Location-Based Patient Data Access Control via Mediator
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing personal information disclosure servers lack security measures when patients want to voluntarily disclose their information to healthcare workers within a hospital setting, as they do not account for the patient's consent and location-based access control.
Innovation Solution
An information sharing system comprising a patient terminal, a worker terminal, and an information management apparatus that uses GPS location identification, consent confirmation, and access permission determination to ensure secure disclosure of patient information to authorized healthcare workers within a medical institution.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If location-based access control is implemented for personal information disclosure, then security is improved, but device complexity increases
Solution Approach 1:
The information management apparatus serves as an intermediary between the patient terminal and worker terminal. It receives location information from both terminals, determines whether the worker terminal is at the patient's whereabouts, and controls the disclosure of personal information accordingly. This mediator approach enables secure location-based access control without requiring complex security implementations in each terminal device.
2Reliability
If patient consent mechanism is added to existing personal information disclosure system, then privacy protection is improved, but system complexity increases
Solution Approach 1:
The system requires the patient terminal to transmit a consent signal to the information management apparatus before personal information is disclosed to the worker terminal. This preliminary consent action ensures privacy protection is built into the disclosure process from the start, rather than adding complex post-disclosure verification mechanisms.
3Measurement precision
If location information is continuously monitored and transmitted, then access control accuracy is improved, but energy consumption increases
Solution Approach 1:
Both the patient terminal and worker terminal transmit location information to the information management apparatus at predetermined time intervals rather than continuously. This periodic transmission maintains sufficient location accuracy for determining whether the worker is at the patient's whereabouts while significantly reducing energy consumption compared to continuous monitoring.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
The present invention is intended to share personal information of a patient between workers involved in health care or care work. In an information sharing system 10, a patient terminal 100 accepts a request of a patient to disclose his/her personal information to a worker, and when having determined to permit the worker as a disclosure destination of the personal information based on the current location of the patient terminal 100 and the current location of a worker terminal 200, transmits, to an information management apparatus 300, disclosure permission information indicating that the personal information of the patient has been permitted to be disclosed to the worker. When having received the disclosure permission information from the patient terminal 100, the information management apparatus 300 reads the personal information of the patient from a recording medium, and transmits the personal information of the patient to the worker terminal 200 of the worker who has been permitted to be disclosed the personal information. The worker terminal 200 receives the personal information of the patient from the information management apparatus 300 and displays the personal information.