Authentication system for mobile devices for exchanging medical data
AssigneeSiemens Aktiengesellschaft
InventorsSultan Haider, Georg Heidenreich
Life of this patent
Estimating the term…
Abstract
An authentication system, a mobile electronic device, an instantiating unit and a method, as well as a computer program product are disclosed for the authentication of a patient against a central registry which exchanges data with a repository for the storage of medical data records. In an embodiment, an individualised application is loaded and installed on the mobile radio device in order to sign messages to the registry with a signature. The signature can be triggered in the registry to check the authenticity of the remote patient in order to provide data access.
Claims30
An authentication system for the authentication of a respective mobile device from a plurality of mobile devices against a central server for the secure exchange of medical data between device and server, wherein the server is able to access a repository containing the medical data, comprising:
- a central instantiating unit, to respectively instantiate a respective one of the plurality of mobile devices, wherein the instantiating unit is configured to respectively install an individualized device-specific application as an encryption unit on the respective mobile device and wherein the application is configured to store a key and a device ID in hidden form in a program memory of the respective mobile device, wherein the central instantiating unit is configured to store an association between device ID and key in a central protected memory;
- an encryption unit, installed locally on the respective mobile device, configured to generate a digital signature, wherein the digital signature is encrypted using the key stored by the instantiating unit and is generated from a signature prototype, comprising at least the device ID and a time stamp, and wherein the encryption unit is furthermore configured to send at least the digital signature and the device ID to the server;
- and
- a decryption unit, installed on the central server and including an access module to the central protected memory, configured to receive the digital signature sent by the respective mobile device with the device ID and configured to read out the respective associated key for decryption from the device ID by accessing the central protected memory in order to decrypt the received signature using the key and from the signature prototype to read out the device ID as a decryption result, wherein the decryption unit is further configured to compare the decryption result with the device ID for a match and when a match is found, the decryption unit is further configured to execute an access to the repository using the device ID which has been read out.
A method for the authentication of a respective mobile device from a plurality of mobile devices against a server for the secure exchange of medical data between respective mobile device and server, the server being able to access a repository containing the medical data, comprising:
- instantiating the respective one of the plurality of mobile devices, wherein an individualized device-specific application is installed as an encryption unit on the respective mobile device and wherein a key and a device ID are stored in hidden form in a program memory of the respective mobile device, and wherein an association between device ID and key is stored in a central protected memory;
- generating a digital signature locally on the respective mobile device, wherein the signature is encrypted with the key stored by the instantiating unit and is generated from a signature prototype comprising at least the device ID and a time stamp;
- sending least the signature with the device ID to the server;
- receiving the signature with the device ID sent by the respective mobile device on the server;
- detecting the device ID;
- accessing the central protected memory with the detected device ID in order to read out the key for the decryption;
- decrypting the received signature using the key and generating a decryption result, including a device ID which has been read out;
- comparing the decryption result with the device ID for a match;
- and
- accessing the repository, when a match is found, using the device ID read out to the repository.
A computer program product, wherein the computer program product comprises a computer program, stored on a data medium or in a memory of a computer and including commands readable by the computer, to carry out the method of claim 18 when the commands are executed on the computer.
An authentication system for the authentication of a respective mobile device from a plurality of mobile devices against a central server for the secure exchange of medical data between device and server, wherein the server is able to access a repository containing the medical data, comprising:
- a central instantiating unit, to respectively instantiate a respective one of the plurality of mobile devices, wherein the instantiating unit is configured to respectively install an individualized device-specific application as an encryption unit on the respective mobile device and wherein the application is configured to store a key and a device ID in hidden form in a program memory of the respective mobile device, wherein the central instantiating unit is configured to store an association between device ID and key in a central protected memory;
- and
- a decryption unit, installed on the central server and including an access module to the central protected memory, configured to receive a digital signature from the respective mobile device, the digital signature being previously encrypted using the key stored by the instantiating unit and generated from a signature prototype and the digital signature including at least the device ID and a time stamp, and configured to read out the respective associated key for decryption from the device ID by accessing the central protected memory in order to decrypt the received signature using the key and from the signature prototype to read out the device ID as a decryption result, wherein the decryption unit is further configured to compare the decryption result with the device ID for a match and when a match is found, the decryption unit is further configured to execute an access to the repository using the device ID which has been read out.
A method for the authentication of a respective mobile device from a plurality of mobile devices against a server for the secure exchange of medical data between respective mobile device and server, the server being able to access a repository containing the medical data, comprising:
- instantiating the respective one of the plurality of mobile devices, wherein an individualized device-specific application is installed as an encryption unit on the respective mobile device and wherein a key and a device ID are stored in hidden form in a program memory of the respective mobile device, and wherein an association between device ID and key is stored in a central protected memory;
- receiving a digital signature with the device ID from the respective mobile device on the server, the digital signature being previously encrypted with the key stored by the instantiating unit and generated from a signature prototype including at least the device ID and a time stamp;
- detecting the device ID;
- accessing the central protected memory with the detected device ID in order to read out the key for the decryption;
- decrypting the received signature using the key and generating a decryption result, including a device ID which has been read out;
- comparing the decryption result with the device ID for a match;
- and
- accessing the repository, when a match is found, using the device ID read out to the repository.
Dependencies are inferred from the claim text.