Conceptual design and implementation of FIDO2 compatible smart medical card for healthcare information system (Abstract Only)

Abstract

This paper addresses the escalating risk of electronic health records (EHRs) breaches and unauthorised profiling, emphasising the need for standardised solutions to safeguard patient information. Focusing on privacy and security, the proposed conceptual design introduces Fast IDentity Online Specifications (FIDO2) compatible smart medical cards for healthcare information systems. By leveraging FIDO2, the solution ensures password-less authentication through device attestation, enhancing security in accessing patient information. The cloud computing model adds multiple layers of security, maintaining data confidentiality. Experimental results demonstrate performance comparable to traditional healthcare information systems, with a notable advantage in resource-limited settings. The implementation extends the reach of EHR systems, particularly beneficial in low- and middle-income countries with developing health data exchange infrastructure. The use of FIDO2-based smart cards presents a secure and scalable alternative, addressing critical challenges in EHR privacy and security effectively. Copyright © 2024 Inderscience Enterprises Ltd.