A method for securing sensitive information, the method comprising: storing patient information in a secured form in an external device that is carried by a patient; generating by a server system a first key pair comprising a first public key and a first secret key, wherein the first public key is stored in the external device and the first secret key is stored on the server system; generating by a first identification medium (106, 302A, 302B) of the first healthcare person a key pair comprising a secret key and a public key, wherein the secret key is stored within the first identification medium (106, 302A, 302B) of the first healthcare person; generating in the user terminal of the first healthcare person by a pre-installed application a second key pair comprising a public key of the user terminal and a secret key of the user terminal, wherein the secret key of the user terminal is stored in the user terminal of the first healthcare person; obtaining, by a user terminal, for authorization of the first healthcare person and the user terminal a first token including at least an expiration time, a unique identity of the first healthcare person, and a first signature, from a server system by executing by the user terminal login to the server system, wherein the login is verified by using the secret key of the user terminal and the first signature and wherein the first signature is generated using the secret key inside the first identification medium (106, 302A, 302B), wherein the first secret key is associated with the first healthcare person; obtaining, by the user terminal a second signature generated using the secret key of the user terminal, from the first identification medium (106, 302A, 302B); communicating, by the user terminal to the external device, a write request that includes at least the generated second signature; receiving, by the external device, the write request from the user terminal when the user terminal is within a proximal communication range of the external device; verifying the unique identity of the first healthcare person, by the external device, using at least the second signature received in the write request; and writing, by the user terminal, an update in the stored patient information to the external device, based on verification of at least the second signature. storing patient information in a secured form in an external device that is carried by a patient; generating by a server system a first key pair comprising a first public key and a first secret key, wherein the first public key is stored in the external device and the first secret key is stored on the server system; generating by a first identification medium (106, 302A, 302B) of the first healthcare person a key pair comprising a secret key and a public key, wherein the secret key is stored within the first identification medium (106, 302A, 302B) of the first healthcare person; generating in the user terminal of the first healthcare person by a pre-installed application a second key pair comprising a public key of the user terminal and a secret key of the user terminal, wherein the secret key of the user terminal is stored in the user terminal of the first healthcare person; obtaining, by a user terminal, for authorization of the first healthcare person and the user terminal a first token including at least an expiration time, a unique identity of the first healthcare person, and a first signature, from a server system by executing by the user terminal login to the server system, wherein the login is verified by using the secret key of the user terminal and the first signature and wherein the first signature is generated using the secret key inside the first identification medium (106, 302A, 302B), wherein the first secret key is associated with the first healthcare person; obtaining, by the user terminal a second signature generated using the secret key of the user terminal, from the first identification medium (106, 302A, 302B); communicating, by the user terminal to the external device, a write request that includes at least the generated second signature; receiving, by the external device, the write request from the user terminal when the user terminal is within a proximal communication range of the external device; verifying the unique identity of the first healthcare person, by the external device, using at least the second signature received in the write request; and writing, by the user terminal, an update in the stored patient information to the external device, based on verification of at least the second signature.