A non-repudiated and traceable authorization system based on electronic health insurance cards.

Since anamnesis management in health care is directly relative to patients' privacy protection, how to resist malicious behaviors is an important issue in information security. In recent years, the developed electronic health insurance cards (eHIC) has been widely adopted as an identification certificate, which involves lots applications and provides convenience to both the patients and relative medical workers as well. There always existed some disputes and moral standards for these medical doctors who are to be confronted with these challenges. For example: The doctor discloses patient's anamnesis without patient's consent and anamnesis by the illegal access…etc. As required in E-Health, the current systems are almost offline system, which are not suitable to support online E-anamnesis sharing access to reduce the consumption of the medical treatment and fulfill a secure audit channel. In this paper, to solve these problems, an eHIC-based online authorization system with non-repudiated and traceable properties is proposed. According to our simulation results, not only the patient's privacy could be fully protected, but also the medical revenue could be raised extensively.