Daniel Masys1, Dixie Baker, Amy Butros, Kevin E Cowles. 1. Biomedical Informatics, School of Medicine, University of California, San Diego, La Jolla, California 92093-0602, USA. dmasys@ucsd.edu
Abstract
OBJECTIVE: The Patient-Centered Access to Secure Systems Online (PCASSO) project is designed to apply state-of-the-art-security to the communication of clinical information over the Internet. DESIGN: The authors report the legal and regulatory issues associated with deploying the system, and results of its use by providers and patients. Human subject protection concerns raised by the Institutional Review Board focused on three areas-unauthorized access to information by persons other than the patient; the effect of startling or poorly understood information; and the effect of patient access to records on the record-keeping behavior of providers. MEASUREMENTS: Objective and subjective measures of security and usability were obtained. RESULTS: During its initial deployment phase, the project enrolled 216 physicians and 41 patients; of these, 68 physicians and 26 patients used the system one or more times. The system performed as designed, with no unauthorized information access or intrusions detected. Providers rated the usability of the system low because of the complexity of the secure login and other security features and restrictions limiting their access to those patients with whom they had a professional relationship. In contrast, patients rated the usability and functionality of the system favorably. CONCLUSION: High-assurance systems that serve both patients and providers will need to address differing expectations regarding security and ease of use.
OBJECTIVE: The Patient-Centered Access to Secure Systems Online (PCASSO) project is designed to apply state-of-the-art-security to the communication of clinical information over the Internet. DESIGN: The authors report the legal and regulatory issues associated with deploying the system, and results of its use by providers and patients. Human subject protection concerns raised by the Institutional Review Board focused on three areas-unauthorized access to information by persons other than the patient; the effect of startling or poorly understood information; and the effect of patient access to records on the record-keeping behavior of providers. MEASUREMENTS: Objective and subjective measures of security and usability were obtained. RESULTS: During its initial deployment phase, the project enrolled 216 physicians and 41 patients; of these, 68 physicians and 26 patients used the system one or more times. The system performed as designed, with no unauthorized information access or intrusions detected. Providers rated the usability of the system low because of the complexity of the secure login and other security features and restrictions limiting their access to those patients with whom they had a professional relationship. In contrast, patients rated the usability and functionality of the system favorably. CONCLUSION: High-assurance systems that serve both patients and providers will need to address differing expectations regarding security and ease of use.
Authors: V Jagannathan; Y V Reddy; K Srinivas; R Karinthi; R Shank; S Reddy; G Almasi; T Davis; R Raman; S Qiu Journal: Proc Annu Symp Comput Appl Med Care Date: 1995
Authors: S Trent Rosenbloom; Titus L Daniels; Thomas R Talbot; Taylor McClain; Robert Hennes; Shane Stenner; Sue Muse; Jim Jirjis; Gretchen Purcell Jackson Journal: J Am Med Inform Assoc Date: 2011-12-01 Impact factor: 4.497
Authors: Maria T Britto; Holly B Jimison; Jennifer Knopf Munafo; Jennifer Wissman; Michelle L Rogers; William Hersh Journal: J Am Med Inform Assoc Date: 2009-06-30 Impact factor: 4.497