On the Security Policy and Privacy Protection in Electronic Health Information System

Abstract

The integration of information technology and medical techniques could benefit expanding the time and location for medical services as well as provide better medical quality that it has become a trend in medical domain. For this reason, this study proposes to develop an integrated healthcare information system. Furthermore, based on user privacy and system information security, the key in a smart national health insurance card or a patient’s fingerprint together with a doctor’s group signature and public key are utilized for retrieving electronic medical records from the system so as to protect the confidential information in the system and guarantee patients’ privacy. This system covers other relevant functions of medical record mobility, data link, information security protection, and drug conflict avoidance. In the integrated healthcare information system, a patient’s privacy could be protected through hiding. The retrieval location of medical records is always the same that doctors from different hospitals could access to the medical records through authorization. When dealing with an urgent case, the real-time medical record retrieval could effectively enhance the recovery rate. The information in the system procedure broadly covers diagnoses of patients, insurance claims, and drug collection in order to prevent doctors from prescribing wrong medicine, avoid the troublesome of insurance claim application, and reduce patients’ problem about collecting receipts.