论文标题
MHealth和UHealth Systems的安全性和隐私：系统地图研究
Security and Privacy for mHealth and uHealth Systems: a Systematic Mapping Study
论文作者
论文摘要
移动健康（MHealth）和无处不在的健康（UHealth）系统的采用越来越多，可以使用手持设备和嵌入式传感器来提供各种医疗服务。但是，M/UHealth系统面临与数据安全性和隐私相关的重大挑战，以提高此类系统的普遍性。这项研究旨在系统地识别，分类，比较和评估M/UHealth Systems的安全性和隐私性的最先进。我们根据365个定性选择的研究进行了系统的映射研究（SMS），以（i）对已发表的研究的类型，频率和人口进行分类，以及（ii）合成和分类研究主题，（iii）反复挑战，（iv）重要解决方案（即，研究结果）及其（v）及其（v）及其（v）及其（v）报告了评估（i.e.ee e.ee）。结果表明，现有的关于M/UHealth系统安全性和隐私的研究主要集中于精选的控制家庭（符合NIST800-53），系统和信息的保护，访问控制，身份验证，个人参与和隐私权授权。相比之下，数据治理，安全和隐私政策和计划管理领域的代表性不足，尽管这些领域对于使用M/UHealth系统的大多数组织至关重要。大多数研究提出了有限验证的新解决方案，反映了对现实世界中M/UHealth的安全性和隐私的评估。 M/UHealth安全和隐私的经验研究，开发和验证仍然是初期的，这可能阻止从业者容易采用文献解决方案。这SMS促进了知识转移，使研究人员和从业人员能够为新兴和下一代M/UHealth系统的工程安全和隐私。
An increased adoption of mobile health (mHealth) and ubiquitous health (uHealth) systems empower users with handheld devices and embedded sensors for a broad range of healthcare services. However, m/uHealth systems face significant challenges related to data security and privacy that must be addressed to increase the pervasiveness of such systems. This study aims to systematically identify, classify, compare, and evaluate state-of-the-art on security and privacy of m/uHealth systems. We conducted a systematic mapping study (SMS) based on 365 qualitatively selected studies to (i) classify the types, frequency, and demography of published research and (ii) synthesize and categorize research themes, (iii) recurring challenges, (iv) prominent solutions (i.e., research outcomes) and their (v) reported evaluations (i.e., practical validations). Results suggest that the existing research on security and privacy of m/uHealth systems primarily focuses on select group of control families (compliant with NIST800-53), protection of systems and information, access control, authentication, individual participation, and privacy authorisation. In contrast, areas of data governance, security and privacy policies, and program management are under-represented, although these are critical to most of the organizations that employ m/uHealth systems. Most research proposes new solutions with limited validation, reflecting a lack of evaluation of security and privacy of m/uHealth in the real world. Empirical research, development, and validation of m/uHealth security and privacy is still incipient, which may discourage practitioners from readily adopting solutions from the literature. This SMS facilitates knowledge transfer, enabling researchers and practitioners to engineer security and privacy for emerging and next generation of m/uHealth systems.
