1. MediTrust
Secure Client Systems for Healthcare IT
to Protect Sensitive Data of Patients
Biljana Cubaleska, Hans Löhr, Ahmad-Reza Sadeghi,
Marcel Winandy
Ruhr-University Bochum
Ammar Alkassar, Christian Stüble
Sirrix AG security technologies
Med-e-Tel 2011, The International eHealth, Telemedicine and Health ICT Forum
Luxembourg, 6 - 8 April 2011

2. Simple E-Health Cloud

3. Advanced E-Health Cloud

4. Security Problem Areas
• Data Storage and Processing
- Data centers: unauthorized information leakage
- Platform security: vulnerable to malware
- Mobile storage (USB memory sticks)
• Infrastructure Management
- Cryptographic keys, certificates
- Hardware / software components
• Usability and User Experience
- Smartcard PIN (when unconscious?)
- Time consuming

5. Platform Security (Server)
unauthorized access
(read/modify)

6. Platform Security (Client)
authorized download
unauthorized access
(read/modify)

7. MediTrust: Project Goals
• Secure end-user platform
- Protect medical data from unauthorized access/manipulation
- Secure separation of data of different workflows
• Security infrastructure management
- Secure domains should span over several hardware nodes
- Central and easy management entity
• Usable security solution
- Transparent security protection
- No overhead in the normal workflow

8. Building Privacy Domains

9. Technology
• Security infrastructure: Trusted Virtual Domains
- TVD: coalition of trusted execution environments
- Transparent policy enforcement
- Secure communication
• Client platform security: TURAYA.TrustedDesktop
- Security Kernel
- Implements TVD security model on local platforms
- Isolated compartments (virtualization)
- Uses Trusted Computing functionality (TPM)

10. TVD Architecture
TVD
B
TVD
A
TVD
TVD
TVD
Proxy
A
Policy Master
A
VM
VM
Proxy
B
Cred
Turaya
Security
Kernel
Hardware
Security
Module
Hardware

11. TURAYA.TrustedDesktop
Main Security Features:
• Full hard-disk encryption
• Secure networking
• Transparent file encryption
• Secure graphical user interface

12. Secure Networking

13. Transparent File Encryption

14. Transparent File Encryption

15. Transparent File Encryption

16. Transparent File Encryption
!

17. Conclusion & Outlook
• Security infrastructure to protect sensitive data
• Based on TVDs and TURAYA.TrustedDesktop
• Field study (late 2011)
- 20 users (health professionals)
- Analysis of effectiveness and usability
• More information online:
MediTrust http://www.rubtrust-meditrust.de
Marcel Winandy
marcel.winandy@trust.rub.de