Projects:2015s2-211 Health Visa
TEAM
Group Members
- Samuel Zevenbergen.
- Mingjie Qiu.
Supervisor
Client (Canadian)
BACKGROUND
There are an increasing number of people living with serious allergies, medical conditions and specific treatment wishes without the means of communicating this with First Responders and Paramedics in an emergency situation. There have been many situations where poor outcomes such as avoidable injury or death have resulted from medical treatments administered by medical professionals in emergency situations due to a lack of patient medical history.
The purpose of patient care/healthcare is for medical professionals to use their knowledge and experience as well as all available medical information and advanced directives to make a prompt and competent diagnosis leading to appropriate and correct treatment during a medical emergency. Currently it is in the patient's best interest to ensure they can communicate relevant medical information in case of an emergency. It is also the medical professional's obligation to respond in the correct manner to any medical information and reasonable wishes 07/19/ignoring-a-medic-alert-bracelet 1.
EXISTING SYSTEMS
Currently there are many devices and systems, which can be used by patients to communicate their treatment critical information with medical professionals in the case of emergency where they are unable to.
Despite the current number of options available, there are still cases where speed of access to information, amount and accuracy of information, language barriers, privacy, authentication, security, community awareness and location of the information have resulted in undesirable outcomes such as medical episodes and even death.
In response to this issue, a number of systems have been created, each with weaknesses around the amount of information available, time required to access information, data privacy and/or security. The below sections highlight the pros and cons of each system.
There are a number of systems available for people to communicate their medical details and treatment wishes with first responders. These include: Medic Alert (jewelry), Medical ID (Apple Inc.), Code4Armour and Key2Life systems. Each of these is described below in regard to their efficacy, language support, access requirements, amount of immediate/delayed information, community awareness, geographical footprint as well as privacy and authentication.
Medic Alert
Overview
The Medic Alert Foundation was founded in California in 1953, but now has affiliates in 9 other countries. They are the only non-profit organisation that hires ‘highly skilled medical response personnel’. They offer a range of jewelry (bracelets, anklets and necklaces) with medical information, treatment wishes and ID number engraved on them. To get a medic alert tag, you must purchase the jewelry online, create an online profile, specify details to be engraved and pay an annual subscription fee, which are all dependent on the country you live in. If your medical information changes, you have to purchase a new tag or pay for your current one to be smoothed and re-engraved (which can only be done once or twice).
Pros
- MedicAlert has a proven efficacy.
- Significant language translation service available.
- Good community awareness of the system.
- Significant geographical footprint (9 countries in total).
Cons
- Small amount of immediately available information (only what is engraved on the bracelet).
- There is an extensive delay to obtain further medical information (relayed via phone or fax).
- The system lacks privacy as anyone can access your medical records by reading them off your bracelet.
- There is no authentication required to access the initial information (from your bracelet).
iPhone Medical ID
Overview
Many people have a contact labelled ‘ICE’ - ‘In Case of Emergency’ on their phone, but they have a passcode, which disables anyone from accessing it in an emergency. Apple has developed a medical ID application, which can be enabled on any iPhone with a minimum of iOS-8 installed. This allows anyone to access your medical information such as allergies, blood type and medications as well as your emergency contact details. It also allows them to use your phone to contact your emergency contacts, even if your phone is locked.
Pros
- The amount of information immediately available is significantly greater.
- Exists on a popular phone.
- Significant geographical footprint.
Cons
- There efficacy of this system has not been proven.
- No language translation support.
- Minimal community awareness.
- This system is lacking privacy.
- No authentication required in order to access medical records. No record of someone accessing your records.
Code4Armour
Overview
Code4Armour is a new technology in which you buy and wear a passive bracelet on your wrist. To set this up, you pay an annual subscription fee, create an online account and upload your personal, medical and emergency contact details. Anyone with a Near Field Communication (NFC) capable phone and the free Code4Armour™ app can bring up your details on their phone by scanning your bracelet. There are two types of people (general users and first responders who must be verified).
Pros
- The amount of information immediately available is significantly greater.
- Exists on popular devices.
Cons
- There efficacy of this system has not been proven.
- No language translation support.
- Minimal community awareness.
- There are specific hardware and software requirements in order to access records.
- This system is lacking privacy.
- No authentication required in order to access medical records. No record of someone accessing your records.
Key2Life
Overview
Key2Life is an emerging company offering many medical ID devices, from wearable USB sticks, tags with NFC technology, and cards with magnetic strips and/or QR codes. These systems generally require a once off payment for purchase, with no recurring subscription costs. In a medical crisis where you may be unable to speak for yourself, civilian laypersons and medical physicians can access your information from a computer or a smartphone with NFC/QR reader capabilities. There are some evident hardware and software requirements in order to access the information stored in these devices.
Pros
- The amount of information immediately available is significantly greater.
- Geographical footprint is large, but user base is small.
Cons
- There can be a significant delay in order to access any information (you may need to plug a USB into a computer for example).
- There efficacy of this system has not been proven.
- No language translation support.
- Minimal community awareness.
- There are specific hardware and software requirements in order to access records.
- This system is lacking privacy.
- No authentication required in order to access medical records. No record of someone accessing your records.
Summary of Existing Systems
From the above summaries of current technologies, it should be clear that many of them are relatively complete, but have downfalls. The below figure is a diagrammatic comparison of the already discussed technologies and the completeness of features, which are most important for an efficient system like this. The key point to be made from this diagram is that all current existing systems have major privacy and authentication issues.
HEALTH VISA SYSTEM
System Goals and Objectives
The goal of the Health Visa system is to provide as much information which is relevant
to a user should they find themselves in a medical emergency.
The short term objectives of the Health Visa system are listed below: -
- The system will provide sufficient and relevant medical information, quickly and securely to Medical Professionals and Public Laypersons’ in the event of a medical emergency.
- The system will have a low cost for the end user, facilitating significant growth.
- A positive cost benefit relationship will be apparent to the public.
- The system will be up to date with the relevant and current acts, regulations and standards.
- The empowerment offered to the end-user will be evident as they have full authority and control of their personal information which includes sensitive medical records.
The long term goals of the Health Visa system are listed below: -
- The reach of the system will increase as time goes on. The system is to be implemented in all considered countries within a small timeframe, with further countries expected to be included in the future.
- All members of the public, including young and old will have the available assistance (if required) to become a registered user of the system.
Description of the System
The fundamental objective of the Health Visa system is to overcome the privacy, authentication and security issues associated with all existing medical information systems. The designed system will work across a range of regulatory boundaries, allowing for secure and prompt access to Registered General Users’ medical records during a medical emergency.
It should be noted that the focus of the designed Health Visa system focuses on the back-end security and authentication protocols required to satisfy a range of privacy and data laws around the world, in particular the eight countries listed below.
The Health Visa system will allow for quick access to available medical records during a medical emergency. For example, Paramedics/Medics will have the ability to scan a QR code on a Visa card or bracelet to get access to a Registered General Users’ available medical records. One key aspect to the success of this system is that the user effectively owns their own data, has maximum control over it and thus feels empowered. With this, there will be varying levels of privacy: The user will have the ability to control what information they share with Medical Professionals and Public Laypersons. There will also be a log of who has accessed their information (name, date, location, etc.), which will help discourage abuse and increase accountability for all system users.
There will be three broad classes of system users: Public Laypersons, Registered General Users and Medical Professionals which includes Primary Care Providers, and Paramedics/Medics.
The Health Visa system will allow for different authentication methods (some examples include driver's license, QR code on a visa card and biometrics such as: fingerprint, eye recognition, voice recognition, etc. The Health Visa concept design is not concerned with the authentication methods used, but must allow for a sufficient number of methods, which are continually evolving which are expected to change over time.
Public Laypersons (either Registered General Users or not) will require 2 points of authentication (out of a number of possibilities) in order to access information, whereas Paramedics/Medics only need 1 point. This is because medical professionals generally require information quickly and they are already verified within the system and thus given this privilege.
Language translation is another useful function which is contained within the Health Visa system. In order to facilitate effective communication of information, especially across countries with differing languages, it is necessary to include automatic translation of medical information. An easy and consistent way to implement this language translation function is to use ICD 10 for direct translations of medical terms, thus ensuring the medical records are interpreted correctly and further reducing any risk.
It should be emphasized that the Health Visa system has been designed to be implemented across the eight considered countries initially, with further expansion expected in the future. Language translation is already pertinent to the initial deployment across these eight countries as there are a minimum of three primary languages (English, Estonian and Korean).
Countries of Operation
- Australia.
- United States of America.
- Canada.
- Estonia.
- Israel.
- New Zealand.
- South Korea.
- United Kingdom.
Operational Procedures and Sequences of Events
A number of figures are provided below for purposes of comparing how Operational Procedures and Sequences of Events currently occur in an existing medical information system, and how they are expected to occur in the proposed new Health Visa system.
The above figure illustrates how a typical user becomes a registered user on a typical existing medical information system and on the new Health Visa system. Below is a list of associated benefits pertaining to the new proposed system: -
- The user can become a verified, active user much quicker.
- The user is empowered as they have full control over their personal medical information by means of access filters.
- All medical records are verified by a qualified Primary Care Provider prior to being a ‘verified’, active user of the system.
The above figure illustrates how Professional Users (Primary Care Providers and Paramedics/Medics) become registered, verified users on a typical existing medical information system and on the new Health Visa system. It is highlighted that such a user is not recognized with existing medical information systems. These Medical Professionals may phone the 24/7 hotline and state their profession but this is never exclusively checked and verified before disclosing medical records (all they require is the medical information system ID number). The new system includes a mechanism for Medical Practitioners (Primary Care Providers and Paramedics/Medics) to create an account and get their credentials verified prior to having a fully operational account. Below is a list of associated benefits pertaining to the new proposed system: -
- You must be registered with your relevant Health Practitioner Regulation Agency in order to create a ‘Medical Practitioner’ account, which includes Primary Care Providers and Paramedics/Medics.
- The system will know when your registration expires and ensure that registration is continually renewed, thus reducing risk of abuse by professionals which have had their registration revoked for any reason.
The above figure illustrates how Public Layperson and Medical Professionals may access an individuals’ medical records, both on the existing medical information system and the proposed new Health Visa system. It is evident that existing medical information systems provide minimal medical information up-front, with no authentication required. Additional information can be obtained but typically takes a long time to acquire. Below is a list of associated benefits pertaining to the new proposed system: -
- All medical records can be obtained almost instantly, following required security checks.
- System security is much stronger, with system users being locked out after a set number of invalid attempts.
- The system does not rely on only 1 identifier. For example, someone may access an individuals’ medical records if they possess two of three registered identifiers.
System Context
The above figure illustrates how the proposed new Health Visa system may be integrated with a typical existing medical information system. The following points summarize the key ideas illustrated in the noted figure: -
- The existing Customer Support Centre will support users on the existing and new systems. New hardware and software are expected to be required within the Customer Support Centre, followed by staff training before commissioning of the new system.
- New Health Visa Cloud Computing System to be commissioned independently of any existing Server and Database Infrastructure.
- New System shall comprise many compatible identifiers, which are ever evolving and are expected to change in the future.
- Users are either on the existing or new system. They are given the choice to migrate to the new system or remain on the existing system. After an appropriate time period, the existing system can be decommissioned as determined by the acquirer.
The above figure illustrates how the proposed new Health Visa system will operate. The following notes summarize the key points covered in the previously mentioned figure: -
- The Team of Developers will develop and commission the new system. It is expected that a subset of this team will then form the Design and Maintenance Team which will ensure the system is operational and up-to-date.
- The key role of Primary Care Providers is to verify the medical records of Registered General Users, ensuring they are accurate.
- It is understood that the Health Visa Cloud Computing System may be implemented on AWS, however any other system which allows all system requirements be satisfied is acceptable.
Operational Scenarios
All operational scenarios use examples on an individual’s identity may be verified. For example, by use of a QR code on a Visa card, finger print, facial recognition, etc. It should be highlighted once again that these are used as example identification and verification methods only and does not suggest that these would be implemented. Verification methods of identifying individuals is continually evolving and thus not a key focus of the designed Health Visa system.
Scenario 1 – Normal Operation
An elderly woman discussed treatment options for her obesity problem. The doctor suggested the option of post-gastric bypass surgery, in which she decided to go ahead with. The woman followed her doctor’s suggestion that she list the operation on her Health Visa account as there was a risk of complications following the surgery.
A short time later, she was out shopping in a busy shopping mall where she lost consciousness and collapsed. Many members of the public rushed to her aid. During the commotion, a number of medical conditions were mentioned as being possible causes of the medical event. One member of the public scanned her QR code and fingerprint into their smart phone. Before paramedics arrived to treat the woman, this member of the public was able to notify of the woman’s recent surgery. This lead to prompt and accurate treatment, in which she was intubated and fully recovered in hospital. Had this information not been available, wrong or delayed treatment would have likely been a result. This amount of information, verification and timely access does not exist with all existing medical information systems.
Scenario 2 – Lost Child
During a family holiday to Disney Land, a four-year-old boy becomes separated from his parents in a large crowd. This child, clearly distressed is approached by a staff member and asked if he knows where his parents are. This child does not know where his parents are, let alone their contact details, but states that he is registered on the Health Visa system. This staff member opens the Health Visa application on their smart phone, scans the boy’s finger print and takes a photo of his face for identification and verification purposes.
After sending this information to the Health Visa system, a match is identified, with the boy’s medical records and emergency contact details being presented to the staff member. This staff member then selected to contact the emergency contact via phone, directly allowing for the parents to quickly find their lost son.
Scenario 3 – Overseas Travel
A young homosexual, adult male was required to travel on business to Russia in which he was nervous about as he felt that there was a stigma associated with homosexuality within the country. Although he recognized that his sexuality was not illegal in the country, he realized that they still have a law against ‘propaganda of homosexuality’ which made him feel uncomfortable.
This young man was a registered user on the Health Visa system and had a sexually transmitted disease (STD), which is commonly recognized as being associated with homosexuality. This young man decided to adjust his privacy settings before he travelled to Russia such that this (non critical) infection and his next of kin, who was also a male would not be released to any users of the system. In order to retain an emergency contact, he selected to provide his mother’s contact details in a medical emergency.
When this man travelled to Russia, he was involved in a serious car crash. The first public layperson at the scene searched the man’s wallet, located and scanned his QR code located on his Visa card. This identification entry along with a photo of his face was sent to the Health Visa system for identification and verification purposes. The public layperson was issued with his available medical information, including serious allergies to certain medications. This allowed him to receive the appropriate care based on his needs, while his non critical illness remained private.
DELIVERABLES
The key deliverables for this project were a Concept of Operations (ConOps) document and a System Requirements Document (SRD) which both focus on the data privacy, security and regulatory requirements in order to operate across the noted countries.
The following items were also important deliverables of this project: -
- A demonstration walkthrough video was also created which clearly shows the operational differences between a typical existing system and the new Health Visa system.
- Pitch deck, which will be used to present the key benefits of the Health System to potential investors.
