Authors:
André Zúquete
1
;
Helder Gomes
2
and
João Paulo Silva Cunha
1
Affiliations:
1
IEETA / Univ. of Aveiro, Portugal
;
2
IEETA / ESTGA / Univ. of Aveiro, Portugal
Keyword(s):
e-Health, authentication, public key certificates, PKI, smartcards, SSL/TLS, roles, RBAC.
Related
Ontology
Subjects/Areas/Topics:
Biomedical Engineering
;
Cloud Computing
;
Confidentiality and Data Security
;
e-Health
;
Health Information Systems
;
Platforms and Applications
Abstract:
This paper describes the design and implementation of a PKI-based e-Health authentication architecture. This architecture was developed to authenticate e-Health Professionals accessing RTS (Rede Telemática da Saúde),
a regional platform for sharing clinical data among a set of affiliated health institutions. The architecture had to accommodate specific RTS requirements, namely the security of Professionals’ credentials, the mobility of Professionals, and the scalability to accommodate new health institutions. The adopted solution uses short lived certificates and cross-certification agreements between RTS and e-Health institutions for authenticating Professionals accessing the RTS. These certificates carry as well the Professional’s role at their home institution for role-based authorization. Trust agreements between health institutions and RTS are necessary in order to make the certificates recognized by the RTS. As a proof of concept, a prototype was implemented with Windows techn
ology. The presented authentication architecture is intended to be applied to other medical telematic systems.
(More)