1. Mobile Electronic Medical Records James T. Monastra Virginia Wesleyan College August 6, 2007

2. The Remote Medicine Maze

3. Entering the Maze

4. The Concept • Patient’s medical records are maintained on a secure portable device. • Information is immediately available to Emergency Technicians. • Information is available to doctors and hospital staff. • Serves as the entry point to remote medical systems.

5. State-of-the-Art • Authentication • Password / Username • Smart Cards • Particular Biometrics • Storage • Paper Filing System

6. Password / Username • Authenticates user by “something you know” • Most common authentication method • Joint responsibility • Memorization • Confidentiality • Security

7. Smart Cards • Authenticates user by “something you have” • Capable of two-factor authentication • “Pocket-sized cards with embedded integrated circuits” • User-friendly • Password concerns

8. Biometric • Authentication by “who you are” • “identification based on physiological or behavioral characteristics” • Cannot forget, lose, or give away a part of you (except for injury)

9. Commonly used Biometrics • Hand Geometry • Retina Scanner • Speaker Recognition • Fingerprint Scanner

10. Storage (Paper-filing System) • Widely accepted • Significant disadvantages • Unavailability • Illegibility • Inability to be accessed remotely

11. Solution • Biometric authentication • Mobile Electronic Device • Stealth MXP

12. Stealth MXP • Memory Experts International • Portable secure storage • Biometric & Password Authentication • Encryption

13. Requirements • Privacy (HIPAA) • Security (HIPAA) • Portability • Availability • Reliability • User Acceptance

14. Privacy and Security • Advanced Encryption Standard (AES) • HMAC-based One Time Password (HOTP) • Rivest, Shamir, Adleman (RSA) • Biometric and Password capabilities • Federal Information Processing Standard

15. Portability and Availability • USB Flash Drive • 24/7 Patient Access • ACCESS Console and Client software • Multi-patient (Family)

16. Reliability and User Acceptance • Strong Security • Easily Mobile • Cost concerns • Incentives

17. Information Partitioning • Personal Contact Information • Medical Conditions (Illness, Allergies) • Medications • Physician’s Contact Information EMERGENCY DATA PERSONAL RECORDS • Personal Contact Information • Family Contact Information • Medical Conditions (Illness, Allergies) • Medications • Complete Medical History • Physician’s Contact Information • Insurance Contact Information HOSPITAL RECORDS • Personal Contact Information • Family Contact Information • Medical Conditions (Illness, Allergies) • Medications • Complete Medical History • Physician’s Contact Information • Insurance Contact Information • Records and Specialty Contact Information

18. Information Availability Available to All No ID NO Password EMERGENCY DATA PERSONAL RECORDS Available to Selected Personnel Requires ID Requires Password HOSPITAL RECORDS Available to Selected Personnel Available to Medical and Hospital Personnel Requires ID Requires Password

19. An Example

20. Any Questions??