A secure end-to-end patient healthcare system, comprising: - one or more wireless medical sensors adapted to be attached to a patient's body and in communication with each other forming a body sensor network within a wireless medical sensor network including one or more body sensor networks; - λ-secure keying means incorporated into each of said wireless medical sensors for enabling secure communications between said wireless medical sensors, and - a personal security manager within the body sensor network and in communication with said one or more wireless medical sensors within said body sensor network, said personal security manager providing secure communications with backend services and providing security relationships within said body sensor network by means of said λ-secure keying means, wherein said λ-secure keying means are such that a coalition of no more thank λ compromised wireless medical sensors conceals a pairwise key between any two non-compromised wireless medical sensors and provides protection against node compromise until λ+1 wireless medical sensors have been compromised, - a healthcare card plugged into the personal security manager to form an extended personal security manager (PSMx), wherein the healthcare card includes identification information and security information for secure communication with the backend healthcare services, wherein the personal security manager includes a certificate issued by a local trust center, and wherein the system is adapted to execute a security protocol for auditing and/or access control and/or privacy protection, and/or mutual authentication of the personal security manager with the healthcare card. - one or more wireless medical sensors adapted to be attached to a patient's body and in communication with each other forming a body sensor network within a wireless medical sensor network including one or more body sensor networks; - λ-secure keying means incorporated into each of said wireless medical sensors for enabling secure communications between said wireless medical sensors, and - a personal security manager within the body sensor network and in communication with said one or more wireless medical sensors within said body sensor network, said personal security manager providing secure communications with backend services and providing security relationships within said body sensor network by means of said λ-secure keying means, wherein said λ-secure keying means are such that a coalition of no more thank λ compromised wireless medical sensors conceals a pairwise key between any two non-compromised wireless medical sensors and provides protection against node compromise until λ+1 wireless medical sensors have been compromised, - a healthcare card plugged into the personal security manager to form an extended personal security manager (PSMx), wherein the healthcare card includes identification information and security information for secure communication with the backend healthcare services, wherein the personal security manager includes a certificate issued by a local trust center, and wherein the system is adapted to execute a security protocol for auditing and/or access control and/or privacy protection, and/or mutual authentication of the personal security manager with the healthcare card.