Electronic health record (ehr) encryption system

Project Abstract

Electronic Health Records (EHR) have revolutionized the healthcare industry by providing a digital platform for storing and managing patients' health information. However, the increased use of EHR systems has raised concerns about the security and privacy of sensitive medical data. To address these concerns, encryption systems play a crucial role in safeguarding the confidentiality and integrity of EHR data. This research project focuses on the development and implementation of an EHR encryption system to enhance the security of electronic health records. The encryption system utilizes advanced cryptographic algorithms to protect sensitive patient information from unauthorized access and cyber threats. By encrypting EHR data at rest and in transit, healthcare organizations can mitigate the risk of data breaches and ensure compliance with privacy regulations such as HIPAA. The EHR encryption system incorporates a multi-layered security approach to provide comprehensive protection for electronic health records. It includes encryption of data at the database level, application level, and during transmission between systems. Additionally, access controls and authentication mechanisms are implemented to restrict unauthorized users from accessing sensitive patient information. One of the key features of the EHR encryption system is its ability to balance security and usability. While encryption enhances data security, it is essential to design the system in a way that does not compromise the accessibility and usability of EHR data for authorized users. Therefore, the encryption system is designed to provide seamless integration with existing EHR systems and workflows, ensuring minimal disruption to healthcare providers' daily operations. Furthermore, this research project addresses the scalability and performance challenges associated with implementing an EHR encryption system in large healthcare organizations. By optimizing encryption algorithms and key management processes, the system can efficiently encrypt and decrypt EHR data without causing significant delays in data access and retrieval. In conclusion, the development of an EHR encryption system is essential for protecting sensitive medical data and maintaining patient privacy in the digital age. By leveraging advanced encryption technologies and security best practices, healthcare organizations can strengthen their cybersecurity posture and build trust with patients. This research project contributes to the ongoing efforts to enhance EHR security and ensure the confidentiality of electronic health records.

Project Overview

<p> </p><div><p><strong>1.0 &nbsp; &nbsp; INTRODUCTION</strong></p><p><strong>1.1 &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;</strong><strong>Background of The Study</strong></p><p>Paper-based health records are rapidly becoming outdated. They are easily lost, are subject to wear and tear, are costly to handle, cannot be transferred electronically, may be difficult to interpret, and are inefficient. These fundamental drawbacks are driving a transition across the globe towards Electronic Health Records (EHRs).</p><p>Patience in the hospital are been diagnosed and treated, this diagnostics and treatment are been recorded for future purposes in the electronic health record system (EHR) of the hospital. This record should be protected at all cost from a third party.</p><p></p><p>This master’s thesis offers a practical solution using cryptography to protect these sensitive electronic records of patients and staff in Federal Medical Center (FMC) Makurdi, Benue State and gives them privacy control over who views their treatment and symptoms, and every other sensitive information in other units of the hospital.</p><p><strong>1.2 &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;</strong><strong>Statement of the Problem</strong></p><p>Most people in the society, are been discriminated or been treated wrongly, in their various environment because of the nature of their ill health which was been exposed by the third party.</p><p>In the 21st century where most patient medical records are stored electronically and most medical institutions have their electronic health record system running on a network (local or internet), these network may not be fully secured for such sensitive medical information considering the increase rate of cyber crime and information theft.</p><p>It will be imperative to use a security measure where even if the third party get hold of these sensitive health record, the content especially the treatment and symptoms will be scrambled and unreadable. Using a cryptographic method to secure this patients electronic record will be best to achieve the desired result (i.e scrambled or unreadable) and will give the patient full privacy control over his/hers medical record with a given key and decided who views their record.</p><p>Federal Medical Center (FMC) Makurdi needs to have a system that will secure not just patients sensitive data but also other very important data about various units and their staff in the hospital</p><p></p></div><div><p><strong>1.3. &nbsp; Objectives of the Study</strong></p><p>The general aims of this project work are to design a system that can:</p><p>1. &nbsp; &nbsp; Authenticate and provide access to right users.</p><p>2. &nbsp; &nbsp; &nbsp;Introduce a higher level of security (the use of a cryptographic “Secret Key”) where patients and medical staff are in charge of sensitive record in their unit rather than just the normal Login and Password.</p><p>3. &nbsp; &nbsp; Add patient’s records and equally encrypt sensitive information about them.</p><p>4. &nbsp; &nbsp; Append the diagnosis records and secure.</p><p>5. &nbsp; &nbsp; Capture the basic data in the following basic unit of Federal Medical Center (FMC) Makurdi: card and record unit, consultant unit, pharmacy unit, laboratory unit, bursary /accounting unit and provide an area where patient can view their file.</p><p>6. &nbsp; &nbsp; Protect sensitive information at the various unit using user login security and triple DES encryption method there by assigning unique decryption key for each user which works when there is a right login credential and secret key combination for that particular logged in person.</p><p></p><p>7. &nbsp; &nbsp; Encrypting sensitive data by default using the logged in user’s secret key which is only known by the logged in user.</p><p>8. &nbsp; &nbsp; Providing a flexible means of changing login password if it is been compromised.</p><p>9. &nbsp; &nbsp; Providing a flexible means of allowing users to change their secret key, by providing a security question and answer which was provided when they created the account and the old key if key has been compromised.</p><p>10. &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; Providing a security emergency rule called “glass breaking rule” where only the admin staff can use patient id and his own secret key to get patient secret key to enable doctors see patient record.</p><p>11. &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;Finally, to design a system this will help to overcome the problem of stigmatization on patients living with a particular ailment.</p><p><strong>1.4 &nbsp; &nbsp; Scope of the Study</strong></p><p>The main focus of the project is the implementation of data encryption and decryption on patient’s privacy in E-records. The system will be secured in cases where only the authorized person has the needed cryptographic key to decipher the message. The system does not provide any security where an unauthorized user has knowledge of the encryption key.</p><p>&nbsp;It also offers a practical solution to the sharing of medical data where privacy and security are robust and where the records can be trusted as being unaltered and unchanged as they pass between providers in the following units in the hospital, these include:</p><p>1. &nbsp; &nbsp; Card and record unit</p><p>2. &nbsp; &nbsp; Consultant unit</p><p>3. &nbsp; &nbsp; Pharmacy unit</p><p>4. &nbsp; &nbsp; Laboratory unit</p><p>5. &nbsp; &nbsp; Bursary /accounting unit</p><p>&nbsp;Federal Medical Center Makurdi, Benue State, will be used as case study for this work.</p><p><strong>1.5 &nbsp; &nbsp; Significance of the Study</strong></p><p>This project, allows patients have right over their secret key and allows them to give an authorization secret to any of the medical personnel through different communication channels (e.g. phone or as a paper code). This token allows them to access the patient’s E-record data while the patient does not need to be present at the time of access as he does not need to enter a PIN for authorization.</p><p>This approach provides more flexibility and retains the security and privacy properties of patient-controlled E-record encryption.</p><p>&nbsp;<strong>1.6 &nbsp; &nbsp; Limitations of the Study</strong></p><p>This system applies to only hospitals where patient’s records are stored electronically. The project isn’t concern about building a full hospital management system but trying to demonstrate how encryption method of security can be combined with the normal logging in to protect sensitive information. Other cryptosystem weren’t used in this research due to its research nature and time, the algorithms used became limited. Also financial constraints and time, limited further research on this study</p></div> <br><p></p>