A framework for mhealth APP security and privacy analysis
Ended Project Grant Awarded Last action
- Award ID
- R41GM146313
- Recipient
-
Ubitrix International Inc. UEI WHEJK7V2JDM5
- Awarding agency
-
National Institute of General Medical Sciences
National Institutes of Health, Department of Health and Human Services
- Obligated
- $768,237
Award facts
- Assistance listing
- 93.859 Biomedical Research and Research Training
- Completion date
- Originally
- Funding
-
- $512,158.00 Federal
- $256,079.00 Non-federal
- Place of performance
- Bayside, WI 53217, USA
Award details come from USAspending.gov.
Description
- Abstract
- With the increased use of mobile health apps to improve health outcomes, protecting private health data is becoming increasingly important. Researchers estimate there are over 300,000 mhealth apps in existence, and some relate to hipaa covered entities or their business associates. With patients' increasing desire for data accessibility and APP data sharing, IT is critical to ensure that patients transmit their protected health information (PHI) to apps that are compliant with hipaa privacy and security rules. About 25% of healthcare providers suffer from data breaches violating hipaa policies, caused by using mobile devices that come preloaded with mhealth apps. This results in lawsuits, and loss of confidence among health providers and patients. Earlier research has focused on security of mobile devices, but not checking further how apps store or transfer data securely before being used by remote health care providers or users. Most mobile APP developers including mhealth apps are not aware of hipaa security and privacy regulations. This creates the market opportunity to develop static and dynamic code analysis tools for mhealth APP developers, so their developed products meet hipaa security and privacy guidelines. Currently, there is a lack of an analysis framework to check mhealth apps' security and privacy risks following the applicable hipaa technical security and privacy guidelines. We propose to develop a framework to analyze mhealth apps for hipaa security and privacy compliance. The framework will allow users who have no knowledge of hipaa or APP security to receive an assessment of security and privacy risks per hipaa guidelines. Initially based on android studio, the tool will test the source code of mhealth applications for potential data security breaches related to hipaa before posting for the marketplace. The tool will further address API level checking for secure data communication mandated by recent CMS guidelines between third party mobile health apps and EHR systems. The analysis framework will also address heterogeneous health data and enable providers to remain compliant with hipaa administrative and operational guidelines. We propose to perform two acceptance tests on the prototype based on partnering with hipaa experts and medical doctors and for-profit EHR vendors along with the effectiveness of tools for detecting health data security breaches. The proposed tool will further enable the development of data breach checking for IOS mhealth apps and adoption and integration by large scale EHR vendors in the future.
Transactions
| Action | Federal | Non-federal | Date |
|---|---|---|---|
| Amendment | $0 | $0 | |
| Amendment | $256,079 | $0 | |
| Original award | $256,079 | $256,079 |
Quick answers
Who received award R41GM146313?
R41GM146313 was awarded to Ubitrix International Inc. by National Institute of General Medical Sciences (National Institutes of Health) on September 15, 2021.
How much is award R41GM146313 worth?
$768,237 has been obligated on R41GM146313: $512,158 in federal funding and $256,079 in non-federal funding.
On GovTribe
See this award's full record
- Every transaction and subaward
- The recipient's other awards and teaming partners
- Similar grant awards
- Ask GovTribe AI about this award