Abstract- Wireless sensor networks are going to allow for ubiquitous health monitoring, improving users ' well-being, the healthcare system, and helping to quickly react on emergency situations. Meeting the strict security needs of these ubiquitous medical applications is a big challenge, since safety and privacy of medical data has to be guaranteed all the way from the sensor nodes to the back-end services, the system has to fulfill latency needs, and lots of mobility is expected. In this paper, we introduce a deployment model for wireless sensor networks for pervasive healthcare based on the concepts of patient area networks and medical sensor networks, and propose a complete and efficient security framework for them. Our security framework is organized into three layers, addressing the operational requirements and security needs at the patient area network, medical sensor network and back-end levels. We specify how these layers are interconnected with each other as well as the needed security mechanisms that allow for the efficient and practical deployment of secure pervasive healthcare systems based on wireless sensor networks.

Advances in healthcare have led to longer life expectancy and the so-called aging population trend. The cost of caring for the elderly is rising progressively and threatens the economic well-being of many nations around the world. Instead of professional nursing facilities, many elderly people prefer living in their own homes independently. To enable successful aging in place, this research explores the roles of technology in improving the quality of life while reducing the cost of healthcare to the elder population. In particular, we propose a multi-agent service framework, called Context-Aware Service Integration System (CASIS), to integrate event-driven services with the OSGi service platform. This paper presents several context-aware service scenarios that have been developed on the proposed framework to demonstrate how context technologies and mobile web services can help enhance the quality of care for an elder's daily life.

In this paper, we present an approach for identity and access management (IAM) in the context of (cross-organizational) serviceoriented architectures (SOA). In particular, we defined a domainspecific language (DSL) for role-based access control (RBAC) that allows for the definition of IAM policies for SOAs. For the application in a SOA context, our DSL environment automatically produces WS-BPEL (Business Process Execution Language for Web services) specifications from the RBAC models defined in our DSL. We use the WS-BPEL extension mechanism to annotate parts of the process definition with directives concerning the IAM policies. At deployment time, the WS-BPEL process is instrumented with special activities which are executed at runtime to ensure its compliance to the IAM policies. The algorithm that produces extended WS-BPEL specifications from DSL models is described in detail. Thereby,