International Journal of Telemedicine and Applications 
Volume 2008 (2008), Article ID 763534, 9 pages
doi:10.1155/2008/763534
Research Article

A Tamper-Resistant and Portable Healthcare Folder

Nicolas Anciaux,1 Morgane Berthelot,2 Laurent Braconnier,3 Luc Bouganim,1 Martine De la Blache,3 Georges Gardarin,4 Philippe Kesmarszky,5 Sophie Lartigue,6 Jean-François Navarre,3 Philippe Pucheral,1,4 Jean-Jacques Vandewalle,7 and Karine Zeitouni4

1Institut National de Recherche en Informatique et en Automatique (INRIA), Rocquencourt, 78153 Le Chesnay Cedex, France
2SANTEOS SA, Tour Manhattan, 5,6 Place de l'Iris, 92926 Paris la Défense Cedex, France
3Conseil Général des Yvelines, Hôtel du Département, 2 Place André Mignot, 78012 Versailles Cedex, France
4PRISM Laboratory, University of Versailles, 45 avenue des Etats-Unis, 78035 Versailles Cedex, France
5Association Locale de Développement Sanitaire (ALDS ), 25 avenue des Aulnes, 78250 Meulan, France
6Coordination Gérontologique Intercommunale du Territoire Est Yvelines (CoGITEY), 6 avenue du Maréchal Franchet d'Esperey, 78004 Versailles, France
7Gemalto, 6 rue de la Verrerie, 92190 Meudon, France

Received 1 October 2007; Revised 21 March 2008; Accepted 27 May 2008

Recommended by Frédérique Laforest

Abstract

Electronic health record (EHR) projects have been launched in most developed countries to increase the quality of healthcare while decreasing its cost. The benefits provided by centralizing the healthcare information in database systems are unquestionable in terms of information quality, availability, and protection against failure. Yet, patients are reluctant to give to a distant server the control over highly sensitive data (e.g., data revealing a severe or shameful disease). This paper capitalizes on a new hardware portable device, associating the security of a smart card to the storage capacity of a USB key, to give back to the patient the control over his medical data. This paper shows how this device can complement a traditional EHR server to (1) protect and share highly sensitive data among trusted parties and (2) provide a seamless access to the data even in disconnected mode. The proposed architecture is experimented in the context of a medicosocial network providing medical care and social services at home for elderly people.