SPoC: Protecting Patient Privacy for e-Health Services in the Cloud

The use of digital technologies in providing health care services is in general subsumed under the term e-Health. The Data Capture and Auto Identification Reference (DACAR) project provides an open e-Health service platform that reinforces the integrity, security, confidentiality and auditability of medical data throughout their life-cycle. This paper presents the design and implementation of the core component of this platform, namely the Single Point of Contact (SPoC). A SPoC is essentially a security authority that provides claim-based authentication and authorisation functionalities, and facilitates the development and integration of secure e-Health services hosted within a Cloud Computing environment.