Integrity for Electronic Patient Record Reports

  • Authors:
  • Ana Ferreira;Ricardo Correia;Luis Antunes;Ernesto Palhares;Pedro Marques;Pedro Costa;Altamiro da Costa Pereira

  • Affiliations:
  • Biostatistics and Medical Informatics Department, Faculty of Medicine, Porto, Portugal;Biostatistics and Medical Informatics Department, Faculty of Medicine, Porto, Portugal;Computer Science Department, Faculty of Science & LIACC, Porto, Portugal;Biostatistics and Medical Informatics Department, Faculty of Medicine, Porto, Portugal;Biostatistics and Medical Informatics Department, Faculty of Medicine, Porto, Portugal;Biostatistics and Medical Informatics Department, Faculty of Medicine, Porto, Portugal;Biostatistics and Medical Informatics Department, Faculty of Medicine, Porto, Portugal

  • Venue:
  • CBMS '04 Proceedings of the 17th IEEE Symposium on Computer-Based Medical Systems
  • Year:
  • 2004

Quantified Score

Hi-index 0.00

Visualization

Abstract

The use of an EPR within a hospital is essential in order to integrate and centralize patienthealthcare information.With the introduction of this technology information securitybecomes an important issue, moreover when the EPR integrates several exam results andreports that need to be properly stored and managed.The Biostatistics and MedicalInformatics Department in Porto's Faculty of Medicine is implementing a centralizedElectronic Patient Record, the HSJ.ICU, to integrate several departments' information thatcomprises mainly electronic reports.The provision for the integrity of these documents isessential.Usually, the users of the system have blind trust in the information they access.The HSJ.ICU is implementing a process that digitally signs reports automatically, and thereforedoes not interfere with system's usability.It also provides for simple key management withthe use of only one public key pair focusing protection in one single point.The digitalsignature provides real trust in the way it prevents and detects inconsistencies or errors thatmay affect information integrity.The approach presented in this paper will guarantee thatwhen there is the need to access patient reports, whether now or in 20 years' time, those arestill trustable and valid to be integrated within the EPR.