An authentication framework for e-health systems

The high-level sensitivity of medical information mandates stronger authentication and authorization mechanisms to be used in e-Health systems. This paper describes the design and implementation of certificate-based e-Health authentication and authorization architecture. This architecture was developed to authenticate e-Health professionals accessing shared clinical data among a set of affiliated health institutions based on peer-to-peer networks. The architecture had to accommodate specific medical data sharing and handling requirements, namely the security of professionals' credentials.