Authentication architecture for eHealth professionals

• Type: Article in International Conference Proceedings Book
• Date: 2007

Authors

Gomes, H (Author) Other; Cunha, JPS (Author) Other; Zuquete, A (Author) Other

Conference proceedings International

Title: ON THE MOVE TO MEANINGFUL INTERNET SYSTEMS 2007: COOPIS, DOA, ODBASE, GADA, AND IS, PT 2, PROCEEDINGS

Pages: 1583-1600

OTM Confederated International Conference and Workshop

Vilamoura, PORTUGAL, NOV 25-30, 2007

Indexing

ISI Web of Knowledge - 8 Citations

Scopus - 7 Citations

Other information

Authenticus ID: P-004-E3R

DOI: 10.1007/978-3-540-76843-2_33

Abstract (EN): This paper describes the design and implementation of a PKI-based eHealth authentication architecture. This architecture was developed to authenticate eHealth Professionals accessing RTS (Rede Telematica da Saude), a regional platform for sharing clinical data among a set of affiliated health institutions. The architecture had to accommodate specific RTS requirements, namely the security of Professionals' credentials, the mobility of Professionals, and the scalability to accommodate new health institutions. The adopted solution uses short lived certificates and cross-certification agreements between RTS and eHealth institutions for authenticating Professionals accessing the RTS. These certificates carry as well the Professional's role at their home institution for role-based authorization. Trust agreements between health institutions and RTS are necessary in order to make the certificates recognized by the RTS. The implementation was based in Windows technology and as a general policy we avoided the development of specific code; instead, we used and configured available technology and services.

Language: English

Type (Professor's evaluation): Scientific

No. of pages: 18