Abstract-Patient-controlled Personal Health Record (PHR) systems may facilitate a patient not only to share her health records with health care professionals but also to control her health privacy, in a convenient and easy way. Governed by privacy protection laws, explicit consent/permission of the respective patient is a prerequisite for sharing personal health records. However, in emergency situations, when the patient becomes unable to give consent on her PHRs, healthcare professionals of emergency care units may need to access her health history for better and safer care. In this paper, we have introduced a novel privacy-aware protocol for handling access to patient-controlled PHR by healthcare professionals in emergency situations. The protocol is for the Privacy-aware Patientcontrolled Personal Health Record (p3HR) system. It uses strong authentication using health IC cards, authorizes health care professionals and embeds emergency access report into the patient's health IC card by which we achieve non-repudiation. Use of a dynamic access token in the authorization process protects replay attack. Intuitive privacy analysis shows that the proposed solution can preserve patient's privacy from unauthorized parties while granting traceable access to personal health records by authorized healthcare professionals in emergency situations.
N. Huda et al. REF propose privacy-aware access to patient-controlled personal health records in emergency situations for better and safer care with a novel privacy-aware protocol for handling access.
Privacy-aware access to Patient-controlled Personal Health Records in emergency situations
2009 3rd International Conference on Pervasive Computing Technologies for Healthcare
2009 3rd International Conference on Pervasive Computing Technologies for Healthcare
Computer Science