Model-Based Security Analysis of the German Health Card Architecture

The use of health-care information systems has experienced an explosive growth. However, this usage carries critical risks concerning information security that are particularly significant for health-care systems, due both to the inherent vulnerability of the devices and the significant complexity of the architectures. In order to address these risks and enable secure health-care information systems, the security analysis has to be embedded in the development and management of the systems. This work presents the results of the model-based security analysis of parts of the security architecture and security policies for the German Health Card.