Healthcare systems have assimilated information and communication technologies in order to improve the quality of healthcare and patient's experience at reduced costs. The increasing digitalization of people's health information raises however new threats regarding information security and privacy. Accidental or deliberate data breaches of health data may lead to societal pressures, embarrassment and discrimination. Information security and privacy are paramount to achieve high quality healthcare services, and further, to not harm individuals when providing care. With that in mind, we give special attention to the category of Mobile Health (mHealth) systems. That is, the use of mobile devices (e.g., mobile phones, sensors, PDAs) to support medical and public health. Such systems, have been particularly successful in developing countries, taking advantage of the flourishing mobile market and the need to expand the coverage of primary healthcare programs. Many mHealth initiatives, however, fail to address security and privacy issues. This, coupled with the lack of specific legislation for privacy and data protection in these countries, increases the risk of harm to individuals. The overall objective of this thesis is to enhance knowledge regarding the design of security and privacy technologies for mHealth systems. In particular, we deal with mHealth Data Collection Systems (MDCSs), which consists of mobile devices for collecting and reporting health-related data, replacing paper-based approaches for health surveys and surveillance. This thesis consists of publications contributing to mHealth security and privacy in various ways: with a comprehensive literature review about mHealth in Brazil; with the design of a security framework for MDCSs (SecourHealth); with the design of a MDCS (GeoHealth); with the design of Privacy Impact Assessment template for MDCSs; and with the study of ontology-based obfuscation and anonymisation functions for health data. / Information security and privacy are paramount to achieve high quality healthcare services, and further, to not harm individuals when providing care. With that in mind, we give special attention to the category of Mobile Health (mHealth) systems. That is, the use of mobile devices (e.g., mobile phones, sensors, PDAs) to support medical and public health. Such systems, have been particularly successful in developing countries, taking advantage of the flourishing mobile market and the need to expand the coverage of primary healthcare programs. Many mHealth initiatives, however, fail to address security and privacy issues. This, coupled with the lack of specific legislation for privacy and data protection in these countries, increases the risk of harm to individuals. The overall objective of this thesis is to enhance knowledge regarding the design of security and privacy technologies for mHealth systems. In particular, we deal with mHealth Data Collection Systems (MDCSs), which consists of mobile devices for collecting and reporting health-related data, replacing paper-based approaches for health surveys and surveillance.

M. Tech. (Department of Process Control and Computer System, Faculty of Engineering and Technology), Vaal University of Technology. / Personal health record system (PHRS) is a tool that is used in maintaining the health and wellness of an individual as well as helping with illness of an individual. PHRS gives the individual access to a wide range of credible health information, data, and knowledge. Individuals can use that access to improve their health and manage their diseases. Patients with chronic illness can track and manage their health in conjunction with their health provider, this will promote early intervention when they encounter an abnormality or complications. Continuous monitoring and storing of health information has been a challenge for patients and health providers. Personal health data monitoring and retrieval system for health providers was designed and implemented. The main aim of this study was to develop an accurate, secure and flexible personal health data monitoring and retrieval system for health providers (PHRS). This was achieved. The research showed that when a patient health information (Electrocardiogram (ECG) and temperature) was monitored, the heartbeat (ECG) sensor output the value as an analog value to the signal processing (NodeMCU) which was then converted to a digital value. The temperature sensor used in this research is a digital sensor which lowers the amount of ADC conversion that was done. The digital values are displayed on LCD, its send to a personal health data storage system which was designed for health information storage purposes. It also sends the value to a retrieval system which is an android application that is connected to the data storage system to display health information to the health providers from a remote location. Personal health data storage and the retrieval system are secure due to the Message queuing telemetry transport (MQTT) protocol used in the application layer. The MQTT protocol is secure due to the secure socket layer (SSL) which is an encryption based on presentation layer embedded inside the MQTT protocol. After the comparison of the software simulation and the prototype test, the differences in the value for the heartbeat and temperature sensor indicate 0.04 BPM and 0.04 oC which shows the accuracy of the sensing circuit. Personal health data monitoring and retrieval system developed is applicable and useful to multiple entities in and around South Africa such as; Ministry of health, hospitals, sport and recreations.