Patient privacy protection using anonymous access control techniques.

Area of Science:

• Health Informatics
• Cybersecurity
• Data Privacy

Background:

• Healthcare systems face challenges in securing sensitive patient data across distributed databases.
• Maintaining patient privacy while enabling data access for multiple parties is crucial.

Purpose of the Study:

• To develop a protocol for secure and private access to health-sensitive information.
• To enable the linkage of anonymous medical records from distributed databases into a unified patient record.
• To maintain patient anonymity while allowing for identity verification in critical situations.

Main Methods:

• A novel protocol for patient authentication and authorization without revealing direct patient identification.
• Utilizing temporary, session-specific identities for healthcare service interactions.
• Linking medical records to these temporary identities for data aggregation.

Main Results:

• The protocol ensures user anonymity, message privacy, confidentiality, authentication, and authorization.
• It effectively prevents message replay attacks.
• Enables secure linkage of anonymous medical records from disparate sources into a single patient report.
• Allows for secure reverse tracking of anonymous patient data to the real identity when necessary.

Conclusions:

• The developed protocol enhances patient privacy through secure, anonymous authentication in healthcare settings.
• It aligns with European and UK data protection legislation.
• Ensures that patient real identity remains undisclosed within distributed medical records.