Secure Patient Data Management in Small Healthcare Businesses: An Evaluation of Storage Solutions

Sammanfattning

Secure electronic signing systems require strong guarantees of identity, integrity and non-repudiation, while also supporting auditability to comply with legal requirements. This master thesis presents the design, implementation and evaluation of an identity based system for the storage and signing of patient data using local storage solutions combined with cloud services and security controls. The proposed system integrates centralized identity management with Multi-Factor Authentication (MFA) and Role Based Access Control (RBAC) and cryptographic functionality provided through cloud services. Network security is enforced through firewall rules and Virtual Private Network (VPN) based access control, while monitoring and logging services provide the ability to audit the access and use of the system. Evaluation of the system demonstrates that the system successfully enforces authentication and RBAC authorization, preventing sensitive data exposure or change during the process of signing and storing of data. The results indicate that the system is technically viable of meeting its regulatory objectives.