Multi-factor authentication using contents from disparate EHRs.

Area of Science:

• Health Informatics
• Information Security
• Medical Record Management

Background:

• Integrated patient-centric health record systems require access to data from disparate institutions.
• Authenticating patients with no current operational relationship with record-holding institutions presents a significant challenge.
• Ensuring data privacy and accuracy during cross-institutional record access is critical.

Purpose of the Study:

• To propose a novel multi-factor authentication framework for accessing patient-centric health records.
• To address the complex authentication problem arising from disparate health record sources.
• To enhance the security and accuracy of patient identity verification for health record access.

Main Methods:

• Development of a multi-factor authentication framework.
• Utilizing a trusted intermediate authority for authentication.
• Generating secondary authentication questions from medical record content.
• Managing authorization for appropriate access to health records.

Main Results:

• The proposed framework effectively uses medical record contents for secondary authentication.
• The system can disambiguate between similar patient records from different institutions.
• Successful verification of patient identity is achieved, ensuring they are who they claim to be.

Conclusions:

• The multi-factor authentication framework offers a robust solution for secure access to integrated patient health records.
• This approach enhances patient data security and privacy when accessing records from multiple sources.
• The framework facilitates reliable patient identification, crucial for patient-centric healthcare systems.