Electronically Readable Identifier for Secure Patient Data Transmission
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing technologies lack secure methods for transmitting patient health information to emergency medical personnel and do not allow individuals to create and update their personal medical databases using portable scanning technology.
Innovation Solution
A system that uses an electronically readable identifier (ERI) to store and transmit patient health information, allowing individuals to input and update their medical data, which can be retrieved using mobile devices or portable devices, ensuring secure transmission to authorized personnel.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If barcode scanning technology is used to transmit medical information, then information accessibility is improved, but security and authorization control deteriorate
Solution Approach 1:
The system performs preliminary actions by pre-registering authorized personnel and devices, creating authorization records in the database before actual medical information transmission occurs. This ensures that security verification is already in place when emergencies occur, resolving the contradiction by preparing security controls in advance rather than creating them during time-critical situations.
Solution Approach 2:
The system implements feedback mechanisms where the database verifies device identifiers and authorization credentials in real-time during information transmission. The system provides feedback by confirming whether the requesting device is authorized, and only transmits information to verified devices, thus maintaining security while enabling accessibility.
2Loss of information
If a centralized database is used to store medical information, then information completeness is improved, but transmission security and access control worsen
Solution Approach 1:
The system introduces an intermediary authorization layer between the centralized database and requesting devices. The database stores complete medical information centrally, but an authorization mechanism acts as an intermediary that verifies device credentials and controls information flow, thus maintaining both information completeness and transmission security.
Solution Approach 2:
The system applies local quality by providing different access levels to different authorized devices based on their specific credentials and the nature of the medical information requested. Not all authorized devices receive all information, and access rights are tailored to specific needs, maintaining security while ensuring appropriate information completeness for each use case.
3Loss of time
If mobile devices are used to scan and transmit information, then response time in emergencies is improved, but information verification and authentication worsen
Solution Approach 1:
The system performs preliminary authentication by pre-registering mobile devices and storing their identifiers in the database before emergency situations occur. When a device scans a barcode, the verification process simply checks against pre-stored authorization records rather than performing complex real-time authentication, thus maintaining fast response time while ensuring secure verification.
Data Source
AI summary
A method for transmitting personal health information from a databank to a health facility. An individual's health information is stored in a database, and the information is sent to authorized users as needed. The information is stored in the database by coding an individual's private file with a unique identifying number. The individual is provided with an electronically readable identifier (ERI) that corresponds to the unique identifying number. The ERI can be scanned by medical personnel with the appropriate scanner. The scanner is authenticated by the database, and the information corresponding to that individual is sent back to the scanner for use by the emergency medical personnel. The health information can also be sent to a hospital. The entire process requires authentication of the medical personnel and validation of the ERI for security purposes.