Secure and Effective Consent System

Abstract

The data recorded in a medical information system has a distinctive feature from other kinds of sensitive information. For example in EMR(electronic medical record) of HIS(hospital information system), the data subject is the patient and the persons who generated the medical information about the subject are his doctor and other medical practitioners who perform the treatment prescription of the doctor. Hence, before disclosing the data to outside, doctor's decision and the patient's consent should be made first. However, some researchers have developed secure and cryptographic schemes without considering this feature of medical information. In this paper, we propose a secure and effective consent protocol which is applicable to a real world under the current medical laws, where the server manager cannot guess and disclose the data without the patient's consent and the doctor's decision.