A systematic approach for analysis and design of secure health information systems