PKI-based secure mobile access to electronic health services and data.

Area of Science:

• Computer Science
• Information Security
• Health Informatics

Background:

• E-health systems require robust security for sensitive patient data.
• Mobile devices are increasingly used in healthcare, necessitating secure remote access.
• Public Key Infrastructure (PKI) and Attribute Certificates (ACs) offer potential solutions for e-health security.

Purpose of the Study:

• To investigate the application of Attribute Certificates (ACs) within a Public Key Infrastructure (PKI) for mobile e-health networks.
• To establish a trust model for secure interactions among physicians, patients, and e-health providers.
• To evaluate the effectiveness of ACs and TLS in ensuring authentication, authorization, and confidentiality in mobile healthcare.

Main Methods:

• Proposed a trust model for mobile online health networks utilizing Attribute Certificates (ACs).
• Presented typical trust interactions among healthcare stakeholders.
• Experimentally evaluated the use of ACs with the TLS protocol over 802.11 WLAN and GPRS networks.

Main Results:

• Demonstrated that ACs and PKI can provide effective authentication, authorization, and confidentiality services in e-health.
• Showcased how ACs support secure medical mobile service provision.
• Experimental results validated the feasibility and competence of the proposed security mechanisms.

Conclusions:

• Attribute Certificates (ACs) are a viable mechanism for enhancing security and trust in mobile e-health environments.
• The integration of ACs with protocols like TLS ensures secure communication and data access for healthcare providers and patients.
• The proposed model effectively addresses the security challenges posed by the increasing use of mobile devices in healthcare.