Sether : A model for secure transfer of patient data between healthcare systems and mobile applications

Sammanfattning: Strong authentication and secure communication of sensitive medical data are crucial parts when empowering patients by giving them access to data stored in healthcare systems. Through the use of a mobile application and device patients access relevant personal health information and thus bringing more control over their diseases and empower them to, for instance, make long-lasting lifestyle changes. This thesis presents the communication model SETHER, an approach to manage secure transfer of patient data between healthcare systems and applications running on mobile devices, based on SAML and OAuth. From this model a proof of concept prototype was developed using API Gateway to connect to the National Service Platform, an infrastructure that interconnects most healthcare systems in Sweden. The results indicate that using SETHER as a model for communication, a secure transfer of patient data between patients and care givers is possible. The advantages of this is a secure single sign-on user experience to access patient data through a nationwide system independent on the healthcare system the caregivers are using. Future work includes developing mobile patient applications, using SETHER to connect patient with their caregivers and providing tools to empower patients in their everyday life.