Open Architecture for Patient Identity as a Service MIT Media Lab Presentation January 26, 2011

1
Open Architecturefor Patient Identity as a
ServiceMIT Media Lab PresentationJanuary 26,
2011
Dazza Greenwood, CIVICS.comRobert Masson, EMC
2
Goals of the Project

• Vision Patient Identity Service to for
  Collaborative Health Records, Openly Accessible
  from Home, Doctor or Pharmacy.  Simplified
  patient-centered log-in and linking of data,
  devices and services. Patient ownership and
  control of identity, personalization and privacy.
  
• Open Architecture, Integrated Infrastructure and
  Public Source Components Enabling a Competitive
  Marketplace of Patient-Centered Products, Apps
  and Services.

3
HIT Policy Committee Privacy and Security Tiger
Team
4
Broader Patient Identity Context
5
Simplified Patient Log-On
6
Simplified Patient-Controlled Data Links
7
Simplified Patient-Controlled Sharing
8
Complex, Robust Back-End Rules Policy-Based
Auditable Access Control
9
Open Architecture Enables Markets
10
2 Authenticate
Open ID Server
3 - Retrieve
1 Login
Additional Info
Credentials
display
PHR
login
Patient X
Indivo
11
Hack-a-Thon Use Case

• Login Patient X is presented with a Login
  Screen from Indivo which has the Standard User ID
  And Password Challenge but also has the My Health
  Login Bug. They can press this and be challenged
  for their My Health credentials instead
• This can be a simple login page or perhaps
  something stolen from the base application or a
  sample.
• The Web Page takes the supplied My Health
  Credentials and then pings the Open ID Service to
  validate them. It receives back a set of valid
  Credentials and allows the User to Login and
  associates the User with a previously set up
  Indivo Account
• Again this can be a Sample App reprovisioned for
  this purpose ort a Simple Page that reads in
  basic information from Indivo to illustrate the
  connection
• Additionally the PHR can now query the Credential
  Service for additional information such as First
  Name, Last Name, etc.
• This could be the same page as above but now with
  a blend of information from the Indivo account
  and the Open ID Account displayed Side by Side.

12
Next Steps

• Providing a Template
• In Java
• In Python
• Using Different Clients
• Android
• Devices
• Across different Boundaries
• PHR
• ID Services
• Access Management