ZTCloudGuard: Zero trust context-aware access management framework to avoid medical errors in the era of generative AI and cloud-based health information ecosystems

Simple item page
dc.contributor.authorAl-hammuri, Khalid
dc.contributor.authorGebali, Fayez
dc.contributor.authorKanan, Awos
dc.date.accessioned2024-10-10T17:23:08Z
dc.date.available2024-10-10T17:23:08Z
dc.date.issued2024
dc.description.abstractManaging access between large numbers of distributed medical devices has become a crucial aspect of modern healthcare systems, enabling the establishment of smart hospitals and telehealth infrastructure. However, as telehealth technology continues to evolve and Internet of Things (IoT) devices become more widely used, they are also increasingly exposed to various types of vulnerabilities and medical errors. In healthcare information systems, about 90% of vulnerabilities emerge from medical error and human error. As a result, there is a need for additional research and development of security tools to prevent such attacks. This article proposes a zero-trust-based context-aware framework for managing access to the main components of the cloud ecosystem, including users, devices, and output data. The main goal and benefit of the proposed framework is to build a scoring system to prevent or alleviate medical errors while using distributed medical devices in cloud-based healthcare information systems. The framework has two main scoring criteria to maintain the chain of trust. First, it proposes a critical trust score based on cloud-native microservices for authentication, encryption, logging, and authorizations. Second, a bond trust scoring system is created to assess the real-time semantic and syntactic analysis of attributes stored in a healthcare information system. The analysis is based on a pre-trained machine learning model that generates the semantic and syntactic scores. The framework also takes into account regulatory compliance and user consent in the creation of the scoring system. The advantage of this method is that it applies to any language and adapts to all attributes, as it relies on a language model, not just a set of predefined and limited attributes. The results show a high F1 score of 93.5%, which proves that it is valid for detecting medical errors.
dc.description.reviewstatusReviewed
dc.description.scholarlevelFaculty
dc.description.sponsorshipThis research was supported by a grant from the National Research Council of Canada (NRC) through the Collaborative Research and Development Initiative.
dc.identifier.citationAl-hammuri, K., Gebali, F., & Kanan, A. (2024). ZTCloudGuard: Zero trust context-aware access management framework to avoid medical errors in the era of generative AI and cloud-based health information ecosystems. AI, 5(3), Article 3. https://doi.org/10.3390/ai5030055
dc.identifier.urihttps://doi.org/10.3390/ai5030055
dc.identifier.urihttps://hdl.handle.net/1828/20518
dc.language.isoen
dc.publisherAI
dc.rightsAttribution CC BY
dc.rights.urihttps://creativecommons.org/licenses/by/4.0/
dc.subjectaccess management
dc.subjectcloud
dc.subjectdistributed medical devices
dc.subjecthealth information system
dc.subjectIoT
dc.subjectmedical errors
dc.subjectzero-trust
dc.subject.departmentDepartment of Electrical and Computer Engineering
dc.titleZTCloudGuard: Zero trust context-aware access management framework to avoid medical errors in the era of generative AI and cloud-based health information ecosystems
dc.typeArticle

Files

Original bundle
Now showing 1 - 1 of 1
Thumbnail Image
Name:
al-hammuri_khalid_ai_2024.pdf
Size:
2.62 MB
Format:
Adobe Portable Document Format
Download

Collections

Faculty and Staff Publications
 
University of Victoria Libraries

We acknowledge and respect the Lək̓ʷəŋən (Songhees and Esquimalt) Peoples on whose territory the university stands, and the Lək̓ʷəŋən and W̱SÁNEĆ Peoples whose historical relationships with the land continue to this day.