MIS 584 Final Capstone Project Report- Group13.docx

7/24/2019 MIS 584 Final Capstone Project Report- Group13.docx

1/44

Final Capstone Project Report

MIS 584-Capstone

CLOUD COMPUTING ITS !PPLIC!TIONS

C"allen#es Meas$res o% I&ple&entin# IaaS clo$' in "ealt"care Sector

(! Case St$') on *+, Clinic.

Tea& Me&/ers

SAI SRINIVAS THOTA

ABHISHEK MILIND DHOLE

KIRAN VARDHAN REDDY DEREDDY

SOUMITH REDDY PODDUTURU

MURALI SHANKAR EEDARA

NIKHIL REDDY GUDUR

Dece&/er 012 305

1


2/44

Ta/le o% Contents

Executive Summary 3

Introduction 4

Problem Statement 5

Purpose & Research Questions 5

Scope, ssumptions & !imitations "

!iterature Revie# $

%ethodoloy '(

Results & )iscussion '3

Recommendations &*onclusion 34

Re+erences 3"

ppendix 3

2


3/44

67ec$tie S$&&ar)

-he .ealth care sector is ro#in rapidly and has a hih potential in both +inancial and

technoloical aspects/ -he in+ormation systems side o+ the health care sector is still lain

behind #ith the traditional methods o+ storin data and bac0ups that results in the decrease o+e++iciency o+ in+ormation systems in +inancial terms, +lexibility o+ increasin and decreasin

computational resources as per re1uirements, puttin the computational resources to e++icient

usae and improvin the process o+ health care/ 2ith the implementation o+ cloud

computin, the health care oraniations need not #orry about providin security to the

in+rastructure and maintainin it/ -he companies can +ocus entirely on providin better

patient care/ In+rastructure as a Service IaaS cloud model lets the health care oraniations

to trans+er their ris0 o+ losin patient health in+ormation P.I to the cloud service provider/

-he service provider is responsible +or security and maintenance o+ the in+rastructure,

necessary updates reardin technoloy, servers, data centers etc/

-houh there are many advantaes implementin cloud plat+orm, many health care

companies are still usin traditional in+rastructure/ *ertain barriers #ere discovered throuh

survey conducted in health care oraniation #hose primary oal is to identi+y the challenes

+aced #hile implementin cloud plat+orm particularly IaaS/ -he main challenes include

security and con+identiality o+ the in+ormation resided on cloud, per+ormance o+ the cloud

3


4/44

server and reliability o+ the service provider/ In addition to this, the client doesn6t have a

control over the service provider6s server/ It can only control the applications deployed over

the cloud/ s P.I needs to be hihly secure and con+idential as per the overnment

reulations mentioned under -he .ealth Insurance Portability and ccountability ct o+

7" .IP/ In 8nited States the health care oraniations need to operate accordin to

.IP +rame#or0/ -he healthcare companies are doubt+ul about #hether the .IP norms#ould be properly +ollo#ed by cloud service provider or not/ In order #in the con+idence o+

clients, the cloud service provider must provide assurance about data security in the +orm o+

proper authentication and authoriation techni1ues, bac0up policies, alternate server to be

used i+ primary server brea0s do#n etc/ In this pro9ect, the challenes +aced by :;< *linic

#hile implementin IaaS #ould be studied and recommendations #ould be made

accordinly/

Intro'$ction

4


5/44

-he pro9ect +ocuses on challenes and measures to be ta0en #hile Implementin

In+rastructure as a Service IaaS in the .ealth *are sector :;< *linic/ -he bene+its the

:;< clinic #ould be receivin a+ter possible shi+t to IaaS model #ould be studied//

2hat is IaaS=

In+rastructure as a Service IaaS is one o+ the model o+ cloud computin #hich provides

virtualied computin resources includin servers, storae, net#or0in, and data center

space over the Internet/

.o# is it Implemented=

n oraniation implementin the IaaS has a number o+ #ays to do so dependin on the

level o+ o#nership, storae and net#or0in resources involved, and the data processed by

these I- resources/ -he traditional approach is to implement ne# services alonside the

existin technoloy durin the transition phase/ *onsiderin the implementation o+ IaaS,

healthcare companies should be havin clear picture o+ the bene+its #hich they #ould be

ettin a+ter implementation o+ IaaS/ lso, the ris0s associated #ith implementation o+

IaaS should be considered/

.o# #ill the implementation o+ IaaS a++ect +uture ro#th o+ the oraniation=

Implementation o+ IaaS #ill provide an opportunity to eliminate the cost associated to

installin hard#are, purchasin so+t#are licenses etc/ -his model enables the on>demand

delivery o+ essential I- resources, includin processin po#er, storae capacity, net#or0

band#idth, and security technoloies. IaaS #ould be a rate mar0et +or healthcare

industries in near +uture/ It is essential to ascertain bene+its as #ell as do#nside o+ its

implementation/ 8pon complete understandin, the steps could be ta0en to minimie the

impact o+ any do#nsides/

Pro/le& state&ent

5


6/44

*loud computin has become a po#er+ul solution +or solvin computin problems/ %any

oraniations are movin to#ards cloud computin by implementin di++erent models such as

So+t#are as a Service SaaS, In+rastructure as a Service IaaS, and Plat+orm as a Service PaaS

+or decreasin the costs o+ computation/ -he challenes and measures o+ Implementin

In+rastructure as a Service IaaS #ith respect to the :;< clinic is studied by the team throuh

conductin a survey 1uestionnaire as they have already implemented cloud solutions in their

oraniation/ In +uture this study #ill help the health care oraniations to implement IaaS and

reduce costs as #ell as increase e++iciency o+ services and in+rastructure available in the health

care sector/

P$rpose an' Researc" 9$estions

-he purpose o+ this research is to?

Study the challenes and measures o+ implementin IaaS cloud in .ealth care

applications and providin suestions +or improvin the areas #here necessary/

@ind the security issues underlyin the implementation o+ cloud based In+rastructure

as a service IaaS/

Study the bene+its o+ implementin cloud plat+orm in an oraniation #ho are

actually usin it/

Identi+y the importance +or an oraniation to implement and uprade its services/

Researc" 9$estions

What are the challenges for adoption of the IaaS in Healthcare industry?

What are the measures to be taken to implement IaaS in Health Care?

What is the impact of IaaS on Health care in the future?

6


7/44

Scope2 !ss$&ptions an' Li&itations

Scope

-he scope o+ the pro9ect is to study the challenes and measures to be ta0en to implement

In+rastructure as a service IaaS model in the healthcare sector by conductin a survey at :;demand basis/ -he cloud computin o++ers a #ide variety

8


9/44

o+ options to users and enterprise +or storin and to the processin the data #ithout havin to

install any so+t#are on client6s side/

-he adoption o+ cloud computin has been a latest emerin trend in the health care industry/

8sin cloud services, it is very easy to access the patient6s data +rom any#here in the #orld/ In

order to access this data, the particular health care company re1uires to have loin privilees/

-he cloud +acility o++ers a variety o+ bene+its to health care industry as sta0eholders #ho have

been authenticated can access the data irrespective o+ place/ In addition to this, the healthcare

company #ouldn6t have to invest lots o+ money in purchasin latest e1uipment +or manain and

storin o+ the data/ Aabil Sultan, '(74

By adoption of cloud computing in healthcare companies, is possible to

accrue huge benet in terms of proiding !uality serice to the patients,

ease in sharing of patient information in terms of medical records, test

results, medicines prescribed etc" #he information can be pulled irrespectie

of place and can be further used by a concerned person from that particular

healthcare company for ma$ing decisions such as diagnosis, scheduling

appointments, processing insurance claims"

#he cloud computing models used in healthcare industry are as under%

0. IaaS? ;oesh Bhullar, Ritesh Bhullar, Smita Ra9, )r/ %u0ta Chatele, '(73

IaaS stands +or in+rastructure as a service/ In this model, the healthcare company outsources the

hard#are in+rastructure includin net#or0, servers, data centers etc/ to cloud provider/ In this

case, the cloud service provider is responsible +or manain this devices +rom its side and

providin plat+orm +or per+ormin operations to healthcare company/ -he main bene+it o+ IaaS

&


10/44

in+rastructure is that the service provider provides the virtualied and standard operatin

environment #ith reasonable cost/

-he IaaS provides ood plat+orm to use resources such as storae, processin, net#or0 etc/

#ithout havin to install any prorams on their or investin in any 0ind o+ speci+ic hard#are/ -he

IaaS ives the typical virtual +eel to the users/ Internet is the only essential thin #hich is

necessary +or accessin the cloud server +rom client6s side/ -he service provider o++ers re1uired

thins to the user/ Doce Davrilov and ladimir -ra90ovi0, '(7'

IaaS is based on pay>as>you>o model in #hich the user has to pay +or a service #hich is actually

used/ -he bi advantae o+ this model is that, the companies save lot o+ money in investin the

resources #hich it has never used/ ;oesh Bhullar, Ritesh Bhullar, Smita Ra9, )r/ %u0ta

Chatele, '(73

IaaS #or0s +ine irrespective o+ the con+iuration and speci+ication o+ the machines located at the

client6s side/ %oreover, the user can access it sittin at any place in the #orld/ In today6s +ast

paced environment, the technoloy chanes very rapidly/ Practically, it is hihly impossible +or

the user to uprade the system con+iurations +re1uently considerin the cost associated to it/

It is cloud service provider6s responsibility to maintain con+identiality and security #hile

handlin the patient6s data/ 8sin this model, many users can simultaneously access the

in+ormation stored on cloud by usin valid credentials/ In IaaS, the service provider is +ully

responsible +or maintainin the privacy and security o+ patient6s data Doce Davrilov, ladimir

-ra90ovi0, '(7'/

3. PaaSDoce Davrilov, ladimir -ra90ovi0, '(7'?

1'


11/44

PaaS stands +or Plat+orm as a Service/ -his model o++ers simple and easy to use online

environment +or operatin the #eb applications/ -he healthcare company doesn6t have an access

to cloud in+rastructure includin net#or0, operatin system, storae etc/ but it can manae the

#eb applications/

-he PaaS o++ers an excellent opportunity to the user to per+orm prorammin in executable

environment/ -he user can deploy hisFher o#n application over service provider6s cloud in +e#

clic0s/ -he user doesn6t have an access to cloud in+rastructure #hich consists o+ servers,

operatin system, net#or0in devices etc/ but it has a +ull control over the deployed applications/

-he PaaS helps in a reat #ay by reducin the administrative burden over the company/ -he

company need not #orry about investin lare money in buyin hard#are, purchasin so+t#are

licenses etc/ -his saved money can be used to per+orm some innovative tas0s #hich could add

the value to the company6s core +unctions/ ;an, .aibo and -ate %ary, '(7'

-he Doole6s pp enine is excellent example o+ PaaS service/ -he Doole pps provides the

common plat+orm #here the code or proram is shared by the various users over internet/ -he

Doole pps has its o#n online community as #ell as mar0etplace #here the users can buy,

share or sell the applications or code enerated by them/ nother example o+ PaaS could be

2ave %a0er #hich is o#ned by %#are o++ers very ood service o+ buildin 9ava based

#ebsites #hich ma0e it easy +or non>technical users to develop their o#n online application over

the cloud/ ;an, .aibo and -ate %ary, '(7'

Cy implementin the PaaS model, the company can et rid o+ +rom the hassles such as disaster

manaement, data security challenes, net#or0in issues etc/ ;oesh Bhullar, Ritesh Bhullar,

Smita Ra9, )r/ %u0ta Chatele, '(73/

;. SaaSDoce Davrilov, ladimir -ra90ovi0, '(7'?

11


12/44

SaaS stands +or So+t#are as a Service/ -he So+t#are as a Service model enables the healthcare

company to use the so+t#are plat+orm installed on cloud #ithout havin to #orry about so+t#are

installation, maintainin lare servers, databases, net#or0s etc/ ;oesh Bhullar, Ritesh Bhullar,

Smita Ra9, )r/ %u0ta Chatele, '(73/ -he healthcare companies #ould reap the bene+its o+ IaaS

and PaaS by implementin the SaaS plat+orm/ -his model is extremely use+ul +or manain the

day>to>day +unctions includin handlin databases, manain recruitment activities,

virtualiation etc/ -he practical example o+ SaaS is to implement the ERP systems, adoption o+

*R% plat+orm such as Sales+orce/com, %icroso+t ure etc/

-he SaaS o++ers variety o+ resources such as online user communities, mar0etplace #here the

user can interate third party tools, install add>ons to existin modules, per+ormin customiation

o+ application accordin to o#n re1uirements etc/ -he Sales+orce6s ppExchane is one o+ the

ood example o+ SaaS model/ In ppExchane, the user can interate and use third party pps

into Sales+orce or -he Sales+orce user account is commonly 0no#n as or to leverae the

per+ormance o+ company6s operations/ ;an, .aibo and -ate %ary, '(7'

In traditional mode, the user has to pay +or a subscription belonin to di++erent so+t#are/ It

increases the cost burden over the user/ In SaaS model, the subscription is chared based on

di++erent +actors such as the type o+ +eature used, number o+ users usin the service, the duration

+or #hich the user intends to access the cloud server etc/ -he purchasin and terminatin the

subscription is very easy i+ compared to traditional in+rastructure/ Ganssen, %ari9n and Goha,

nton, '(77

12


13/44

-he ma9or advantae o+ usin SaaS model is that the user need not #orry about installin timely

updates, patches etc/ Everythin is controlled and manaed by the cloud service provider/ -he

subscription is based on Hpay>per>use basis/ -he user can access particular application #ithout

havin to pay entire amount +or buyin #hole so+t#are/ Ganssen, %ari9n and Goha, nton, '(77

-here are some issues #ith the healthcare industries have been +acin due to #hich adoption o+

cloud service has remained a challene +or many companies/ -he ma9or issues are as +ollo#s?

Iss$e 0 (Goce Garilo2


14/44

procedures goerned by the goernment" #his policies are li$e goernance

measures (hich inforce the healthcare companies to (or$ in certain

predened frame(or$ (hen it comes to handling the data" t the time of

using cloud serice, the companies hae to obey strict regulations dened by

-)." #his regulation ta$es care of the condentiality and security of the

patient/s data and prohibits healthcare companies to publish it oer the

internet (ithout ta$ing patient/s consent"

#he more robust security measures need to be implemented in order to deal

(ith the security frame(or$ set by goernment" #he measures include

access control, authentication, proiding authori0ation etc" #he access

control deals (ith the right to access the condential information by sta

member of the healthcare company" #he authentication proides the

dierent measure to authenticate the person accessing the information"

*sually, the username, pass(ord and security information is as$ed to erify

that the right person is accessing the data" nce the authori0ed person

enters hisher credentials, it is chec$ed against the stored information in a

database" )f the match found, then the person is gien login permission"

urther, the transmission security and storage security are e!ually important

issues" #he transmission security ensures the security of the data (hen it is

transmitted oer the internet" or e"g", in order to access the cloud serer,

the internet connection is must" hile transmitting the data for storing or

processing on cloud oer the internet, the arious security protocols need to

14


15/44

be follo(ed for aoiding possibility of falling the data into the hands of

hac$ers" #he re(all and antiirus soft(are also need to be installed at

client/s side" #he same security measures need to be implemented at cloud

serice proider/s side" uring the storage of the data oer the cloud, the

high leel of security measures need to be assured" Because, the storage

medium should be secure enough other(ise, the information stored gets

lea$ed or accessed by (rong entities"

Iss$e 3(+o#es" >"$llar2 Rites" >"$llar2 S&ita Raj2 Dr. M$=ta ?"atele2 30; !aila/ilit)

o% a relia/le serice at an) #ien ti&e

-he availability o+ the in+ormation any time as per the demand is the main concern +or the health

care companies #hile adoptin the cloud computin service/ I+ the hospital re1uires the data on

immediate basis, and i+ the cloud provider encountered an issue and because o+ that i+ it is unable

to provide the in+ormation time on riht time, then it #ould become a serious concern +or the

hospital/ s the patient6s data need to be available +or any time as and #hen it is re1uired/

#he healthcare industries deal (ith ery important data related to patients

(hich includes medicines prescribed on specic date, the name of the doctor

from (hom the consultation is ta$en, preious history of any disorders,

surgeries etc" #his information is re!uired on high priority basis and must be

aailable immediately as and (hen demanded" )f there is an interruption in

operation of cloud or performance leel slo(s do(n, in such cases, the cloud

serer unable to proide uninterrupted serice to the healthcare company"

#he cloud serice proider must proide alternate option if there is a problem

accessing the cloud by healthcare company" )n such cases, the data bac$up

15


16/44

should be made aailable 247 in order to access the data as and (hen

demanded" #here should be proision of alternatie serer is there is

accidental shutdo(n of main serer due to some unforeseen situation"

Iss$e ; (Sanja) P. !"$ja02 Sin'"$ Mani0 @es$s ,a&/rano2 303 Per%or&ance o% t"e

clo$' serer

-he other issue #hich deters the healthcare companies #hile considerin cloud implementation

is ho# cloud server #ould per+orm= 2ould it be per+ormin #ell all the time= 2hat #ould

happen i+ it +ails to operate or unable to +unction +or certain amount o+ time= Such type o+

1uestions need to be addressed by companies and unless cloud service provider ives the

satis+actory in+ormation reardin this 1uestions, the companies +ind it di++icult to s#itch to

cloud plat+orm/

#he cloud serer is responsible for handling all $ind of actiities associated

(ith handling, storing, accessing the patient/s information etc" #he

performance of the serer is one of the $ey point (hich is ta$en into

consideration by health care industries (hile ta$ing decision on moing to

cloud platform" )f the serer fails to gie the acceptable performance leel,

the health care company (ouldn/t be able to perform its daytoday

actiities" #he scalability of the serer is one of the important issue the (hile

ma$ing decision (hether to shift to cloud platform or not" #he scalability

means the ability of the serer to proide acceptable leel performance

(ithout any interruption 9:man bu$housa, ;ader


17/44

#he cloud serer consists of many entities such as database engine,

repositories, and physical net(or$ing deices etc" (hich are responsible for

carry out the operations and proide the robust performance" )f there is fault

in operating one of the entity, then entire operation of the serer stops until

the fault gets repaired" #he fault tolerance is one of the important factor

(hile choosing the cloud serice proider" #he fault tolerance leel of the

serer stands for the ability or capacity of the serer to handle and resole

the technical glitches"


18/44

3. 6as) accessi/ilit) o% t"e 'ata (Sanja) P. !"$ja02 Sin'"$ Mani0 @es$s ,a&/rano2

303

-he authoried personnel +rom the health care company can obtain in+ormation such as

prescription details, test results, availability o+ the physician etc/ any#here and anytime usin

hisFher credentials on cloud/ It is o+ reat help +or ma0in decisions, speed up insurance

processin, ma0in physician6s appointment etc/

Even patients can easily access the in+ormation usin their P*, smartphone or iPad by loin to

cloud server usin valid credentials/ It is one o+ the reat +eature o+ cloud plat+orm that, anyone can

access the in+ormation +rom any part o+ the #orld #ithout havin to investin in buyin expensive

hard#are or so+t#are/ ;oesh Bhullar, Ritesh Bhullar, Smita Ra9, )r/ %u0ta Chatele, '(73

;. Cost /ene%it (Sanja) P. !"$ja02 Sin'"$ Mani0 @es$s ,a&/rano2 303

-he *ompany #ouldn6t need to invest lot o+ money in buyin hard#are devices includin

net#or0in e1uipment, data centers, servers, purchasin the licenses +or so+t#are in order to

carry out entire operation/ Jnce the cloud service is adopted, all +unctions are per+ormed on

remote cloud server/ -he company is able to save a lot money maintainin the I- in+rastructure

+rom its side/ In addition to this, the company +ollo#s Hpay>as>you>o model under #hich it has

to pay +or the services #hich it actually usin/ -he money saved can be used +or innovative

purposes/ )ue to adoption o+ cloud plat+orm, the healthcare companies need not have to invest

lot o+ money durin the initial setup #hich is bene+icial +or start>up healthcare companies #ho

may not have lare capital +or investment/ ;oesh Bhullar, Ritesh Bhullar, Smita Ra9, )r/

%u0ta Chatele, '(73

4. Concentration on core /$siness actiit) (Sanja) P. !"$ja02 Sin'"$ Mani0 @es$s

,a&/rano2 303

18


19/44

I+ the cloud service is implemented, the company can save its e++orts on maintainin sta++ +or

loo0in a+ter technical issues, hard#are devices, updatin the technoloies, servers, databases

etc/ -his e++orts can be used +or per+ormin some important tas0s associated to core business

activity/ I+ the company is success+ul in +lourishin its core business, it #ould be lot o+ easier to

achieve the competitive advantae over the competitors/

5. Goo' %a$lt tolerance an' 'isaster &ana#e&ent

-he cloud service providers specialie in maintainin cloud servers/ -hey have a stron bac0up

+acility i+ any speci+ic server brea0s do#n/ I+ such case happens, the tra++ic is immediately

shi+ted to another server/ -he site is +ully e1uipped #ith measurements to handle the condition i+

any disaster or +ault happens/ In this sense, the healthcare companies need not have to invest

lare money in 0eepin disaster recovery system at its o#n location/ ;oesh Bhullar, Ritesh

Bhullar, Smita Ra9, )r/ %u0ta Chatele, '(73

B. Solin# t"e iss$e o% reso$rce scarcit)

-he scarcity o+ the resources is ma9or issue in rural or underdeveloped reions especially in

developin countries/ )ue to shortae o+ resources, the healthcare companies are unable to

maintain re1uired +acilities such as net#or0in devices, servers, data repositories at its physical

location/ In such case, the access to the important data becomes very di++icult/ -he adoption o+

cloud plat+orm could be the best remedy to solve this issue/ Irrespective o+ the resources, the

healthcare companies in such areas could access the in+ormation and provide valuable service to

the patients/ Eman bu0housa, Aader %ohamed nd Gameela l>Garoodi, '(7'

1&


20/44

-he issues discussed above are very important #hen the healthcare company #ould be on vere

o+ ma0in decision #hether to adopt cloud plat+orm or not/ +ter re+errin lot o+ articles and

9ournal papers and articles, #e have come to 0no# that three issues mentioned above are main

challene in adoption o+ cloud technoloy/ 2e have shortlisted this issues as #ithout a solution

about ho# resolvin them, it is very di++icult to implement cloud technoloy/ mon this three

issues, security and con+identiality is the biest challene #hich deters most o+ the healthcare

companies to o +or cloud/ %aintainin the security and con+identiality o+ the patient6s data is

iven utmost priority by healthcare companies/ -his issue #ill help us in analyin #hat 0ind o+

security threats are bein +aced by the :;< clinic #hile adoptin IaaS model/ -his issue #ould

bene+it in analyin the various security issues currently bein +aced by the :;< clinic/

2e have +ound out that availability o+ reliable service and per+ormance o+ cloud server are

another challenes the companies +ace #hile adoptin the cloud technoloy/ s the overall

operations and +unctions #ould be maintained and ta0en care by cloud provider, the companies

#ould be remained any access to servers/ s the healthcare companies handle important

in+ormation #hich should be available as and #hen available/ -his issues #ould be bene+icial +or

ascertainin ho# adoption o+ cloud plat+orm #ould be advantaeous +or :;< clinic, considerin

the existin in+rastructure/

In a nutshell, this three issues #ould help us to +orm a round +or conductin research about ho#

IaaS could be implemented at :;< clinic and #hat #ould be the challenes in its

implementation/ +ter complete understandin o+ this challenes, #e could dra+t the measure +or

minimiin its impact/

In conclusion, the issues discussed above are extremely important at the time o+ ta0in decision

#hether to adopt cloud computin or not/ 2e have +ound this issues common to all healthcare

2'


21/44

companies #ho plan to shi+t to cloud computin +or manain its operations/ -here are obviously

some bene+its o+ cloud implementation such as lo# cost o+ operation, minimiin the ris0

associated data loss due to physical damae o+ devices etc/ -he healthcare companies #ould

incur hue +inancial loss as #ell as possible damae to company6s brand i+ the security and

con+identiality are compromised/ In 8nited States, the healthcare companies have to #or0

accordin to uidelines and reulatory compliance set by .IP/ .ence, this issues are iven

the hihest consideration #hile movin to cloud technoloy/ Especially in IaaS model o+ cloud,

the healthcare company has no control over service provider6s resources/ -he company can only

access and handle its applications #hich reside on cloud/

-hus, the solution reardin ho# to tac0le this issues is very important/ 8nless the companies

obtain the positive #ay o+ resolvin this issues, the companies #ould still remain in a dilemma

#hether to o +or a cloud service or not/

Met"o'olo#)

-he pro9ect is divided in to three phases so that each phase have a constrained set o+ issues to

deal #ith/ -he +irst phase deals #ith basic terms li0e selectin the pro9ect topic a+ter +ormin a

roup/ +ter selectin the pro9ect topic +indin a potential issue a+ter doin an intensive research

on the selected topic/ +ter selectin an issue to conduct research on a tem contract document

should be #ritten that helps the team to abide by certain terms and conditions throuhout the

pro9ect/ -he roles o+ each individual in the roup is decided and the roles may be constant

throuhout the pro9ect or vary a+ter a brie+ period o+ time accordin to the re1uirement/ s this

21


22/44

pro9ect is a case study type research pro9ect the oraniation or sector should be selected and

necessary permission and resources should be athered to conduct the survey/

In phase t#o the roup conducted some initial intervie#s #ith +e# employees +rom the selected

oraniation to collect some basic in+ormation about the oraniation li0e #hether they are usin

the cloud services in their oraniation and i+ implementin the type o+ cloud service and

security measures ta0en to protect the patient data in this case as the research is done on health

sector/ Cased on the data collected +rom the intervie# in phase t#o a survey 1uestionnaire is

desined in phase three in such a #ay that research issuesF1uestions are ans#ered and +uture

insihts o+ the oraniation on implementin the IaaS is identi+ied #hich #ill be a potential hih

value in+ormation +or the IaaS cloud service providers to enhance their services and improvise in

the areas li0e security and client +riendly policies that ma0es even health care oraniations to

avail the IaaS services o+ cloud that helps in cost cuttin and also increases the e++iciency and

security o+ the computin devices in health care sector/ nother advantae o+ this research is it

helps the health care oraniations to +ocus on providin better patient care #hich is their core

+unctionality by ma0in it possible to outsource some o+ the ma9or I- +unctionality li0e security

and maintenance/ +ter collectin the data throuh the survey the data is analyed by usin

various methods and tools that are discussed in +urther sections o+ methodoloy/ In this phase the

results are also tabulated and described clearly the outcome o+ the research/

-o determine the measures and barriers o+ IaaS cloud computin in .ealthcare oraniation the

data has to be collected +rom the employees o+ :;< clinic throuh a survey 1uestionnaire by

usin tools li0e oole +orms and email/ -he 1uestionnaire is desined in a #ay to ather the

opinion o+ employees +rom the In+ormation -echnoloy I- and In+ormation Security IS

departments as #e believe employees in these departments are the ones #ith expertise and

22


23/44

0no#lede about the traditional in+rastructure and cloud based in+rastructure/ -he survey

1uestionnaire is limited to 5> " participants, is conducted only once and ta0es around 75 to '(

minutes +or the completion o+ the survey/

Since the current research pro9ect is a case study, the survey 1uestionnaire is suitable because it

#ill ive the maximum amount o+ 1ualitative data that can be interpreted usin various

measurement scales available/ -he data is collected throuh both open and closed ended

1uestions/ %ost o+ the closed ended 1uestions use !i0ert scale Chattacher9ee, nol, '(7'/ Jnly

a +e# closed ended 1uestions contain customied options/ -he open ended 1uestions are utilied

#here su++icient data cannot be collected usin closed ended 1uestions/

-he in+ormation about :;< *linic +or desinin the survey 1uestionnaire is collected by

intervie#in the *IJ *hie+ In+ormation J++icer o+ the *linic about the basic structure and

+unctionin o+ the oraniation, the applications used, security measures and policies +or both

physical in+rastructure and the cloud applications to protect patient data/ -he oraniation is

implementin SaaS cloud and the cost bene+its o+ implementin is not 0no#n as the *IJ re+used

to share that in+ormation due to some privacy issues/

%ost o+ the 1uestions in the survey contains options customied to the research and are open

ended that provide a text +ield to provide their insihts o+ the employees/ @or e// there are

certain 1uestions that as0 the impact o+ implementin IaaS in healthcare sector #hich allo#s the

respondent to select multiple options that include positive and neative impacts o+ IaaS/ -he

collected data #ill be analyed by convertin them in to percentae and determinin the

#eihtae o+ each option by raphically representin them in pie charts or bar raphs sho#in

the percentae o+ each option chosen by the employees o+ oraniation/

23


24/44

-he data collected +rom 1uestions that are closed ended and provides options based on !i0ert

scale Chattacher9ee, nol, '(7' has statements that indicate extent o+ areement by

respondents stronly disaree to stronly aree/ -he responses o+ this 1uestions are sereated

and the number per each cateory are counted and their percentae is calculated considerin the

total options as hundred percent and calculatin the #eihtae o+ each option out o+ that hundred

percent/ -he responses o+ open ended 1uestions consist o+ phrases that ive respondent6s insiht

reardin the 1uestion/ -hese ans#ers #ill be analyed by the roup members by interpretin

the options and chec0 #hether they match #ith the options provided by other respondents/ I+

everyone provides a di++erent options in the others +ield provided it #ill be chec0ed #hether the

option provided is o+ potential value based on the 1uestion and the research aspects/ I+ it is o+

value to the research it #ill be added in the list o+ options li0e merits or demerits and i+ it is not,

the option #ill be discarded or inored/ @or analyin the data the tools li0e oole analytics and

other analytical tools are used to interpret the data/

-he survey is conducted throuh Doole +orms #here all the 1uestions #ith their respective

options are placed and the lin0 to this +orm is sent to selected employees +rom I- and IS

departments #or0in in :;< *linic/ -he survey re1uires authentication throuh Dmail #here

the respondents los in usin their credentials and access the survey/ +ter the respondent

+inishes the survey the responses ets recorded and sent to the respective oole +orms account

+rom #hich the survey is created/ +ter the responses o+ all the respondents ets recorded the

oole +orms tool provides tools to analye the data and convert it in to the Draphical

Representation li0e pie charts, raph charts etc/ #hich helps it easy to understand the in+ormation

to dra# conclusions/

24


25/44

Res$lts Disc$ssion

@ollo#in in detail explanation ives an idea +rom the employeeKs perspective that is #or0in in

in+ormation technoloy departments o+ health care business/

90. "at are t"e c$rrent clo$' sol$tions t"at are $se' in )o$r or#aniationE

In the current scenario, amon the iven cloud solutions the oraniation opted +or SaaS solution

over the other cloud solutions since the technoloies in this service support the #eb services i/e/

SaaS is closely related to the application service provider SP/ 2hich implies SaaS

applications reduce the cost o+ so+t#are o#nership as #ell as reduce the cost o+ licensin

so+t#are/ Even thouh IaaS is the most +lexible cloud>computin model +or automated

deployment o+ servers, the IaaS customers have to pay on per>use basis the providers o#n the

system manaement & monitorin #ill become di++icult +or the clients/ Jraniations rely on

PaaS +or 0ey services such as Gava development, application hostin, etc/, i+ the PaaS vendors

25


26/44

chane the development road map, i/e/, provider chanes supportin a certain prorammin

lanuae, then the users #ill be +orced to chane lanuae used or the provider itsel+ #hich is

di++icult and leads to disruptive steps/

93. Do )o$ t"in= applications relate' to "ealt" care are e%%icientl) s$pporte' /) clo$'E

Employees #or0in in health care business al#ays have insecurity and constantly chec0 on any

unapproved access or loss o+ sensitive data #hen dependin on third party security suppliers and

cloud service vendors/ -he in+ormation that #ill be shared bet#een the distinctive parties #ill be

encrypted at rest and in transit as #ell as in process, #hich implies that the security issues #ith

the medical in+ormation have been met to some deree #hich is #hy the ac0no#ledment rate

+or the 1uestion is '(L more than the neutral opinion/

9;. o: satis%ie' are )o$ :it" t"e c$rrent clo$' applicationsE

26


27/44

)espite the +act that cloud computin in healthcare services is about developin an interest #ith

a couple o+ success+ul executions and numerous papers simply utilie the expression McloudM

synonymously to use Mvirtual machinesM or MelectronicM #ith no depicted advantae o+ the cloud

paradim/ -he reatest daner to the selection in the health services area is brouht on by

includin third party cloud partners? numerous issues o+ in+ormation sa+ety and security are still

to be explained/ 8ntil then, cloud computin is supported more in particular, individual

components, +or example, +lexible, pay>per>use and expansive net#or0 access, as opposed to as

the cloud all alone/

94. !t :"at sta#e is )o$r or#aniation in ter&s o% In%rastr$ct$re as a Serice (IaaSE

27


28/44

-he ma9ority o+ the oraniations aree that IaaS is in its trial phase since itKs important +or the

oraniation to #or0 on the issues that the clients miht encounter #hile usin it, i/e/, the clients

have to be accustomed #ith the characteristics o+ this environment that include automation o+

administrative tas0s, dynamic scalin and des0top virtualiation// @or a medical oraniation, it

is very important to maintain the security o+ the data +or #hich the complete 0no#lede o+ this

particular cloud solution is mandatory/ Since +e# areas o+ the in+rastructure have not been

ans#ered as yet the oraniation must probably be discussin over them and the parts that the

oraniation is clear about have already started usin the in+rastructure +or ood/

95. "at are t"e #reatest /arriers %or a'option o% t"e IaaS in )o$r or#aniationE

28


29/44

-he employees o+ :;< clinic voted +or ris0 as biest challene they are +acin to implement

IaaS/ In health care sector, it is very important to have patient6s data protected/ -he next ma9or

barriers are observed as physical control over in+ormation and data sovereinty and privacy/ 2e

have to aree that the physical control #ill be trans+erred to third party vendors or service

providers, as it is their business to provide in+rastructure as service/ -he service providers must

come up #ith solutions about this concerns and sho# success+ul implementation +or removin

this barriers/

9B. o: li=el) :ill )o$ contin$e to $se present clo$' sericesE

2&


30/44

Since the oraniation is #ell e1uipped and also has sound 0no#lede o+ the current cloud

service there is no probability #here the oraniation #ould be inclined to chane the cloud

service/ I+ there are any issues in the present cloud service that are le+t ans#ered or not

responsive, then the manaement miht #ant to chane the cloud service/ -he issue probably

#ould be a ris0 o+ data breach, #hich sometimes may or may not occur because any cloud

service #ill o throuh this threat some or the other time/ -he ma9ority o+ the times data

breachin is not an issue #ith the cloud service that the oraniation is currently usin, then there

is a lo# chance o+ chane over/

9. "at 'o )o$ t"in= t"e &ain i&pact o% IaaS :ill /e on "ealt" care oer t"e ne7t %ie

)earsE

3'


31/44

-he health care industry al#ays ma0es money on providin e++icient services to customers/ s

time passes, #e may even have online doctors and patient6s in+ormation should be completely

online '4FN +or ivin access to doctors bein at remote locations/ In this scenario, the cloud

service provides are important as they need to store all the data and ive access to doctors/ -he

31


32/44

doctors doesn6t li0e to spend much on in+rastructure and al#ays try to reduce ris0 o+ maintainin

it, as it is not hisFher core pro+icient area/ Jn the other side, everyone #ants to have ris0less

business #hile dealin #ith customers/ So de+initely #e #ould +orecast that IaaS #ould increase

#ith hue impact on lobal health care business mar0ets/

98. "at is )o$r c$rrent leel o% =no:le'#e on IaaS clo$'E

In the IaaS cloud the third>party provider hosts the hard#are, so+t#are, servers and storae on

behal+ o+ its clients, #hich ma0es it easier +or the clients to et e++iciency #ith the in+rastructure/

@rom the surveys #e have learned the ma9ority o+ the sta++ is +amiliar #ith IaaS cloud #hich

implies that not many resources are needed to et their employees come to the very +amiliar

one/

32


33/44

91. "at are t"e critical &eas$res to /e consi'ere' i% IaaS is i&ple&ente' in "ealt" careE

-he employees have voted +or security as critical measure in implementation o+ IaaS/ n

oraniation has to even chec0 +or reulatory compliance re1uirements and #ould have many

obliations in the process o+ trans+ormation/ -he physical and direct access control is al#ays

#ith service providers or third>party vendors, so de+initely the security o+ data is al#ays a critical

issue to be ta0en care #ith alternatives measures readily available +or the clients/ s all this

33


34/44

business runs #ith support o+ Internet, i+ the Internet service is do#n then directly it #ill a++ect

the per+ormance and disturb the #or0 process/ It6s very important to have continuous

per+ormance ratin at hihest level especially in health care systems/

0. o: lon# "ae )o$ /een $sin# t"e serices proi'e /) t"e clo$'E

)ue to the recent chanes in health insurance portability and accountability act .IP the

cloud based services are more #idely adapted by the medical oraniation, the past year has seen

tremendous interest in potential o+ cloud computin #ith many applications set to bein at the

cloud plat+orms/

00. o: li=el) :o$l' )o$ i&ple&ent IaaS clo$' serice %or )o$r or#aniationE

34


35/44

%edical data have +e# re1uirements +or the security, con+identiality o+ the electronic health

records E.R, authoried access to the data and lon term preservation, all these re1uirements

are most li0ely ta0en care o+ by the IaaS cloud due to #hich the employees o+ the oraniation

are more inclined to implementin the service +or the oraniation/

03. o: 'o )o$ rate t"e e%%icienc) o% )o$r present clo$' sericesE

s discussed earlier every cloud service #ill experience issues #ith the data security at some or

other time, the present cloud service still has a +e# issues #ith data security and con+identiality/

Employees have still rated cloud services NF7(, In +uture as health care sector is expandin the

need to control cost o+ settin in+rastructure #ill de+initely increase/

%any service providers need to even ans#er concerns o+ oraniations on various +actors

addressed as top priority that are stoppin them +rom adoptin IaaS cloud services/ -he +actors

li0e ris0 o+ losin sensitive data and protection o+ data +rom hac0ers are very important in health

care perspective/

35


36/44

Reco&&en'ations Concl$sion

*loud service providers should +ocus more on implementin ne# security methods to health care

clients as security #as the critical measure +rom the study made on :;< clinic/ -o address the

security concern the service providers can use multi>level authentication mechanisms to access

the data to provide both physical security and data security/ -his can be achieved by adoptin the

private cloud +rom the service provider #hich is expensive than the public cloud but is more

secure as a dedicated cloud server is allocated to the client/ It is easy to ma0e private cloud

compliant to policies li0e .IP and other health care policies/ *hoose the service provider very

care+ully by 0no#in #hether they are +ollo#in all the policies and the other clients are .IP

compliant/ Cy implementin hih data security and privacy methods li0e encrypted irtual

Private Aet#or0 PA tunnels bet#een the cloud server location and client location throuh

#hich all the data trans+erred is encrypted usin stron encryption alorithms/ -he oraniations

should assume that nothin is secure, instead they should test each and every module thorouhly

+or security loop holes be+ore implementin them in health care oraniation/ I+ the service

providers can provide IaaS cloud services #ith +eatures that ive more privacy and security alon

#ith access control and dashboards that noti+y about the unauthoried access, security breach

then there #ill be a hue increase in the number o+ health oraniations that use IaaS cloud

services/

+ter success+ul completion o+ research about implementin IaaS model o+ cloud at :;< *linic,

#e +ound some +actors #hich the clinic +eels as a challene/ -his +actors have become barrier in

adoptin IaaS model I compared to SaaS model o+ cloud/ In IaaS, the client doesn6t have any

control over cloud service provider6s resources except handlin and modi+yin the applications

over cloud/ )urin the intervie# #ith *IJ and I- sta++ at :;< clinic, #e came to 0no# that

36


37/44

security and con+identiality o+ the in+ormation is the biest challene #hile implementin IaaS/

@ollo#ed by this issue, the per+ormance o+ the cloud server is another challene/ -he :;< *linic

deals #ith important in+ormation reardin patient6s health, medicines prescribed, treatment

ta0en about any health issue in the past etc/ -his in+ormation must be accessible at any iven

time/

-houh the IaaS model have some limitations reardin security and per+ormance, i+ deployed

properly, it could provide lot o+ bene+its in terms o+ reduction in cost o+ operations, reduced ris0

associated #ith maintainin in+rastructure etc/ -he :;< *linic is interested in implementin

IaaS model in comin +uture/ @rom our research it can be concluded that i+ the +ollo#in

precautions are ta0en, the IaaS model can be proved as one o+ the best advantae +or healthcare

companies?

)esinin cloud model to better deal #ith internet threats

Interatin standard security measures to avoid #eb vulnerabilities

Beepin the applications up to date #hich are deployed over cloud

@ollo#in proper authentication standards in order to avoid unauthoried access to the data etc/

-he mainstream vendors such as IC%, %2are, %icroso+t etc/ have provided detailed uideline

about ho# to secure the cloud plat+orm by releasin documentation/ @inally, #ith the

advancement in technoloy and security measures, the IaaS #ould be rapidly implemented

across healthcare companies/

37


38/44

Re%erences

7/ Chattacher9ee, nol, MSocial Science Research? Principles, %ethods, and PracticesM

'(7'/ -extboo0s *ollection/ Coo0 3/http?FFscholarcommons/us+/eduFoaOtextboo0sF3/'/ San9ay P/ hu9a7, Sindhu %ani7 & Gesus


39/44

/ Aabil Sultan '(74, H%a0in use o+ cloud computin +or healthcare provision?

Jpportunities and challenes, International Gournal o+ In+ormation %anaement 34

'(74 7NN7$4/

7(/ Giunn>2oei !ian, )avid */ ;en, ;en>-in 2an '(74, Hn exploratory study to

understand the critical +actors a++ectin the decision to adopt cloud computin in -ai#an

hospital, International Gournal o+ In+ormation %anaement 34 '(74 '$ 3"/

00. *arlos Jberdan Rolim, @ernando !ui Boch, *arlos Cec0er 2estphall, Gore 2erner,

rmando @racalossi, Diovanni Schmitt Salvador '(7(, H *loud *omputin Solution

+or Patient6s )ata *ollection in .ealth *are Institutions, '(7( Second International

*on+erence on e.ealth, -elemedicine, and Social %edicine

7'/ H*loud *omputin> Cene+its, ris0s and recommendations +or in+ormation security,

European Aet#or0 and In+ormation Security ency EAIS

73/ Retrieved +rom? https?FF###/enisa/europa/euFactivitiesFris0>

manaementF+ilesFdeliverablesFcloud>computin>ris0>assessment

74/ In+rastructure as a Service IaaS by *)2

Retrieved +rom? http?FF#ebob9ects/cd#/comF#ebob9ectsFmediaFpd+FSolutionsFcloud>

computinF*loud>IaaS/pd+

75/ dvancin .ealthcare )elivery #ith *loud *omputin by European *oordination

*ommittee o+ the Radioloical, Electromedical and .ealthcare I- Industry

Retrieved +rom?http?FF###/cocir/orF+ileadminF4/4OOe.ealthFe.ealthO-ool0itOIA-O'(7'Ochap'/pd+

7"/ *loud *omputin

Retrieved +rom?

3&
https://www.enisa.europa.eu/activities/risk-management/files/deliverables/cloud-computing-risk-assessmenthttps://www.enisa.europa.eu/activities/risk-management/files/deliverables/cloud-computing-risk-assessmenthttp://webobjects.cdw.com/webobjects/media/pdf/Solutions/cloud-computing/Cloud-IaaS.pdfhttp://webobjects.cdw.com/webobjects/media/pdf/Solutions/cloud-computing/Cloud-IaaS.pdfhttp://www.cocir.org/fileadmin/4.4__eHealth/eHealth_Toolkit_INT_2012_chap2.pdfhttps://www.enisa.europa.eu/activities/risk-management/files/deliverables/cloud-computing-risk-assessmenthttps://www.enisa.europa.eu/activities/risk-management/files/deliverables/cloud-computing-risk-assessmenthttp://webobjects.cdw.com/webobjects/media/pdf/Solutions/cloud-computing/Cloud-IaaS.pdfhttp://webobjects.cdw.com/webobjects/media/pdf/Solutions/cloud-computing/Cloud-IaaS.pdfhttp://www.cocir.org/fileadmin/4.4__eHealth/eHealth_Toolkit_INT_2012_chap2.pdf


40/44

https?FFen/#i0ipedia/orF#i0iF*loudOcomputin

!ppen'i7

S$re) 9$estionnaire (Meas$res an' C"allen#es to I&ple&ent I!!S in ealt" care

sector.

0. "at is t"e c$rrent clo$' sol$tions t"at are $se' in )o$r or#aniationE

/ So+t#are as a Service e// Exchane online, Cusiness Productivity Jnline Suite,

*R% Jnline, Sales+orce/com

4'
https://en.wikipedia.org/wiki/Cloud_computinghttps://en.wikipedia.org/wiki/Cloud_computing


41/44

C/ In+rastructure as a Service e// Private cloud, 2indo#s Server and System *entre,

%2are

*/ Plat+orm as a Service e// 2indo#s ure, @orce/com, Doole pp Enine etc/

Jther, Please Speci+y/

)/ Private *loud/

3. Do )o$ t"in= applications relate' to "ealt" care are e%%icientl) s$pporte' /) Clo$'E

/ Stronly disareeC/ )isaree

*/ Aeutral

)/ reeE/ Stronly ree/

;. o: satis%ie' are )o$ :it" t"e c$rrent clo$' applicationsE

/ Stronly disaree

C/ )isaree*/ Aeutral

)/ ree

E/ Stronly ree/

4. !t :"at sta#e is )o$r or#aniation in ter&s o% In%rastr$ct$re as a Serice (IaaSE

/ Aot involved or discussin

C/ )iscussion*/ -rial)/ 8sin

E/ Implementation

5. "at are t"e #reatest /arriers %or a'option o% t"e IaaS in )o$r or#aniationE

/ )ata sovereinty & privacy

C/ Physical control

*/ pplication model

)/ Existin in+rastructure

E/ Reulatory compliance

41


42/44

@/ Deoraphic proximity

D/ Ris0

./ endor loc0 in

I/ Interation #ith existin systems

G/ Aot sure

B/ Jther please Speci+y

B. o: li=el) :ill )o$ contin$e to $se present clo$' sericesE

/ ery li0elyC/ Some#hat li0ely*/ Aeutral

)/ Some#hat unli0ely

E/ ery unli0ely

. "at 'o )o$ t"in= t"e &ain i&pact o% IaaS :ill /e on ealt" care oer t"e ne7t %ie

)earsE

/ bility to o++er more o+ a service to health careC/ !ess time Spent updatin in+rastructure/

*/ Increased security ris0/

)/ Reduced security ris0/E/ Reduced I- department headcount

@/ Improved productivity and e++iciency in health care operations

D/ Reduced productivity and e++iciency./ Ao *hane

I/ Jthers, please speci+y/

8. "at is )o$r c$rrent leel o% =no:le'#e in IaaS clo$'E

/ I am 9ust beinnin to +amiliarie mysel+

C/ I am relatively +amiliar

*/ I am +amiliar

)/ I am very +amiliar

1. "at are t"e critical &eas$res to /e consi'ere' i% IaaS is i&ple&ente' in ealt"

careE

/ Security

C/ Interation #ith Existin I-

*/ Privacy)/ -ransparency o+ rchitecture

E/ vailability

42


43/44

@/ @unctionalityFcustomiation/

D/ Per+ormance/

./ Policies and reements/I/ Jthers, Please Speci+y/

0. o: lon# "ae )o$ /een $sin# t"e serices proi'e /) t"e clo$'E

/ !ess than " monthsC/ 7 year to less than 3 years

*/ 3 years to less than " years

)/ " years or more77/ o: li=el) :o$l' )o$ i&ple&ent IaaS clo$' serice %or )o$r or#aniationE

/ ery li0ely

C/ Some#hat li0ely

*/ Aeutral)/ Some#hat unli0ely

E/ ery unli0ely

03. o: 'o )o$ rate t"e e%%icienc) o% )o$r present clo$' sericesE

Dive ratin on scale o+ 7(

7

'

3

4

5

"

N

$

7(

43


44/44

0;. Do )o$ "ae an) s$##estions or co&&ents %or i&ple&entin# IaaS in ealt"care

sectorE

Provide your ans#er in the text box belo#/

Documents

MIS 584 Final Capstone Project Report- Group13.docx