CHAPTER 27 Security and Privacy for Mobile Health-Care (m-Health) Systems 685 27.4. STATE OF THE ART DESIGN FOR HEALTH INFORMATION PRIVACY AND SHARING (HIPS) 27.4.1. Entities and Definitions The following entities are involved in the HIPS system. Patient is the user of HIPS and is referred to as the combination of a person and his/her computing facilities (personal desktop, or any wireless-enabled portable devices [6, 33­35]). Physician including Delegator and Delegatee denotes health-care professionals such as doctors, nurses, pharmacists, and any other individuals licensed to provide health-care services. Similar to patient, physician refers to a person and his/her computing facilities. In the information sharing procedure, we will refer to the physician who shares his/her patients' information as the dele- gator, and the physician with whom the infor- and is in charge of properly assigning delegatees on the delegator's behalf. A-server (authentica- tion server) is a trusted server run by the gov- ernment (e.g., NHIN and HHS) and placed in local offices, responsible for authenticating physi- cians to determine their eligibility for accessing a particular patient's PHI in emergencies. P-device will then be informed by the A-server regard- ing whether the authenticating physician has the access right to operate P-device. In addition to the entities, two important types of information need to be defined. PHI, the protected health information, denotes indi- vidually identifiable health information in any form (i.e., electronic, paper, or oral), contain- ing both sensitive and non-sensitive informa- tion. It also refers to information with respect to which there is a reasonable basis to believe the information can be used to identify the indi- vidual [36]. We are interested in the electronic