Skip to main content

Health Cards called "Smart Cards"

Recently received a mail from one of my Friends Senthil asking more about smart cards and their implementation in Indian Health care Scenario. Here I am describing the use of smart cards with the technology that is usually deployed for the same.

Components of Smart card System









What all these components do?

SMART CARDS - Securely hold patient information.

CARD READERS- Work with any PC and are branded with your logo.

CLIENT SOFTWARE -Upgrades the web browser on the PC so it works with smart cards and card readers

SERVERS WITH HARDWARE SECURITY- Host and protect private information.

ADMINISTRATOR PORTAL WEBSITE- A web application that lets administrators issue and manage cards.

PATIENT PORTAL WEBSITE- A web application where patients view and update their information.

CAREGIVER PORTAL WEBSITE- A web application that lets caregivers work with information on the smart cards.

PDA & LAPTOP SOFTWARE -For working with cards in mobile and off-line environments

VISUAL BASIC & .NET TOOLS -For customizing and extending the system.

HL7 MESSAGING SERVER -For integrating with other systems.

What are the possible benefits you are passing on to your customers in case you deploy a smart card facility?

  • Enhance patient loyalty and improve patient relationships.

  • Speed up registration with less paperwork.

  • Improve communication and information sharing between points of care.

  • Let patients view and update their medical information online.

  • Convert paper records to digital format.
  • Reduce erroneous and fraudulent registration information.

  • Track and log with all changes to the patient’s information.

  • Comply with rules about information portability and privacy.

  • Maintain patient confidentiality using the best information security technologies on the market.

Benefits to the patients:

  1. Patients can access their health care information online and are better informed.
  2. Gives patients control of their medical information.
  3. Patients have added assurance that their personal information is released on a “need-to-know” basis.
  4. Reduced waiting and duplicate paperwork during registration.
What a Smart Card ought to provide?

Provide secure, re-writeable storage with more space than a magnetic stripe

• Storage is protected with multiple access levels

• On-card software can be updated “post-issuance” with new features as often as necessary

• Optional magnetic stripe for backwards compatibility with existing systems

• Manufacturing services to support mass mailings, telephone user activation and bulk-personalization

• Military grade security and cryptography.

What all You should/can store in a smart card?

Demographic information

• Employer information

• Emergency contacts

• Medicines/Prescription information

• Allergies

• Medical History

• Primary & Referring physician information

• Insurers/Payors

• Guarantor information

• Advanced Directives

• Special requests/ pastoral care requests

• Organ donor information

• Caregiver notes

• Audit trail information tracking all changes

• Custom fields

What is the best technology to deploy them in the healthcare field?

• Multi-tier server architecture based on Microsoft .NET and SQL Server

• Server applications can customized with C#, VB.NET or ASP.NET)

• Server side scripts control interactions with the smart card so no specialized smart card programming is required

• The client software is an ActiveX control that uses the PC/SC standard to communicate with smart cards.

• Dedicated security hardware on the server protects private information.

What are the Security Features while passing on critical health Info?

The cards should store certificates and keys for PKI interoperability and include hardware based cryptography features.

• The card should store a complete audit trail.

• The storage on the cards should be tamper resistant.

• The cards should support multiple PINs for patients and caregivers, with lockout features that prevent PIN/password guessing.

• Smart cards should also provide multi-factor authentication when users log-in to the portal applications.

• In addition to the smart card security features, network traffic should be encrypted using SSL.


Popular posts from this blog

Healthcare On Mobiles: Featured post- mHealth fighting malnutrition

Healthcare On Mobiles: Featured post- mHealth fighting malnutrition
Malnutrition is a byword in the forested hills of the Melghat region inhabited mostly by Korku Adivasis. Every year 400-500 children between the ages of 0 and 6 die in the region, comprising Chikhaldhara and Dharni taluks, according to official figures from 2005.

The Problem: Thousands of kids die every year in the tribal area of Melghat (Maharashtra, India) due to lack of medical attention and nutritional support. Increased incidence and rapid spread of infectious diseases such as pneumonia, typhoid, and dysentery are primary cause of high child mortality. Situation worsens during monsoon when the food supplies are low and the communicable diseases are at their peak.

Melghat is also a place known for high infant mortality rate. Some reasons for the health crisis in Melghat include lack of infrastructure, under-equipped and under-staffed public health and ICDS centres, the tradition of early marriages and early mothe…

The Formula of Driver and Demand- Indian Startups story

The healthcare industry is currently experiencing change at an unprecedented rate. Change is not only occurring in the technology used in diagnostics and care delivery, but this change is so fundamental that it could, and likely will, fundamentally alter the business model of the industry.
Today we have fitness bands, healthcare apps, appointment schedulers, health chats and several such means to access healthcare but one thing that all of this does not necessarily correlate with high quality of care or better outcomes. We need to understand that “Not even a Ferrari will get us to our destination without a driver.”Formula of Driver:
Driver = (Need + Incentive) where;
Incentive = (Value + Reward) Need = (Gap + Demand)
To define the best drivers, we need to first address the need. Need might not make economic or business sense but it is the best opportunity to leave an impact. No one remembers how much business a “Mughal-e-Azam” or “Usual suspects” did but everyone remembers that these were…

Why we never noticed ZIKA?- Indian Research and Development

“Zika had 'disappeared' because it wasn’t worth worrying about and people weren’t paying attention.”

Zika virus was first identified in 1947 in a sentinel monkey that was being used to monitor for the presence of yellow fever virus in the Zika Forest of Uganda. At this time cell lines were not available for studying viruses, so serum from the febrile monkey was inoculated intra-cerebrally into mice. All the mice became sick, and the virus isolated from their brains was called Zika virus. The same virus was subsequently isolated from Aedes africanus mosquitoes in the Zika forest.

In 1950, when some serological studies were being done, it was found that we humans developed antibodies against this virus. Further studies revealed evidence of infection in other African countries, including Uganda, Tanzania, Egypt, Central African Republic, Sierra Leone, and Gabon, as well as Asia (India, Malaysia, Philippines, Thailand, Vietnam, Indonesia). The virus circulating in Brazil is an Asi…