title: A security and privacy preserving e-prescription system based on smart cards.
abstract: In 2002, Ateniese and Medeiros proposed an e-prescription system, in which the patient can store e-prescription and related information using smart card. Latter, Yang et al. proposed a novel smart-card based e-prescription system based on Ateniese and Medeiros's system in 2004. Yang et al. considered the privacy issues of prescription data and adopted the concept of a group signature to provide patient's privacy protection. To make the e-prescription system more realistic, they further applied a proxy signature to allow a patient to delegate his signing capability to other people. This paper proposed a novel security and privacy preserving e-prescription system model based on smart cards. A new role, chemist, is included in the system model for settling the medicine dispute. We further presented a concrete identity-based (ID-based) group signature scheme and an ID-based proxy signature scheme to realize the proposed model. Main property of an ID-based system is that public key is simple user's identity and can be verified without extra public key certificates. Our ID-based group signature scheme can allow doctors to sign e-prescription anonymously. In a case of a medical dispute, identities of the doctors can be identified. The proposed ID-based proxy signature scheme can improve signing delegation and allows a delegation chain. The proposed e-prescription system based on our proposed two cryptographic schemes is more practical and efficient than Yang et al.'s system in terms of security, communication overheads, computational costs, practical considerations.
authors.affiliation: Department of Information Management, Chang Gung University, Tao-Yuan 333 Taiwan, Republic of China. clhsu@mail.cgu.edu.tw
authors.forename: Chien-Lung
authors.initials: CL
authors.lastname: Hsu
authors.forename: Chung-Fu
authors.initials: CF
authors.lastname: Lu
mesh_terms: D000465:Algorithms; D016494:Computer Security / Q000295:instrumentation*; D003219:Confidentiality; D055695:Electronic Prescribing; D006801:Humans; D007356:Insurance, Pharmaceutical Services; D010355:Patient Identification Systems / Q000379:methods; D019727:Proxy