The increasing digitization of healthcare services has expanded the attack surface of clinical information systems, particularly in environments that rely on cloud infrastructure and interconnected medical technologies. This paper presents a Zero Trust-oriented cloud architecture for securing electronic health records in a simulated hospital environment. The prototype was implemented on Huawei Cloud using a Virtual Private Cloud, a public subnet, security group rules, an Elastic Compute Elastic Cloud Server instance running Ubuntu Server, the Huawei Host Security Service, and OpenEMR as the electronic health record platform. Synthetic patient records generated with Synthea were used to populate the system, thereby avoiding exposure of real clinical data. To evaluate the behavior of the implemented architecture under adverse conditions, a denial-of-service stress test was conducted using Apache JMeter. The test configured 500 virtual users, a 500-second ramp-up period, and 500 iterations per thread, targeting the main HTTP resources of the OpenEMR deployment. A total of 56,331 samples were recorded, with an overall mean response time of 4,327 ms, a throughput of 76.017 requests per second, and an overall error rate of 64.60%. Although system performance degraded under simulated attack traffic, the OpenEMR application remained operational throughout the test. The results suggest that the proposed Zero Trust-oriented architecture can support service availability under controlled DoS conditions, while highlighting the need for further optimization and validation in more robust, realistic hospital network environments.

Keywords

Zero Trust Architecture; Electronic Health Records; DoS Stress Testing.