Oblivious Inspection: On the Confrontation between System Security and Data Privacy at Domain Boundaries

Figure 1

Reference scenario: several clients require access to the EHR from different locations and for different purposes.