This Article Full Text (PDF) References Alert me when this article is cited Alert me if a correction is posted Services Email this article to a friend Similar articles in this journal Alert me to new issues of the journal Add to Saved Citations Download to citation manager Request Permissions Request Reprints Add to My Marked Citations Citing Articles Citing Articles via Google Scholar Citing Articles via Scopus Google Scholar Articles by Chousiadis, C. Articles by Pangalos, G. Search for Related Content PubMed Articles by Chousiadis, C. Articles by Pangalos, G. Social Bookmarking                         What's this?

Implementing Authentication (LAP) and Monitoring in Healthcare Information Systems

Informatics Laboratory, Computers Division, Faculty of Technology, Aristotle University, Thessaloniki 54006, Greece chousiad{at}auth.gr

G. Pangalos

Informatics Laboratory, Computers Division, Faculty of Technology, Aristotle University, Thessaloniki 54006, Greece pangalos{at}auth.gr

Throughout the healthcare domain, paper records and forms are being supplanted by electronic records, which are now routinely transmitted over intranets (within organizations), extranets (between organizations) and the Internet (to multiple organizations, worldwide). The potential for greater efficiency, lower costs and enhanced quality of care afforded by electronic versus paper-based records and communication in healthcare is vast. Electronic messaging is quickly becoming the standard for transmitting information in the healthcare industry. The security of transmitted information is a very critical issue.

In this article, we report on the development of a Lightweight Authentication Protocol (LAP), which makes a mobile and distributed system more secure and flexible, and we implement it in a healthcare environment where the clinicians use mobile and wireless devices like PDAs. The implementation scenario and the special characteristics of healthcare information systems are described in detail. We also propose a monitoring system that involves patient credentials in order to monitor doctor access to the medical records. Our work shows that it is possible for a PDA to have access to a system like a healthcare Web database system with reasonable performance according to the theoretical analysis.

Key Words: Authentication • cryptography • security • wireless information systems

Health Informatics Journal, Vol. 9, No. 2, 79-87 (2003)
DOI: 10.1177/1460458203009002002


CiteULike    Complore    Connotea    Del.icio.us    Digg    Reddit    Technorati    Twitter    What's this?