Year: 2011
Type: conference-paper
Abstract: We propose a system which enables access to the user's Personal Health Record (PHR) in the event of emergency. The \naccess typically occurs in an ad-hoc and spontaneous manner and the user is usually unconscious, hence rendering the \nunavailability of the user's password to access the PHR. The \nproposed system includes a smart card carried by the user \nat all time and it is personalized with a pseudo secret, an \nURL to the PHR Server, a secret key shared with the PHR \nServer and a number of redemption tokens generated using \na hash chain. In each emergency session, a one-time use \nredemption token is issued by the smart card, allowing the \nemergency doctor to retrieve the user's PHR upon successful authentication of his credentials and validation of the \nredemption token. The server returns the PHR encrypted \nwith a one-time session key which can only be decrypted by \nthe emergency doctor. The devised interaction protocol to \nfacilitate emergency access to the user's PHR is secure and \nefficient.
Authors: Keoh, S.L., Asim, M., Kumar, S.S., Lenoir, P.
Language: English
Subfield: Computer Networks and Communications
Field: Computer Science
Domain: Physical Sciences
Open Access status: green
OpenAlex ID: W116463800