## 3 Security and Privacy Issues
### Privacy Issues  
As wireless healthcare applications are not limited to monitoring the patient's physiological data, but they also include emergency management, healthcare data access, electronic health records, _etc._ Further, individuals share their data with physicians (in a doctor-patient relationship), insurance companies (for insurance protraction), and health-coaches (as sports team trainers) or with family (as relatives' support for recovery). So there is value in addressing the privacy issues that are ethical from a social point of view. We adopt the privacy definition from National Committee for Vital and Health Statistics (NCVHS), which is consultative board of the United States Department of Health and Human Services. \"Health information privacy is an individual's right to control the acquisition, uses, or disclosures of his or her identifiable health data [68]\". To maintain privacy, patients should have the rights to determine which data should be collected, used or disclosed. Any unauthorized collection or leakage of patient data could harm the patient. For example, an unauthorized person may use the patient data (such as, patient identity) for their personal benefit, such as for medical fraud, fraudulent insurance claims, and sometimes this may even pose life-threatening risks [69]. As the medical data is very sensitive by the European Union Data Protection Directive [70], thus, there questions arise: who owns medical information, and how to control the access to medical data? Further, in wireless healthcare applications, huge amount of health and life-style data are gathered that need close attention to who controls it, what is gathered, who has rights to access it and where/how/whether that data is stored or not [71]. [PERSON] _et al._[37] have raised similar questions regarding patient privacy: (i) Who can have permission to own the data; (ii) what type of medical data, how much, and where should the data be collected; (iii) who can have permission to inspect the medical data; and (iv) to whom should medical data be revealed to without the patient's consent. In [38] the authors have discussed the privacy threats that raise questions about healthcare success: _Identity threat:_ if a patient loses or share their identity that can pose significant financial, physical and emotional harm to an individual. An insider may use patient identity for their personal benefit, e.g., he/she misuse the identity to obtain reimbursement (insurance claims) or misuse the identity to obtain medical services [72, 73]. _Access threats_: generally a patient is self involved in the access threats, if he/she fails to convey their consent properly. For example, in the absence of patient consent, an insider may damage the patient's data and harm the patient for their personal reasons. In a patient medical record system, insiders may modify the medical records intentionally. For example, suppose an insider wrongly alters the patient's medical data, such as, illness conditions, severe allergies, and specifically blood type, all of which pose life-threatening risks. For more details readers may refer to [38]. [PERSON] _et al._ have reviewed the privacy issues in a pervasive healthcare monitoring system [74]. The authors identified a few privacy issues in pervasive healthcare, such as, misuse of medical information, leakage of prescriptions, eavesdropping on medical data, and social implications for the patient. _Misuse of medical information_: The patient health data flows on a wireless channel, therefore, it is open to all the wireless threats, such as eavesdropping and snooping. Thus patient privacy could be breached if an unauthorized person captures the wireless data and misuses it [74]. _Leakage of prescriptions_: the authors pointed out that medical prescription can be a big source of privacy violations. For instance, to transfer or sell the prescription data from pharmacy/doctor to third parties, since the medical prescriptions contain detailed information about a patient, _i.e._, name, id, diseases, _etc._[74, 75].