Security methods and approaches for internal and external network hospital information systems with single sign-on

Hospital information systems are vast and very complex, and include a variety of services. They have become a necessity nowadays, both due to the value added services they provide and to their penetration in the healthcare market. Yet, there is a variety of security issues that need to be met and overcome in order to build robust hospital information systems. This paper suggests several security measures in order to enhance security of the sensitive medical data both in an intranet and an extranet environment, and to provide value-added services for efficient health information management. The authors propose an architecture that enables the integration of such security measures in a HIS, especially with the use of SSO, which can cover a wide range of applications.