# US 2010/0169218 A1 · Secure authentication of lectronic prescriptions

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 2010/0169218 A1
- Document ID: US20100169218A1
- Status: Published application
- Kind: A1
- Application number: 12/666,403
- Filed: 2008-06-26
- Published: 2010-07-01
- Earliest claimed: 2007-06-27
- Assignees: Koninklijke Philips Electronics N.V.
- Inventors: Changjie Wang; Fulong Ma
- Web page: https://patentgrep.com/patent/US20100169218A1

## CPC

- G06F 21/6254: {by anonymising data, e.g. decorrelating personal data from the owner's identification}
- G16H 20/10: relating to drugs or medications, e.g. for ensuring correct administration to patients
- H04L 9/3247: {involving digital signatures}
- H04L 2209/42: Anonymization, e.g. involving pseudonyms
- H04L 2209/56: Financial cryptography, e.g. electronic payment or e-cash
- H04L 2209/88: Medical equipments
- G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N)
- G16H: HEALTHCARE INFORMATICS, i.e. INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR THE HANDLING OR PROCESSING OF MEDICAL OR HEALTHCARE DATA
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)

## Abstract

The invention relates to a system for authenticating electronic prescriptions, the system comprising an acquisition unit for acquiring an electronic prescription for authentication, the electronic prescription comprising a transaction number, a first pseudonym, and a signature of a first participant using a transaction pseudonym, the first pseudonym indicating the first participant's registration at a first privacy officer; a generation unit for generating the transaction pseudonym based on the first pseudonym, the transaction number and a registration key corresponding to the first pseudonym and being shared between the first participant and a second privacy officer; and a validation unit for verifying the first participant's registration at the second privacy officer and the authenticity of the signature based on the registration key and the transaction pseudonym. As the transaction pseudonym depends on registrations at two privacy officers and a transaction number for a real-time prescription, the participant's privacy can be well protected from each privacy officer.

## Claims

### Claim 1

A system for authenticating electronic prescriptions, the system comprising:
an acquisition unit for acquiring an electronic prescription for authentication, the electronic prescription comprising a transaction number, a first pseudonym, and a signature of a first participant using a transaction pseudonym, the first pseudonym indicating the first participant's registration at a first privacy officer;
a generation unit for generating the transaction pseudonym based on the first pseudonym, the transaction number and a registration key corresponding to the first pseudonym and being shared between the first participant and a second privacy officer; and
a validation unit for verifying the first participant's registration at the second privacy officer and the authenticity of the signature based on the registration key and the transaction pseudonym.

### Claim 2 (depends on 1)

The system as claimed in claim 1, wherein the generation unit is arranged to generate the transaction pseudonym in accordance with the following equation:
ŶDR=(YDr)ki,ki=h(RDr⊕ki-1),k0=(RDr∥YDr)
wherein ŶDR is the transaction pseudonym, i is the transaction number related to the electronic prescription, ki is a transaction key as defined, and RDr is the registration key shared between the second privacy officer and the first participant, wherein h(•) is a cryptographic hash function, and k0 is the concatenation of the registration key RDr and the first pseudonym YDr.

### Claim 3 (depends on 1)

The system as claimed in claim 1, wherein the validation unit is further arranged to check the first participant's history record by linking all electronic prescriptions signed by the first participant to the first pseudonym.

### Claim 4 (depends on 1)

The system as claimed in claim 1, further comprising a first registration unit for registering the first participant at the second privacy officer so that the first participant's identity can be uniquely determined by mapping the registration key shared between the first participant and the second privacy officer to the first pseudonym.

### Claim 5 (depends on 4)

The system as claimed in claim 4, wherein the first registration unit comprises:
a receiving unit for receiving, from the first participant, a registration message comprising the first pseudonym indicating registration at the first privacy officer and a proof of knowing the private key of the first participant,
a verifying unit for verifying the first participant's registration at the first privacy officer by checking the existence of the first pseudonym at the first privacy officer; and
a mapping unit for mapping the first pseudonym to the registration key shared between the first participant and the second privacy officer.

### Claim 6 (depends on 1)

The system as claimed in claim 1, further comprising a second registration unit for registering a second participant at the second privacy officer so that the second participant's identity can be uniquely determined by a second pseudonym.

### Claim 7 (depends on 6)

The system as claimed in claim 6, wherein the electronic prescription further comprises a second pseudonym and a signature of a second participant using the second pseudonym, and the validation unit is further arranged to verify the second participant's registration at the second privacy officer and the authenticity of the signature based on the second pseudonym and to check the history record of the second participant by linking all electronic prescriptions signed by the second participant to the second pseudonym.

### Claim 8 (depends on 1)

The system as claimed in claim 1, wherein the first participant, a second participant, a first privacy officer and a second privacy officer are a doctor agent, a patient agent, a doctor manager agent and an insurer agent, respectively.

### Claim 9

A method of authenticating electronic prescriptions, the method comprising the steps of:
acquiring an electronic prescription for authentication, the electronic prescription comprising a transaction number, a first pseudonym indicating a first participant's registration at a first privacy officer, and a signature of the first participant using a transaction pseudonym;
generating the transaction pseudonym based on the first pseudonym, the transaction number and a registration key corresponding to the first pseudonym and being shared between the first participant and a second privacy officer; and
verifying the authenticity of the registration and signature of the first participant on the basis of the registration key and the transaction pseudonym.

### Claim 10 (depends on 9)

The method as claimed in claim 9, wherein the transaction pseudonym is generated in accordance with the following equation:
ŶDR=(YDr)ki,ki=h(RDr⊕ki-1),k0=(RDr∥YDr)
wherein ŶDR is the transaction pseudonym, i is the transaction number related to the electronic prescription, ki is a transaction key as defined, and RDr is the registration key shared between the second privacy officer and the first participant, wherein h(•) is a cryptographic hash function, and k0 is the concatenation of the registration key RDr and the first pseudonym YDr.

### Claim 11 (depends on 9)

The method as claimed in claim 9, further comprising a step of checking the first participant's history record by linking all electronic prescriptions signed by the first participant to the first pseudonym.

### Claim 12 (depends on 9)

The method as claimed in claim 9, further comprising a step of registering the first participant at the second privacy officer so that the first participant's identity can be uniquely determined by mapping the registration key shared between the first participant and the second privacy officer to the first pseudonym.

### Claim 13 (depends on 9)

The method as claimed in claim 9, further comprising a step of registering a second participant at the second privacy officer so that the second participant's identity can be uniquely determined by a second pseudonym.

### Claim 14 (depends on 13)

The method as claimed in claim 13, wherein the electronic prescription further comprises the second pseudonym and a signature of the second participant using the second pseudonym, and the method further comprises a step of verifying the second participant's registration and signature based on the second pseudonym and of checking the second participant's history record by linking all electronic prescriptions signed by the second participant to the second pseudonym.

### Claim 15 (depends on 9)

The method as claimed in claim 9, wherein the first participant, a second participant, a first privacy officer and a second privacy officer are a doctor agent, a patient agent, a doctor manager agent and an insurer agent, respectively.

### Claim 16

A computer program product to be loaded by a computer arrangement, comprising instructions for authenticating electronic prescriptions, the computer arrangement comprising a processing unit and a memory, the computer program product, after being loaded, enabling said processing unit to carry out the following tasks:
acquiring an electronic prescription for authentication, the electronic prescription comprising at least a transaction number, a first pseudonym, and a signature of a first participant using a transaction pseudonym, the first pseudonym indicating the first participant's registration at a first privacy officer;
generating the transaction pseudonym based on the first pseudonym, the transaction number and a registration key corresponding to the first pseudonym and being shared between the first participant and a second privacy officer; and
verifying the authenticity of the registration and signature of the first participant on the basis of the registration key and the transaction pseudonym.

### Claim 17

A method of generating a transaction pseudonym for secure authentication, the method comprising the steps of:
registering a participant at a first privacy officer so that the participant's identity can be uniquely defined and determined by a first pseudonym;
registering the participant at a second privacy officer so that the participant's identity can be uniquely determined by mapping a registration key shared between the second privacy officer and the participant to the first pseudonym; and
generating a transaction pseudonym for the participant on the basis of the first pseudonym, the registration key and a transaction number related to a transaction.

### Claim 18 (depends on 17)

The method as claimed in claim 17, wherein the first pseudonym is generated in accordance with the following equation:
YDr=yDrxDM,yDr=gxDr mod p
wherein YDr is the first pseudonym, xDM is the first privacy officer's private key, yDr and xDr are the participant's public key and private key, respectively, p is a large prime number and g is a generator of the group of p with order q, the private key xDrε{1, . . . , q−1}, and q is a large prime number complying with q/(p−1).

### Claim 19 (depends on 17)

The method as claimed in claim 17, wherein the transaction pseudonym is generated in accordance with the following equation:
ŶDR=(YDr)ki,ki=h(RDr⊕ki-1),k0=(RDr∥YDr)
wherein ŶDR is the transaction pseudonym, i is the transaction number related to the electronic prescription, ki is a transaction key as defined, and RDr is the registration key shared between the second privacy officer and the first participant, wherein h(•) is a cryptographic hash function, and k0 is the concatenation of the registration key RDr and the first pseudonym YDr.