Secure Prescription Handling via Broadcast Encryption and Key Management Blocks
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current automated medication dispensing systems fail to ensure the security and privacy of prescription information, and lack decentralized authentication, making them vulnerable to tampering and unauthorized dispensing.
Innovation Solution
The implementation of broadcast encryption to securely encrypt prescriptions on machine-readable media, using a key management block (KMB) that only authorized devices can decrypt, ensuring only legitimate providers can write prescriptions and dispensers can fill them.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If broadcast encryption is implemented to secure prescriptions on machine-readable media, then security and privacy of prescription information is improved, but device complexity increases due to key management blocks and authorized device verification
Solution Approach 1:
The system segments the prescription storage medium into distinct functional components: a key management block (KMB) containing authorization data and a prescription data area containing encrypted medical information. This segmentation allows authorized devices to verify credentials through the KMB while keeping the prescription data separately encrypted and protected, thereby managing complexity through structured organization.
Solution Approach 2:
The key management block acts as an intermediary between the prescription storage medium and authorized dispensing devices. It contains a unique identifier and authorization information that mediates the verification process, allowing devices to prove their authorization status without directly storing or exposing the encrypted prescription data, thus simplifying the security architecture.
2Loss of information
If decentralized authentication system is used without centralized database, then privacy and security are improved, but authentication reliability may worsen due to lack of central verification authority
Solution Approach 1:
The storage medium performs self-authentication through its embedded key management block. Authorized dispensing devices verify their credentials directly against the KMB data without requiring communication with a centralized database. The medium itself carries its own authorization information, enabling autonomous verification while maintaining privacy and eliminating the need for centralized data storage.
3Productivity
If automated dispensing machines are deployed without secure encryption, then productivity and ease of operation are improved, but security vulnerabilities increase making the system susceptible to tampering and unauthorized dispensing
Solution Approach 1:
The system applies local quality by encrypting only the prescription data area while leaving the key management block in a separate, accessible format for authorization verification. This allows automated dispensing machines to efficiently verify authorization through the KMB while maintaining strong encryption protection for the actual prescription information, balancing productivity with security.
Data Source
AI summary
Techniques for secure automated dispensing of prescription medications utilize broadcast encryption to encrypt a prescription for storage on a machine-readable medium that is pre-written with a key management block (KMB). The KMB encodes a session key needed to read from or write to the medium. Each prescription-writing device and medication dispensing device is assigned a unique set of device keys, which are used to recover the session key from the medium. Only authorized devices are able to recover the session key from a medium's KMB. Thus, only authorized devices may read or validly write prescriptions from/to the machine-readable medium. In this manner, only authorized providers can write fillable prescriptions and only authorized dispensers can dispense medications to fill those prescriptions.