EMR; EHR; PCEHR; healthcare system; data security; control policy; privacy protection