Wireless technology infrastructures for authentication of patients: PKI that rings

Journal of the American Medical Informatics Association

Volumn 12, Issue 3, 2005, Pages 263-268

  Sax, Ulrich ^a,b   Kohane, Isaac ^a,b   Mandl, Kenneth D ^a,b  

^a BOSTON CHILDREN S HOSPITAL   (United States)

^b HARVARD MEDICAL SCHOOL   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

ACCURACY; ARTICLE; HEALTH CARE; INFORMATION PROCESSING; MASS COMMUNICATION; MEDICAL INFORMATICS; MEDICAL RECORD; MOBILE PHONE; MODEL; ORGANIZATION AND MANAGEMENT; PATIENT CODING; PRIVACY; REGISTER; TECHNOLOGY;

EID: 18044367110     PISSN: 10675027     EISSN: None     Source Type: Journal    
DOI: 10.1197/jamia.M1681     Document Type: Article

References (62)

1. For the Record: Protecting electronic health information Board CSaT N.R. Council For the Record - Protecting Electronic Health Information 1997 National Academy Press Washington, DC
2. HarrisInteractive. Two in five adults keep personal or family health records and almost everybody thinks this is a good idea. Harris Interactive Market Research. Available at: http://www.harrisinteractive.com/news/ newsletters/healthnews/HI_HealthCareNews2004Vol4_Iss13.pdf. Accessed August 19, 2004.
3. HarrisInteractive. eHealth's influence continues to grow as usage of the internet by physicians and patients increases. Available at: http://www.harrisinteractive.com/news/allnewsbydate.asp?NewsID=608. Accessed August 16, 2004.
4. HarrisInteractive. Internet penetration at 66% of adults (137 million) nationwide. The Harris Poll #18. April 17, 2002. Available at: http://www.harrisinteractive.com/harris_poll/index.asp?PID=295. Accessed August 16, 2004.
5. A. Riva, K.D. Mandl, and D.H. Oh The personal internetworked notary and guardian Int J Med Inf 62 2001 27 40
6. (IOM) IoM. Key capabilities of an electronic health record system - Letter Report. July 31, 2003. Available at: http://books.nap.edu/html/ehr/ NI000427.pdf. Accessed August 16, 2004.
7. D.F. Sittig Personal health records on the internet: a snapshot of the pioneers at the end of the 20th Century Int J Med Inf 65 2002 1 6
8. M.I. Kim, and K.B. Johnson Personal health records - evaluation of functionality and utility J Am Med Inform Assoc 9 2002 171 180
9. F.K. Ueckert, and H.U. Prokosch Implementing security and access control mechanisms for an electronic healthcare record Proc AMIA Symp 2002 825 829
10. Waegemann CP. Status report 2002: electronic health records. Boston, MA: Medical Records Institute. Available at: http://www.medrecinst.com/resources/ ehr2002/index.shtml. Accessed August 16, 2004.
11. Thompson TG, Brailer JB. The decade of health information technology: delivering consumer-centric and information-rich health care: framework for strategic action. Department of Health and Human Services. Available at: http://www.hhs.gov/onchit/framework/. Accessed August 16, 2004.
12. Markle Foundation. The Personal Health Working Group Final Report. Markle Foundation. Available at: http://www.markle.org/downloadable_assets/ final_phwg_report1.pdf. Accessed August 16, 2004.
13. F. Uckert, M. Ataian, M. Gorz, and H.U. Prokosch Functions of an electronic health record Int J Comput Dent 5 2002 125 132
14. K.D. Mandl, P. Szolovits, and I.S. Kohane Public standards and patients' control: how to keep electronic medical records accessible but private BMJ 322 2001 283 287
15. CareGroup. PatientSite (online Personal Health Record). Available at: https://patientsite.bidmc.harvard.edu/. Accessed August 16, 2004.
16. W.W. Simons, K.D. Mandl, and I.S. Kohane The PING personally controlled electronic medical record system: technical architecture J Am Med Inform Assoc 12 2005 47 54
17. I.S. Kohane, H. Dong, and P. Szolovits Health information identification and de-identification toolkit Proc AMIA Symp 1998 356 360
18. IEEE-USA. Voluntary Healthcare Identifier. IEEE-USA, Washington DC. June 17, 2004. Available at: http://www.ieeeusa.org/policy/positions/ healthcareidentifier.html. Accessed November 9, 2004.
19. Entner R. Third Quarter 2002 U.S. Wireless Forecast 2000-2006. The Yankee Group, Boston, MA. Available at: http://techupdate.zdnet.com/techupdate/ stories/main/Third_Quarter_2002_US_Wireless_Forecast_2000_2006.html?tag=tu.tk. 6656.f1. Accessed August 16, 2004.
20. Scarborough Research. Hispanics' cellular bills are 10% greater than the international average. Scarborough Research. Available at: http://www. scarborough.com/press_releases/Hispanic%20cell%20phone%20FINAL%20English%202.18. 04.pdf. Accessed August 16, 2004.
21. Horrigan J. Consumption of information goods and services in the United States. Pew Internet & American Life. Available at: http://www.pewinternet. org/pdfs/PIP_Info_Consumption.pdf. Accessed August 16, 2004.
22. C.A. Sneiderman, and M.J. Ackerman Cellular radio telecommunication for health care: benefits and risks. A brief review J Am Med Inform Assoc 11 2005 479 481
23. Nielsen W. Mobile phones can be utilized in critical areas such as healthcare. 1st-In-Cell-Phones.com. Available at: http://www.1st-in-cell-phones. com/21908-mobile-phone-applications.html. Accessed August 16, 2004.
24. Schuerenberg BK. Will health care get smart? Mobile Health Data. Available at: http://mobilehealthdata.com/article.cfm?articleId=494&banner= b1. Accessed August 16, 2004.
25. Bielli E, Carminati F, La Capra S, Lina M, Brunelli C, Tamburini M. A wireless health outcomes monitoring system (WHOMS): development and field testing with cancer patients using mobile phones. BMC Med Inform Decis Mak. 4(1):7.
26. Personal Health Working Group. Personal Health Working Group - Final Report. Boston, MA: 2003.
27. S.W. Smith Probing end-user IT security practices through homework The EDUCAUASE Quarterly 27 4 2004 68 71
28. R.W. Proctor, M.C. Lien, K.P. Vu, E.E. Schultz, and G. Salvendy Improving computer security for authentication of users: influence of proactive password restrictions Behav Res Methods Instrum Comput 34 2 2002 163 169
29. VeriSign White paper. The security risks of using passwords. Available at: http://www.safescrypt.com/resources/PasswordWhitePaper.pdf. Accessed August 16, 2004.
30. Tardo J, Alagappan K. SPX: Global authentication using public key certificates. Proc IEEE Symp. Research in Security and Privacy. May 20-22, 1991:232-244.
31. C. Chousiadis, I.K. Mavridis, and G.I. Pangalos An authentication architecture for healthcare information systems Health Informatics Journal 2002 8 2002 199 204
32. P. Szolovits, and I. Kohane Against simple universal health-care identifiers J Am Med Inform Assoc 1 4 1994 316 319
33. Blobel B, Kaliontzglou A, Bourka A, Georgoulas A. Report on scenarios demonstration and assessment of pilot operation (RESHEN). Available at: http://www.biomed.ntua.gr/reshen/Main/Project_Organisation/Current_Status/ current_status.html. Accessed August 16, 2004.
34. Computer Science and Telecommunications Board Technical challenges - security Committee on Enhancing the Internet for Health Applications: Technical Requirements and Implementation Strategies. Networking Health-Prescriptions for the Internet 2000 National Acadamy Press Washington, DC
35. Bourka A, Kaliontzoglou A, Polemi D, Georgoulas A, Sklavos P. PKI-based security of electronic healthcare documents. Proceedings of the SSGRR 2003R, L'Aquila, Italy, January 6-12, 2003. Available at: http://galeb.etf.bg.ac.yu/ ∼vm/cd1/papers/118.pdf. Accessed August 16, 2004.
36. Altrogge M. Public-key-infrastructure: secure obstacles (German: Sichere Stolpersteine). Network Computing. 2003;1-2.
37. HIMSS. Annual HIMSS Leadership Survey: Final Report: Providers. HIMSS. Available at: http://www.himss.org/2002survey/final_report_07.htm. Accessed August 16, 2004.
38. Tunitas. PKI readiness evaluation. Tunitas Group. Available at: http://www.tunitas.com/pages/PKI/PKI_readiness.html. Accessed August 16, 2004.
39. ITRC. Identity theft resource center. A nonprofit organization. Available at: http://www.idtheftcenter.org/index.shtml. Accessed August 16, 2004.
40. Lassmann GE. Bewertungskriterien zur Vergleichbarkeit biometrischer Verfahren (Catalogue of Criteria for Evaluating the Comparability of Biometric Methods, German only). Teletrust Germany e.V., Erfurt, Germany. Available at: http://www.teletrust.de/down/kritkat_2-0.zip. Accessed August 16, 2004.
41. Thalheim L, Krissler J, Ziegler P-M. Body check - biometric access protection devices and their programs put to the test. c't, Magazin für Computertechnik heise-Verlag, Hannover, Germany. Available at: http://heise.de/ct/english/02/11/114. Accessed March 11, 2005. (11/2002):114-123.
42. MeT. MeT Consistent User Experience. Mobile electronic Transactions (Ericsson, Panasonic, NEC, Nokia, Siemens et al.). Available at: http://www.mobiletransaction.org/pdf/R200/specifications/MeT_CUESpec_v200.pdf. Accessed August 16, 2004.
43. Scarborough Research. Atlanta, GA; Detroit, MI; and Austin, TX ring the loudest when it comes to cell phone ownership. Scarborough_Research. Available at: http://www.scarborough.com/press_releases/10_03_cellphone_local%20market. pdf. Accessed August 16, 2004.
44. Scarborough Research. Cell phone ownership grows 29 percent from 1999-2001 according to new Scarborough study. Available at: http://www. scarborough.com/press_releases/Cell%20Phone%20Ownership%20Increase%203.18.02. doc. Accessed August 16, 2004.
45. B.L. Chang, S. Bakken, and S.S. Brown Bridging the digital divide: reaching vulnerable populations J Am Med Inform Assoc 11 2004 448 457
46. Healy E. GSM fuels a cell-phone industry awaiting 3G. Electronic Design. Available at: http://www.elecdesign.com/Articles/ArticleID/2419/2419.html. Accessed August 16, 2004.
47. In-Stat MDR. 3G deployment better late than never. In-Stat and MicroDesign Resources (MDR). Available at: http://www.instat.com/press.asp?ID= 919&sku=IN0401274GW. Accessed August 16, 2004.
48. GSA. The numbers add up with GSM and WCDMA. Global mobile Suppliers Association (GSA). Available at: http://www.gsacom.com/news/gsa_166.php4. Accessed October 26, 2004.
49. ISO. ISO 7816-2 (1988): Identification cards - integrated circuit(s) cards with contacts, Part 2: dimensions and locations of the contacts. Available at: http://www.cyberd.co.uk/support/technotes/smartcards.htm. Accessed October 26, 2004.
50. ISO. ISO/IEC 7816-3 (1989): Identification cards - integrated circuit(s) cards with contacts, Part 3: electronic signals and transmission protocols. Available at: http://www.cyberd.co.uk/support/technotes/smartcards.htm. Accessed October 26, 2004.
51. ISO. ISO/IEC 7816-1 (1988): Identification cards - integrated circuit(s) cards with contacts, Part 1: physical characteristics. Available at: http://www.cyberd.co.uk/support/technotes/smartcards.htm. Accessed October 26, 2004.
52. ETSI. Digital cellular telecommunications system (Phase 2+); specification of the subscriber identity module - mobile equipment (SIM-ME) interface. GSM 11.11 version 6.2.0 Release 1997. Available at: http://www.3gpp.org/ftp/Specs/archive/11_series/11.11/1111-620.zip. Accessed October 26, 2004.
53. Paying for fuel via mobile phone. Mobitel, Ljubljana, Slovenia. Available at: http://www.mobitel.si/eng/Press/PressReleases/Browsingbycategories/ 16Feb2004.asp. Accessed August 20, 2004.
54. Perttula K-P. UMTS security. Helsinki University of Technology. Available at: http://keskus.hut.fi/opetus/s38153/k2003/Lectures/g42UMTS_security.pdf. Accessed August 16, 2004.
55. Campbell R, Mckunas D. Analysis of third generation mobile security. Computer Science Department University of Illinois at Urbana-Champaign. June 28, 2002. Available at: http://choices.cs.uiuc.edu/MobilSec/posted_docs/ 3G_Security_Annual_Report.ppt. Accessed August 16, 2004.
56. Robinson A. Israeli scientists crack GSM mobile call security. Reuters. Available at: http://www.onlinesecurity.com/links/links568.php. Accessed August 16, 2004.
57. 3GPP. 31.102 V3.12.0 (2003-03) Technical Specification 3rd Generation Partnership Project; Technical Specification Group Terminals; Characteristics of the USIM Application (Release 1999). Available at: http://www.3gpp.org/ftp/ Specs/archive/31_series/31.102/31102-620.zip. Accessed August 16, 2004.
58. 3GPP. 3G TR 33.900 V1.2.0 (2000-01) Technical Specification 3rd Generation Partnership Project; Technical Specification Group SA WG3; A Guide to 3rd Generation Security (3G TR 33.900 version 1.2.0). Available at: ftp://ftp.3gpp.org/TSG_SA/WG3_Security/_Specs/33900-120.pdf. Accessed August 16, 2004.
59. NHII. Cornerstones for electronic healthcare. National Health Information Infrastructure 2004. Available at: http://www.hsrnet.net/nhii/materials.htm. Accessed August 16, 2004.
60. RSA. RSA SecurID tokens - the gold standard in two-factor user authentication. Available at: http://www.rsasecurity.com/node.asp?id=1157. Accessed August 16, 2004.
61. WAP Forum. Wireless application protocol WAP 2.0 - technical white paper (January 2002). Available at: http://www.wapforum.org/what/WAPWhite_Paper1.pdf. Accessed August 16, 2004.
62. Foley L, Foley J. Identity theft: the aftermath 2003. A comprehensive study to understand the impact of identity theft on known victims. Identity Theft Ressource Center (ITRC). Available at: http://www.idtheftcenter.org/ idaftermath.pdf. Accessed August 16, 2004.