Protecting Personal Electronic Health Records With Patient's Own Heartbeat

The cost and complexity of traditional encryption solutions prevent them being directly applied to telemedicine or mobile healthcare.

Traditional security measures - like cryptography or encryption - can be expensive, time-consuming, and computing-intensive. Researchers at Binghamton University, State University of New York have devised a new way to protect personal electronic health records using a patient's own heartbeat.

"The cost and complexity of traditional encryption solutions prevent them being directly applied to telemedicine or mobile healthcare. Those systems are gradually replacing clinic-centered healthcare, and we wanted to find a unique solution to protect sensitive personal health data with something simple, available and cost-effective," said Zhanpeng Jin, assistant professor in the Department of Electrical and Computer Engineering at the Thomas J. Watson School of Engineering and Applied Science at Binghamton University.

Decoded: How the Smallest Particles 'Fall' in Love This Valentine's Day
Now, the technology used to study the 'love' between particles is also being used in research to improve communications between space and Earth.

‘A person's unique electrocardiograph (ECG) was used by researchers to lock and unlock the files with patient data.’

Jin is the co-author of a new paper titled "A Robust and Reusable ECG-based Authentication and Data Encryption Scheme for eHealth Systems."

Binghamton researchers encrypted patient data using a person's unique electrocardiograph (ECG) - a measurement of the electrical activity of the heart measured by a biosensor attached to the skin - as the key to lock and unlock the files.

"The ECG signal is one of the most important and common physiological parameters collected and analyzed to understand a patient's' health," said Jin. "While ECG signals are collected for clinical diagnosis and transmitted through networks to electronic health records, we strategically reused the ECG signals for the data encryption. Through this strategy, the security and privacy can be enhanced while minimum cost will be added."

Decade Old Challenge in Theoretical Computer Science Falls
Interactive proofs — mathematical games that underlie much modern cryptography — work even if players try to use quantum information to cheat.

Essentially, the patient's heartbeat is the password to access their electronic health records.

The identification scheme is a combination of previous work by Jin using a person's unique brainprint instead of traditional passwords for access to computers and buildings combined with cyber-security work from Guo and Chen.

Use of Electronic Health Records Linked to Higher Rate of Detection of Growth Disorders
In the developed world, monitoring of linear growth is a well-established part of pediatric health care.

"This research will be very helpful and significant for next-generation secure, personalized healthcare," said Jin.

Since an ECG may change due to age, illness or injury - or a patient may just want to change how their records are accessed - researchers are currently working out ways to incorporate those variables.

Electronic Health Records Could Improve Care of Patients on Warfarin
Warfarin requires frequent monitoring, daily dosing and can result in serious negative effects when mixed with vitamin K.

Assistant Professor Linke Guo and Associate Professor Yu Chen, along with PhD candidates Pei Huang and Borui Li, are co-authors of the paper.

The research was presented at The IEEE Global Communications Conference (GLOBECOM 2016) in Washington, D.C., in December 2016.

Source-Eurekalert