A secure patient information transfer method through delegated authorization

Abstract

Malfunctioning or stopping of IoT equipment caused by failure to apply the security module can be fatal enough to threaten people's lives. This study suggests a model to transmit and manage patients' health and medical information safely through authorization in the IoT environment. Different with preceding studies that focus on saving patient information on the servers or improving access control, the proposed model considers threats related to process of patent information with efficiency. This study introduces a model where patients authorize representatives, who will be authenticated by hospitals, to transfer information to other hospitals safely for security, practicality, and efficiency. Patient information security transferred among hospitals via a delegated user trusted by the patient using an access token issued by Token Repository. The advantage of this model is that it does not allow staff members or hospitals to collect information without patient's consent and thus reduces the risk of leaking patients' sensitive personal information to other places as the Token Repository saves nothing but the Access Token. © 2016 IEEE.