Designing Fingerprint-Recognition-Based Access Control for Electronic Medical Records Systems

"Medical information" implies all information related with treatment of the patient, and is, by its nature, the most sensitive and important information in terms of the privacy of the individual. Recently, laws, policies, and technological standards are rapidly developing to safely protect the medical information of the individual. This paper proposes a model that applies fingerprint recognition technology to the medical information system, to guarantee a reliable electronic medical record system. The proposed model provides an identification and denial prevention function, by applying fingerprint recognition to the access of doctors, nurses, and other medical staff. The EMR authentication system based on the proposed fingerprint recognition technology enables the user to eliminate the inconvenience of private key management, and provides security authentication that is most suitable for private networks, as external communication is not required. In particular, the reliability of the EMR system can be enhanced through disabling delegation of the private key, which is the most serious problem of electronic signature authentication.