help button home button JAMIA Hate scrolling?
HOME HELP FEEDBACK SUBSCRIPTIONS ARCHIVE SEARCH
First published January 31, 2005 as JAMIA PrePrint; doi:10.1197/jamia.M1681
Journal of the American Medical Informatics Association 2005;12(3):263-268
© 2005 American Medical Informatics Association

A more recent version of this article appeared on May 1, 2005
This Article
Right arrow Full Text (PDF)
Right arrow All Versions of this Article:
M1681v1
12/3/263    most recent
Right arrow Submit a response
Right arrow Alert me when this article is cited
Right arrow Alert me when eLetters are posted
Right arrow Alert me if a correction is posted
Services
Right arrow Similar articles in this journal
Right arrow Similar articles in PubMed
Right arrow Alert me to new issues of the journal
Right arrow Download to citation manager
Right arrow reprints & permissions
Citing Articles
Right arrow Citing Articles via HighWire
Right arrow Citing Articles via Google Scholar
Google Scholar
Right arrow Articles by Sax, U.
Right arrow Articles by Mandl, K. D.
Right arrow Search for Related Content
PubMed
Right arrow PubMed Citation
Right arrow Articles by Sax, U.
Right arrow Articles by Mandl, K. D.

Submitted on August 20, 2004
Accepted on December 20, 2004

Wireless Technology Infrastructures for Authentication of Patients: PKI that Rings

Ulrich Sax PhD1*, Isaac Kohane MD, PhD2, and Kenneth D. Mandl MD, MPH2

Affiliation of the authors: 1 Children's Hospital Informatics Program, Children's Hospital Boston, Boston, MA; Harvard Medical School, Boston, MA; 2 Children's Hospital Informatics Program, Children's Hospital Boston, Boston, MA; Division of Emergency Medicine, Children's Hospital Boston, Boston, MA; Harvard Medical School, Boston, MA

* To whom correspondence should be addressed.

As the public interest in consumer-driven electronic healthcare applications rises(1-3), so do concerns about the privacy and security of these applications. Achieving a balance between providing the necessary security, while promoting user acceptance, is a major obstacle in large-scale deployment of applications such as personal health records (PHRs). Robust and reliable forms of authentication are needed for PHRs, as the record will often contain sensitive and protected health information, including the patient's own annotations. Since the health care industry per se is unlikely to succeed at single-handedly developing and deploying a large scale, national authentication infrastructure, it makes sense to leverage existing hardware, software and networks. This paper proposes a new model for authentication of users to health care information applications, leveraging wireless mobile devices. Cell phones are widely distributed, have high user acceptance, and offer advanced security protocols. We propose harnessing this technology for the strong authentication of individuals by creating a registration authority and an authentication service, and examine the problems and promise of such a system.




This article has been cited by other articles:


Home page
 J. Am. Med. Inform. Assoc.Home page
D. C. Kaelber, A. K. Jha, D. Johnston, B. Middleton, and D. W. Bates
A Research Agenda for Personal Health Records (PHRs)
J. Am. Med. Inform. Assoc., November 1, 2008; 15(6): 729 - 736.
[Abstract] [Full Text] [PDF]

Home page
 NEJMHome page
K. D. Mandl and I. S. Kohane
Tectonic Shifts in the Health Information Economy
N. Engl. J. Med., April 17, 2008; 358(16): 1732 - 1737.
[Full Text] [PDF]

Home page
 J. Am. Med. Inform. Assoc.Home page
J. D. Halamka, K. D. Mandl, and P. C. Tang
Early Experiences with Personal Health Records
J. Am. Med. Inform. Assoc., January 1, 2008; 15(1): 1 - 7.
[Abstract] [Full Text] [PDF]


HOME HELP FEEDBACK SUBSCRIPTIONS ARCHIVE SEARCH
Copyright © 1994 by the American Medical Informatics Association.