Mobile Electronic Medical Records

1
Mobile Electronic Medical Records

• James T. Monastra
• Virginia Wesleyan College
• August 6, 2007

2
The Remote Medicine Maze
3
Entering the Maze
4
The Concept

• Patients medical records are maintained on a
  secure portable device.
• Information is immediately available to Emergency
  Technicians.
• Information is available to doctors and hospital
  staff.
• Serves as the entry point to remote medical
  systems.

5
State-of-the-Art

• Authentication
• Password / Username
• Smart Cards
• Particular Biometrics
• Storage
• Paper Filing System

6

• Password / Username
• Authenticates user by something you know
• Most common authentication method
• Joint responsibility
• Memorization
• Confidentiality
• Security

7

• Smart Cards
• Authenticates user by something you have
• Capable of two-factor authentication
• Pocket-sized cards with embedded integrated
  circuits
• User-friendly
• Password concerns

8

• Biometric
• Authentication by who you are
• identification based on physiological or
  behavioral characteristics
• Cannot forget, lose, or give away a part of you
  (except for injury)

9

• Commonly used Biometrics
• Hand Geometry
• Retina Scanner
• Speaker Recognition
• Fingerprint Scanner

10

• Storage (Paper-filing System)
• Widely accepted
• Significant disadvantages
• Unavailability
• Illegibility
• Inability to be accessed remotely

11
Solution

• Biometric authentication
• Mobile Electronic Device
• Stealth MXP

12

• Stealth MXP
• Memory Experts International
• Portable secure storage
• Biometric Password Authentication
• Encryption

13

• Requirements
• Privacy (HIPAA)
• Security (HIPAA)
• Portability
• Availability
• Reliability
• User Acceptance

14

• Privacy and Security
• Advanced Encryption Standard (AES)
• HMAC-based One Time Password (HOTP)
• Rivest, Shamir, Adleman (RSA)
• Biometric and Password capabilities
• Federal Information Processing Standard

15

• Portability and Availability
• USB Flash Drive
• 24/7 Patient Access
• ACCESS Console and Client software
• Multi-patient (Family)

16

• Reliability and User Acceptance
• Strong Security
• Easily Mobile
• Cost concerns
• Incentives

17
Information Partitioning

• Personal Contact Information
• Medical Conditions (Illness, Allergies)
• Medications
• Physicians Contact Information

EMERGENCY DATA
PERSONAL RECORDS

• Personal Contact Information
• Family Contact Information
• Medical Conditions (Illness, Allergies)
• Medications
• Complete Medical History
• Physicians Contact Information
• Insurance Contact Information

HOSPITAL RECORDS

• Personal Contact Information
• Family Contact Information
• Medical Conditions (Illness, Allergies)
• Medications
• Complete Medical History
• Physicians Contact Information
• Insurance Contact Information
• Records and Specialty Contact Information

18
Information Availability
Available to All No ID NO Password
EMERGENCY DATA
PERSONAL RECORDS
Available to Selected Personnel Requires
ID Requires Password
HOSPITAL RECORDS
Available to Selected Personnel Available to
Medical and Hospital Personnel Requires
ID Requires Password
19
An Example
20

• Any Questions??