Desarrollo de un sistema de comunicación segura para la transmisión de datos médicos sensibles

Abstract

CONDITION FOR PUBLICATION OF PROJECT. In healthcare systems, the transmission of sensitive medical data, such as electronic health records, requires high levels of security because they store confidential information and, due to their nature, can be targeted for attacks or data manipulation, putting patients' lives at risk. Therefore, this work aims to develop a secure communication system for the transmission of medical data by implementing security mechanisms that comply with the recommendations of HIPAA and GDPR data protection regulations. The architecture used is based on FIWARE containers, which include security mechanisms such as AES encryption, two-factor authentication through a password plus a token, and OAuth2 protocol for authorization, which is based on role management. Performance and security tests showed that the system operates optimally, as response times are minimal, it demonstrated robustness against brute-force attacks, and it provided reliability by processing a large number of requests without becoming overloaded, optimizing resource usage. The communication system is a secure solution as it meets the key recommendations of HIPAA and GDPR, such as the implementation of encryption, authentication methods, authorization, and security testing to ensure the integrity, availability, and reliability of sensitive medical data. Keywords: security mechanisms, electronic health records, FIWARE containers, HIPAA, GDPR.