Design and Implementation of Electronic Medical Record Sharing System with Privacy Protection

• Main Authors: Zhuo-Rong Lee, 李卓蓉
• Other Authors: Kuo-Hsuan Huang
• Format: Others
• Language: zh-TW
• Published: 2011
• Online Access: http://ndltd.ncl.edu.tw/handle/61025671990257162610

碩士 === 大同大學 === 資訊工程學系(所) === 99 === Most hospitals and clinics now record the medical records computerized, and output the paper-based medical records to store. For now on, most hospitals and clinics store their medical records which are paper-based. There are some disadvantages of using paper-based medical records. For example, the paper-based medical records may be damaged cause of the muggy day. It is not convenient to carry the paper-based medical records if the file is huge. By contrast, the electronic medical records can be well-preserved and convenient to carry. Besides, it is easy to share and exchange between the hospitals and clinics by using electronic medical records. Privacy is a very important issue when storing electronic medical records. According to the definition set out in the Health Insurance Portability and Accountability Act (HIPPA), the confidential section of the electronic medical record needs to be protected. Thus, a mechanism to protect the patient’s privacy is needed during exchange and sharing of electronic medical records. The privacy protection mechanism can be categorized into four types, namely anonymity, pseudonymity, unlinkability, and unobservability. In previous researches in this area, mathematical conversions and cross reference tables have been utilized to conceal the confidential part of the electronic medical records to achieve privacy protection. However, it is harder to use these methods with respect to the unlinkability and unobservability mechanisms. Thus, this thesis tries to improve on this aspect, and improves the unlinkability mechanism between the patient and the electronic medical record. Cloud computing is known for its fast computation capability and provides large storage space. Through cloud computing, the electronic medical record system in a hospital can be integrated, to facilitate the exchange and sharing of electronic medical records by updating them to be the unified forms, and to provide smaller hospitals or clinics that have fewer resources with adequate electronic medical record storage space. Besides, in order to enhancing the safety of electronic medical records, we utilize the smart card to encrypt them to achieve protecting this goal.