Patients’ data management system through identity based encryption

Abstract

In this paper a secure distributed system is proposed to manage patients’ information in an emergency service in order to improve efficiency. Authentication, confidentiality and automatic and robust patient identification are provided. The system elements are NFC wristbands, assigned to patients, mobile devices assigned to medical staff and a server to manage the information and verify that its use is legitimate. Patient’s identification is carried out through a keyed-Hash Message Authentication Code. In addition, a challenge-response protocol is proposed for mutual authentication of medical staff and the server using the FullIdent scheme Identity Based Encryption. The same scheme gives confidentiality to the system. The definition of this system provides a secure solution based on mHealth for managing patients in an emergency service.