A Secure Framework for Medical Information Exchange (MI-X) between Healthcare Providers

摘要

As the exchange of Electronic Health Records (EHRs) among different healthcare providers has become a point of interest, it poses serious security and privacy concerns. Previous work proposed to offer medical information exchange has been partially secure, expensive (in terms of messages exchanged), and sometimes requires special hardware, like smart cards, to be present with the users. In this paper, we propose a framework that allows secure exchange of EHRs among different healthcare providers. The framework provides healthcare providers with the capability of mutual authentication and patient authentication. It also ensures the privacy, integrity, and auditability of medical information being exchanged. Patients authorize a certain type of medical information to be retrieved, which helps prevent any undesired leakage of medical information unintentionally. Our exchange protocol is efficient and secure for the purpose of medical information exchange and offers a high level of security for such exchanges.