HECC based Patient Privacy Preserving Access Control Model

An Electronic patient medical record monitoring system has been actively developed and implemented in many countries with their own principles on implementation. Even though the history of implementation goes back to years, it is true that it has not yet completed its development stage. Still the system lags with some drawbacks and limitations. This paper discusses and describes the implementation of an Access control model that purely concentrates on the privacy preserving aspects of the patients with access control policies described. The Access control model proposed takes into concern the situation-based model also. This situation-based model takes into concern the authorization of the relatives or the family physician when a situation arises for the patient to authenticate the emergency doctor to retrieve his medical records. Also, a biometric authentication of the patient or the authorizing (relatives or the family physician) person is proposed to be unique and fast enough so that the data is retrieved only on the authorization of the concerned person. This system proves a highest level of privacy in concern with the medical records of a patient. Also, the Hyper Elliptic curve cryptography enhances the security level in authentication.