Securing medical records on smart phones

Abstract

There is an inherent conflict between the desire to maintain privacy of one's medical records and the need to make those records available during an emergency. To satisfy both objectives, we introduce a flexible architecture for the secure storage of medical records on smart phones. In our system, a person can view her records at any time, and emergency medical personnel can view the records as long as the person is present (even if she is unconscious). Our solution allows for efficient revocation of access rights and is robust against adversaries who can access the phone's storage offline.

Developing a comprehensive information security framework for mHealth: a detailed analysis

“…User and Device Authentication: Password-based authentication is a simple and popular technique for controlling access to data in mHealth systems. However, during a critical medical situation, the owners of a healthcare record may be unconscious and unable to provide the password in order to access their own healthcare records [38]. For this reason, biometrics are another possible solution for regulating access to healthcare records as they are physical attributes which stay with the owner at all times.…”

A Healthcare Information System for Secure Delivery and Remote Management of Medical Records

“…To boost the availability of medical records, the concept of portability has been introduced into the HIS and involves a patient carrying his or her own records on portable devices. A scheme in [14] proposed storage of personal medical records on a smart phone to keep them close at hand in case of emergencies. A software prototype for a portable personal health record was presented in [11].…”

Attribute-Based Encryption with Break-Glass

“…In contrast to [6], our break-glass solution allows for the secure and traceable overruling of access control of mobile devices without the need of an online validation.…”