A Study on the Security Enhancement based on Network Separation for CloudHIS with Medical Healthcare Information

Along with the growth of u-Healthcare, we propose a security enhancement based on network separation for CloudHIS with for handling healthcare information to cope with cyber attack.

To protect against all security threats and to establish clear data security policies, we apply desktop computing servers to cloud computing services for CloudHIS. Use two PCs with a hypervisor architecture to apply physical network isolation and select the network using KVM(Keyboard, Video monitor, and Mouse) switched controller. The other is a logical network separation using one PC with two OSs, but the network is divided through virtualization.

Physical network separation is the physical connection of a PC to each network to block the access path from both the Internet and the business network. We apply a physical network separation under virtual desktop service using hardware(HW) direct assignments to overcome some problems. The proposed system is an independent desktop used to access an intranet or the Internet through server virtualization technology on a user's physical desktop computer.

We can implement an adaptive solution to prevent hacking by configuring the CloudHIS, a cloud system that handles medical hospital information, through network separation for handling security enhancement.