Designing Data Encryption System for EHR

Running head: DESIGNING DATA ENCRYPTION SYSTEM FOR EHR 1
Designing data encryption for EHR
Name of the Student
Name of the University
Author Note

DESIGNING DATA ENCRYPTION SYSTEM FOR EHR 2
A. Abstract
The paper aims at describing the importance of data encryption in the fields of
electronic health record. Electronic health records are referred to the managing
the digital records for managing the health related information. EHR has become
one of most vital system in the fields of medical. Thus it becomes essential to
ensure that proper design is included within the electronic health record system
so that all data can be maintained properly. The assessment will focus on
designing a proper data encryption system that will be capable of providing
proper protection towards the data. The main issue that will be resolved with an
execution of data encryption system in EHR is that it will provide better
protection towards the stored data and will ensure that proper confidentiality is
maintained. The paper will focus on designing and execution of an effective data
encryption system. The main objective is to ensure that the designed system is
capable of meeting the needs of the customer. The way data maintained will get
improved with the help of proper data encryption system. Data encryption
method will be capable of managing the data. Hence it will become easy to
manage the data within the electronic health records.

Running head: PROSPECTUS PAPER 3
1. Business/IT problem under investigation
The objective of the paper is to design a data encryption system for the aim
of storing and managing the information that are connected with the electronic
health record. With help of system for data encryption it is expected that the data
stored in EHR can be maintained properly. The paper will propose a design for the
purpose of introducing proper data encryption system within the EHR. The chances
of data theft or unauthorized data access can be limited. The designed data
encryption system will be capable of providing better protection towards the data
stored.
The key security problem that was identified while carrying out the electronic
health record is that it does not have proper techniques for purpose to protect the
data stored. The data stored within the electronic health record faces major issues
with the way confidentiality and integrity is maintained. Thus the security offered
towards the data is considered as the major problem faced with the use of EHR.
2. Plan
Data encryption will be capable of managing the health information securely.
Thus it could be specified that with the use of proper data encryption method it
becomes easier in managing health related data.
The project will include design and execution of data encryption system for
electronic health record. The project will ensure that the necessary steps are
included in the designing process so that the risks can be mitigated. The project will
not include analyzing the current business process or the how the data will be filled
within the EHR.
With the growing needs in the medical fields it has been observed that the
use of data encryption system within the Electronic health record it becomes easy
to organize the data. The use of data encryption system helps in guarding data as
well as ensures that proper integrity is maintained.
ABC healthcare industry is considered as one of the most vital healthcare
company in the United States. The organization currently uses electronic health

PROSPECTUS PAPER 4
records for the purpose of managing the patient’s data. However it has been
observed that there are several issues faced while managing the data. Thus the
project is being carried out with the motive to offer better support for information
maintained within the electronic health records. Electronic health record is mainly
designed for the purpose of tracking all the necessary aspects that are needed for
providing proper care towards the patient. It offers flexible way of managing the
data. The electronic health record is designed with the objective of providing better
support for the way data managed. The implementation of data encryption system
will make sure that proper confidentiality is maintained within the data. Key phases
which are related with the development of a project are listed below:
 Phase 1: Project Initiation phase
 Phase 2: Project planning phase
 Phase 3: Project design phase
 Phase 4: Project execution phase
 Phase 5: Project closure
Task Name Duration
Project Initiation phase 13 days
Designing data encryption system 115 days
Developing a business case 4 days
Preparing project charter 4 days
Appointing project team 5 days
Reviewing the phase 0 days
Project design phase 50 days
designing database 10 days
software design 13 days
interface design 12 days

PROSPECTUS PAPER 5
Creating design specification 15 days
Design completed 0 days
Project development phase 31 days
Develop the system modules 15 days
integrating system modules 10 days
perform the initial testing 6 days
Completed development 0 days
Project testing phase 16 days
Perform testing of system 8 days
highlight the issues 8 days
Correcting the issues identified 0 days
Project closure 5 days
reviewing the documents 3 days
signing off 2 days
3. Research methodology
The methodology that is considered as an effective one is agile project
management methodology. The main reason behind selecting this approach is that
kit offers a better customer satisfaction and ensures that efficient software is
delivered. Beside this the agile methodology considers technical details and
enhances on designing feature more. Thus the chances of well-established system
will increase. The implementation of new design will enhance the way data are
stored and managed within the electronic health records.

PROSPECTUS PAPER 6
Functional requirements are essential for determining the key features that are
being offered towards the users. There is a need to understand the functional
requirements properly so that this becomes quite easy in managing aspects of
project. With the use of a proper functional requirement analysis it becomes
effective to understand the features that will be offered towards the end users.
Functional (end-user) Requirements
The key features that are being expected to be offered towards the end users with
the implementation of the project are listed below.

Accessibility: With the help of proper data encryption methodology the
access offered towards the authorized users will be easy. This will ensure that
the data are accessed successfully from any device if they are authorized.

Authentication step: The developed system will offer authentication process
before access any data on the electronic health records. This will generate
messages towards the registered member. This will reduce the chances of
data theft.

Encrypting data: the data stored within the system needs to be encrypted
before migrating to any other location. This will further ensure that only
encrypted data are stored as well as shared over the electronic health record.

Generating private keys: Every transaction of data will be carried out when a
private key is generated after performing encryption mechanism. The users
will be allowed to access the data only when they have the generated private
keys. Without keys no user will be allowed to access the data. This will
increase the confidentiality that is offered towards the data. User access restricted: The access offered towards the users should be
restricted with the use of new system.
The main objective behind designing the new data encryption system for the
electronic health record is to ensure that the data stored are capable of maintaining
the confidentiality. The data security is the main concern and thus with help of
system of data encryption, all the data shared will be encrypted with the help of
proper effective technique. This will ensure that the data is only accessed by the
members having the decrypting key.

PROSPECTUS PAPER 7
The key assumptions that are considered while designing the project is that
the data encryption system will include an encryption mechanism along with
restriction feature. The plaintext will be encrypted by the system and can be
accessed only when they have proper key. The system will be executed within 3
months with the help of minimum numbers of labors.
The main issue that is identified while developing the project is overrun of the
estimated cost and lack of monitoring process on the project development phases.
Thus there is a need to ensure that the project has been developed by mitigating
the risks. The risk needs to be managed properly so that the project design phase
can be executed efficiently. The methodology that is selected for the project is agile
project management methodology.
The project is responsible for offering a long durability and ensures that the
system is capable of introducing feedbacks at each stage. This mainly gets
executed in different sprints as well as makes sure that project is executed
successfully by removing the necessary drawbacks (Goldstein et al., 2017). With
help of proper approach it becomes quite easy in managing system performance
The project aims at designing a proper data encryption system that helps in
managing the way data stored and managed within the electronic health records.
The key phases that are associated with the development of the project are listed
below:
Hardware
The system will be designed with the aim of managing the data. This helps in
providing proper encryption of data so that the system can be managed properly.
The hardware based encryption will help in providing better support towards the
data management system.
Software
Software which is needed for managing the data encryption in the electronic
health records AESCrypt. AESCrypt helps in securing the data properly within the
system. this manages the data effectively.

PROSPECTUS PAPER 8
Tech Stack
The key services that will be provided with the use of data encryption system
includes providing security towards the stored data, the way data managed and
also controls the access over data shared.
Architecture Details
The AES encryption will use 256-bit encryption tool for the purpose of
securing the data.
Resources Used
The resources that are used for the purpose of managing the design process
of data encryption are suitable hardware, software, and project manager, and
tester, designer, software developer and project planner.
Final Output
The project outcome will be tangible as the main objective will be achieved
with help of appropriate system development process. The project objectives will be
fulfilled with help of appropriate budget analysis and design. The main issue related
to data security will be solved.
4. Implementation proposal
The main use of electronic health record is to ensure that all necessary
documents are managed effectively. Electronic health record is a digital way of
storing patient’s data in forms of charts. This offers real time access over the
records. However it has been observed that due to excessive use of the electronic
health records, number of security issues is also increasing. Hence there is need in
designing a proper data encryption system which will be capable of protecting the
data from unwanted users. Earlier it has been observed that data related to a
critical disease got breached creating havoc chaos among the citizens. After this
incident the ABC healthcare organization decided to implement a proper a proper
design that will be capable of maintaining the confidentiality of the data stored
within the electronic health record. Data are considered as an essential component
and thus it is important to integrate proper system that will be capable of protecting
the confidentiality of the data. The proposed project will focus on designing a data