2016-05-30T17:09:03Z","Restriction data tranferred 2014-07-01T11:39:01-05:00 Original Data Group with Access UIUC Users [automated] Release Date: 2016-05-30 12:09:03 UTC Reason: Author requested U of Illinois access only (OA after 2yrs) in Vireo ETD system","U of I Only Restriction Lifted for Item 49763 on 2016-09-22T20:59:19Z.","Health Information Technology has spurred the development of distributed systems known as Health Information Exchanges (HIEs) to enable the sharing of patient records between different health care organizations. Participants using these exchanges wish to disclose the minimum possible amount of information that is needed due to patient privacy concerns over sensitive medical information. Therefore, broker-based HIEs aim to keep limited information in exchange repositories and to ensure faster and more efficient patient care. It is essential to audit these exchanges carefully to minimize the risk of illegitimate data sharing. This thesis presents a design for auditing broker-based HIEs in a way that controls the information available in audit logs and regulates its release during audit investigations based on the requirements of applicable privacy policy. In our design, we utilized formal rules to verify access to HIE and adopted Hierarchical Identity-Based Encryption (HIBE) to support the staged release of data required for audits and a balance between automated and manual reviews. We test our methodology with a consolidated and centralized audit source that incorporates a standard for auditing HIEs called the Audit Trail and Node Authentication Profile (ATNA) protocol with supplementary audit documentation from HIE participants.","Item withdrawn by Mark Zulauf (zulauf@illinois.edu) on 2014-04-24T18:01:03Z Item was in collections: University of Illinois Theses & Dissertations (ID: 1) No. of bitstreams: 1 MSthesisOh.pdf: 3551094 bytes, checksum: 2074d713795518a395518a0dca554541 (MD5)","Made available in DSpace on 2014-05-30T17:06:02Z (GMT). No. of bitstreams: 2 Se Eun_Oh.pdf: 3551094 bytes, checksum: 2074d713795518a395518a0dca554541 (MD5) license.txt: 4059 bytes, checksum: dc79d131744594a8bdb24dacdc8df33d (MD5)"],"dc:identifier":["http://hdl.handle.net/2142/49712"],"dc:language":["en"],"dc:rights":["Copyright 2014 Se Eun Oh"],"dc:subject":["Audit","Health information technology","Formal logic","Hierarchical identity based encryption"],"dc:title":["Privacy-preserving audit for broker-based health information exchange"],"dc:type":["text"],"thesis:degree_discipline":["Computer Science"],"thesis:degree_level":["Thesis"],"thesis:degree_name":["M.S."],"thesis:institution_name":["University of Illinois at Urbana-Champaign"]},"updated_at":"2026-07-22T22:25:38Z"}