Publications

@article{8003467,

title = {Collaborative eHealth Meets Security: Privacy-Enhancing Patient Profile Management},

author = {Rosa Sánchez-Guerrero and Florina Almenárez-Mendoza and Daniel Díaz-Sánchez and Patricia Arias-Cabarcos and Andrés Marín-López},

url = {/download/Collaborative_eHealth_meets_Security_Privacy-Enhancing_Patient_Profile_Management.pdf

https://ieeexplore.ieee.org/document/8003467},

doi = {10.1109/JBHI.2017.2655419},

issn = {2168-2194 },

year  = {2017},

date = {2017-11-01},

urldate = {2017-11-01},

journal = {IEEE Journal of Biomedical and Health Informatics},

volume = {21},

issue = {6},

pages = {1741-1749},

abstract = {Collaborative healthcare environments offer potential benefits, including enhancing the healthcare quality delivered to patients and reducing costs. As a direct consequence, sharing of electronic health records (EHRs) among healthcare providers has experienced a noteworthy growth in the last years, since it enables physicians to remotely monitor patients' health and enables individuals to manage their own health data more easily. However, these scenarios face significant challenges regarding security and privacy of the extremely sensitive information contained in EHRs. Thus, a flexible, efficient, and standards-based solution is indispensable to guarantee selective identity information disclosure and preserve patient's privacy. We propose a privacy-aware profile management approach that empowers the patient role, enabling him to bring together various healthcare providers as well as user-generated claims into an unique credential. User profiles are represented through an adaptive Merkle Tree, for which we formalize the underlying mathematical model. Furthermore, performance of the proposed solution is empirically validated through simulation experiments.},

keywords = {EHR, emadrid2, Merkle Tree, Minimal Disclosure, privacy, Profile Management},

pubstate = {published},

tppubtype = {article}

}

@article{7579116,

title = {Comparing Password Management Software: Toward Usable and Secure Enterprise Authentication},

author = {Patricia Arias-Cabarcos and Andrés Marín and Diego Palacios and Florina Almenárez and Daniel Díaz-Sánchez},

url = {https://ieeexplore.ieee.org/document/7579116

https://doi.org/10.1109/MITP.2016.81

/download/ComparingPasswordManagementSoftware.pdf},

doi = {10.1109/MITP.2016.81},

issn = {1941-045X},

year  = {2016},

date = {2016-09-01},

urldate = {2016-09-01},

journal = {IT Professional},

volume = {18},

issue = {5},

pages = {34-40},

abstract = {In today's corporate IT systems, employees routinely repeat an undeniable pattern: accessing a huge number of password-protected services. In this regard, although deploying a strong enterprise password policy can increase security against online breaches and data leaks, it also imposes a significant usability burden on users. To alleviate this problem, password managers (PMs) are considered user-friendly tools that automate password generation and login processes. But how secure and usable are these tools? The authors analyze the four most popular PMs with free versions from both security and usability perspectives. The comparison leads to recommendations on enterprise PM selection, as well as to the identification of new lines of research and development on usable authentication.},

keywords = {cybersecurity, emadrid2, inrisco, password managers, Security, usability},

pubstate = {published},

tppubtype = {article}

}