Blockchain innovation for consent self-management in health information exchanges

2023 | Decision Support Systems | Citations: 0

Authors: Anderson, Chad; Carvalho, Arthur; Kaul, Mala; Merhout, Jeffrey W.

Abstract: With the increasing digitalization of health data, patients need to make informe ... Expand

Abstract: With the increasing digitalization of health data, patients need to make informed decisions about the online sharing of their protected health information. This necessitates a robust technical infrastructure that enables patients to self-manage consent and the trusted exchange of this information across sharing entities. Unfortu­ nately, current health information exchange systems in the U.S. are limited in both these regards. While there is recent work on digital patient consent management, there is limited work that provides effective solutions for patient self-management of consent. Further, interoperability issues in the way health information exchanges are currently architected and differences in regulations across localities exacerbate the challenges of consent man­ agement. In this research, we survey potential patients' willingness to self-manage healthcare-related consent. Having established the desire for consent self-management, we propose a solution that enables the seamless sharing of patient consent across different healthcare providers and health information exchanges. Specifically, we use a rigorous design science approach to create a blockchain-based, self-managed patient consent system and we evaluate the design through an instantiated prototype. The results of our study should be useful to researchers in healthcare information management as well as to practitioners designing consent management systems. Our research contributes to design science research with an innovative, rigorously evaluated, design principles-based artifact that addresses a critical problem of sharing protected health information. Collapse

Topics: blockchain mobile application information exchange privacy Ethereum

Methods: survey design artifact design science design process design principle

Theories: evidence-based design

Design of a Novel Information System for Semi-automated Management of Cybersecurity in Industrial Control Systems

2023 | ACM Transactions on Management Information Systems | Citations: 0

Authors: Ameri, Kimia; Hempel, Michael; Sharif, Hamid; Lopez, Juan; Perumalla, Kalyan

Abstract: There is an urgent need in many critical infrastructure sectors, including the e ... Expand

Abstract: There is an urgent need in many critical infrastructure sectors, including the energy sector, for attaining detailed insights into cybersecurity features and compliance with cybersecurity requirements related to their Operational Technology (OT) deployments. Frequent feature changes of OT devices interfere with this need, posing a great risk to customers. One effective way to address this challenge is via a semi-automated cyber-physical security assurance approach, which enables verification and validation of the OT device cybersecurity claims against actual capabilities, both pre- and post-deployment. To realize this approach, this article presents new methodology and algorithms to automatically identify cybersecurity-related claims expressed in natural language form in ICS device documents. We developed an identification process that employs natural language processing (NLP) techniques with the goal of semi-automated vetting of detected claims against their device implementation. We also present our novel NLP components for verifying feature claims against relevant cybersecurity requirements. The verification pipeline includes components such as automated vendor identification, device document curation, feature claim identification utilizing sentiment analysis for conflict resolution, and reporting of features that are claimed to be supported or indicated as unsupported. Our novel matching engine represents the first automated information system available in the cybersecurity domain that directly aids the generation of ICS compliance reports. Collapse

Topics: IT security database system website Python electronic authentication

Methods: computational algorithm sentiment analysis natural language processing BERT language model

Are Information Security Practices Driven by the Likelihood and potential Impact of Security Events?

2023 | Americas Conference on Information Systems | Citations: 0

Authors: Batra, Gunjan; Saeed, Khawaja; Zafar, Humayun

Abstract: Organizations have opened up various digital interfaces through which customers ... Expand

Abstract: Organizations have opened up various digital interfaces through which customers gain access to online services. Digital interaction between the organization and its customers increases security risks. This study examines how the risk profile of customers defined by their perception of the likelihood and potential impact of a security incident is related to their information security behaviors. We collected data in the context of online banking services to empirically evaluate this research question. The results showed that individuals with low likelihood and high impact perceptions of security incidents had authentication and device security practices significantly higher than that of other groups. Surprisingly, there was no difference in security practices across groups with high likelihood/high impact and low likelihood/low impact perceptions of security incidents. Implications of these results are discussed along with ways we plan to extend this research study. Collapse

Topics: electronic authentication cybersecurity behavior password online banking information security practice

Methods: cluster analysis survey exploratory factor analysis data transformation descriptive statistic

Architecture and Design of National Digital Identity Platforms

2023 | European Conference On Information Systems | Citations: 0

Authors: Choudhary, Prashant Kumar; Kaushik, Anjali

Abstract: Digital identity systems are mandated to be established by all countries as par ... Expand

Abstract: Digital identity systems are mandated to be established by all countries as part United Nations Sustainable Developmental Goals (SDG 16.9) However, globally, over a billion people are still without a digital identity. Digital identity projects, across continents, have achieved underwhelming results and are facing implementation hurdles. This research examines the architecture and design of digital identity platforms which enable achieving platform objectives. Design science approach of General Morphological Analysis (GMA) has been employed for such examination. Cases of both-a successful and another moderately successful digital identity program implementation have been examined to validate testable propositions regrading optimal architecture/design aspects of such platforms. Research learnings are relevant for policy makers and technology designers to incorporate such platform design aspects in respective national digital identity initiatives. In addition, this research contributes to design science body of knowledge by empirical generalization of a configurable template and design factors in respect of digital identity platforms. Collapse

Topics: digital platform application programming interface systems design innovation management open source

Methods: qualitative interview design science case study personal interview design theory

Managing Organizational Cyber Security – The Distinct Role of Internalized Responsibility

2023 | HICSS | Citations: 0

Authors: Faltermaier, Stefan; Strunk, Kim; Obermeier, Michaela; Fiedler, Marina

Abstract: Desirable user behavior is key to cyber security in organizations. However, a co ... Expand

Abstract: Desirable user behavior is key to cyber security in organizations. However, a comprehensive overview on how to manage user behavior effectively, in order to support organizational cyber security, is missing. Building on extant research to identify central components of organizational cyber security management and on a qualitative analysis based on 20 semi-structured interviews with users and IT-Managers of a European university, we present an integrated model on this issue. We contribute to understanding the interrelations of namely user awareness, user IT-capabilities, organizational IT, user behavior, and especially internalized responsibility and relation to organizational cyber security. Collapse

Topics: IT security user behavior information technology capability IT security defense password

Methods: qualitative interview personal interview qualitative coding grounded theory case study

Connecting the Dots: An Assessment of Cyber-risks in Networked Building and Municipal Infrastructure Systems

2023 | HICSS | Citations: 0

Authors: Francik, Paul; Ashley, Travis; Poplawski, Michael

Abstract: The buildings and city streets we walk down are changing. Driven by various data ... Expand

Abstract: The buildings and city streets we walk down are changing. Driven by various data-driven use cases, there is increased interest in networking and integrating lighting and other building systems (e.g., heating, ventilation, and air conditioning (HVAC), security, scheduling) that were previously not internet-facing, and equipping them with sensors that collect information about their environment and the people that inhabit it. These data-enabled systems can potentially deliver improved occupant and resident experiences and help meet the U.S. Department of Energy (DOE) national energy and carbon reduction goals. Deploying connected devices new to being networked, however, is not without its challenges. This paper explores tools available to system designers and integrators that facilitate a cybersecurity landscape assessment – or more specifically the identification of threats, vulnerabilities, and adversarial behaviors that could be used against these networked systems. These assessments can help stakeholders shift security prioritization proactively toward the beginning of the development process. Collapse

Topics: IT security operating system internet technology Python electronic authentication

Designing a cross-organizational identity management system: Utilizing SSI for the certification of retailer attributes

2023 | Electronic Markets | Citations: 0

Authors: Guggenberger, Tobias; Kühne, Daniela; Schlatt, Vincent; Urbach, Nils

Abstract: The introduction of blockchain offers new opportunities to rethink enterprise id ... Expand

Abstract: The introduction of blockchain offers new opportunities to rethink enterprise identity management. Recently, a new concept has emerged in the blockchain community called self-sovereign identity. Self-sovereign identity combines several existing decentralized identity management approaches, promising new ways to promote more convenient, connected, and secure identity services for the private and public sector. Nevertheless, research in this area is still in its infancy. Most of the very few articles focus either on the opportunities self-sovereign identity might offer or on very specific technical features. Studies on real-world applications of organizations using modern self-sovereign identity implementations and design theory are very rare. To fill this gap, we follow the design science research approach to design, implement, and evaluate a self-sovereign identity system to present tax attributes of online retailers. We present four design principles and conclude that the use of self-sovereign identity and blockchain offers opportunities to improve verification processes. Collapse

Topics: blockchain Hyperledger electronic commerce government system privacy

Methods: design principle design artifact qualitative interview design theory literature study

Continuous improvement of information security management: an organisational learning perspective

2023 | European Journal of Information Systems | Citations: 0

Authors: Ghahramani, Fereshteh; Yazdanmehr, Adel; Chen, Daniel; Wang, Jingguo

Abstract: This study explores ways to empower organisations to continuously improve their ... Expand

Abstract: This study explores ways to empower organisations to continuously improve their information security management (ISM). Drawing upon the dynamic capabilities approach, we investigated the mechanism wherein absorptive capacity has an effect. We found that absorptive capacity affects an organisation’s continuous improvement of ISM, with its effect mediated through an organisation’s adaptability to information security threats. In addition, the effect of absorptive capacity on adaptability is contingent upon the organisation’s competitive pressure, which enhances the mediating effect of adaptability. We tested our research model using survey data collected from 130 US-based managers familiar with information security management in their organisations. Theoretical and practical implications of the study are discussed. Collapse

Topics: data security information security management absorptive capacity IT security anonymity

Methods: survey statistical hypothesis test structural equation modeling conceptual modelling ordinary least square

Theories: dynamic capabilities theory

The Impact of Social Media on Digital Guanxi Development in the Chinese Workplace

2023 | HICSS | Citations: 0

Authors: Hong, J.; Tan, B.; Ng, E.; Davison, R.; Wong, L.

Abstract: Organisational employees increasingly rely on various social media to develop g ... Expand

Abstract: Organisational employees increasingly rely on various social media to develop guanxi online, resulting in the potentially huge value of identifying how social media can contribute to guanxi development in the workplace. In this study of digital guanxi development within Chinese organisations, we examine the role of different types of social media on the development of guanxi and its various dimensions. Based on an exploratory case study, we propose a theoretical framework that illustrates two mechanisms by which social media influence the development of digital guanxi at work. Our preliminary findings suggest that enterprise social media and public social media provide and reinforce instrumental and affective values, respectively, thereby facilitating guanxi development in the workplace. Collapse

Topics: social media electronic business electronic authentication chat room innovation management

Methods: qualitative interview qualitative coding case study theory development personal interview

An Architecture Using Payment Channel Networks for Blockchain-based Wi-Fi Sharing

2023 | ACM Transactions on Management Information Systems | Citations: 0

Authors: Janiesch, Christian; Fischer, Marcus; Imgrund, Florian; Hofmann, Adrian; Winkelmann, Axel

Abstract: Enabling Internet access while taking load of mobile networks, the concept of Wi ... Expand

Abstract: Enabling Internet access while taking load of mobile networks, the concept of Wi-Fi sharing holds much potential. While trust-based concepts require a trusted intermediary and cannot prevent malicious behavior, for example, conducted through fake profiles, security-based approaches lack adequate accounting mechanisms and coverage. Against this backdrop, we develop a Wi-Fi sharing architecture based on blockchain technology and payment channel networks. Our contribution is twofold: First, we present a comprehensive collection of design principles for workable Wi-Fi sharing networks. Second, we propose and evaluate a reference architecture that augments current approaches with adequate accounting mechanisms and facilitates performance, scalability, security, and participant satisfaction. Collapse

Topics: wireless LAN blockchain accounting system support internet technology

Methods: design principle literature study experiment design requirement factorial experiment

Theories: transaction cost economics