Emergency Access Authorization for Personally Controlled Online Health Care Data
Emergency Access Authorization for Personally Controlled Online Health Care Data
复制标题
DOI：
10.1007/s10916-010-9475-2
复制
发表时间：
2012-02-01
影响因子：
5.3
通讯作者：
Zhong, Sheng
中科院分区：
文献类型：
--
作者：
Chen, Tingting;Zhong, Sheng
个人控制的健康记录(PCHR)系统已经出现，允许患者控制自己的医疗数据。在PCHR系统中，对患者数据的所有访问权限都是由患者授予的。然而，在许多紧急情况下，当需要立即就医时，患者不可能现场参与准入授权。为了解决患者缺席时的紧急访问授权问题，我们考虑了两种情况：a)请求者已经在PCHR系统中，但没有获得患者健康记录的访问权限；b)请求者甚至没有PCHR系统中的帐户来提交其请求。针对这两种情况，我们提出了一种利用加权投票和源认证密码技术进行紧急访问授权的方法。我们的方法为紧急访问授权提供了一种有效、安全和私密的解决方案，使现有的PCHR系统框架更加实用，从而改善了患者使用PCHR系统时的医疗保健体验。我们已经实现了一个原型系统作为概念验证。
Personally controlled health records (PCHR) systems have emerged to allow patients to control their own medical data. In a PCHR system, all the access privileges to a patient's data are granted by the patient. However, in many emergency cases, it is impossible for the patient to participate in access authorization on site when immediate medical treatment is needed. To solve the emergency access authorization problem in the absence of patients, we consider two cases: a) the requester is already in the PCHR system but has not obtained the access privilege of the patient's health records, and b) the requester does not even have an account in the PCHR system to submit its request. For each of the two cases, we present a method for emergency access authorization, utilizing the weighted voting and source authentication cryptographic techniques. Our methods provide an effective, secure and private solution for emergency access authorization, that makes the existing PCHR system frameworks more practical and thus improves the patients' experiences of health care when using PCHR systems. We have implemented a prototype system as a proof of concept.