Identity-Based Federated Access to Medical Records across Healthcare Networks

Abstract

One of the important problems in our hospitals is the secure and on-time availability of patient medical records across different health-care institutions, since these are independent information systems with different ambiguity identity verification schema. Cross-sectoral care-seeking in multi-tier healthcare systems is results in poor interoperability between primary care center and hospitals, delaying treatment, duplicative diagnostics, and additional administrative efforts. In this paper, we present an identity-based secure federated framework for restricted access to EMRs in distributed healthcare networks.The proposed system combines face biometric verification with one-time password-based validation so that patients can access their records in a patient centric and secure fashion (without needing to carry any physical identification documents). Federated access model enables accredited healthcare providers to pull medical records on demand and retain the data ownership in institutional control, and also reduces the data redundancy. Clinical decision support (CDS) capabilities, realized by embedding the pre-trained medical text analysis services, help health care practitioners towards the safety verification of drugs and easy report interpretation while preserving rather than overriding clinical judgment. Authorization policies, accountability and regulatory compliance are reinforced by role-based access control and detailed audit logging. The framework is a scalable, inter-operable and real-world deployable across various healthcare environments thereby fostering better continuity of care and efficiency in operations.