Chains of trust for on-demand requests of electronic health records

As mobile devices become more prevalent in everyone's lives, they are being used as a interaction point for health applications. And because of the inherited mobility of such devices, healthcare applications can benefit and create new ways to provide services, such as on-demand exchange of medical records or emergency response scenarios. Thus it is necessary to develop infrastructure to allow these devices to securely participate in such applications. In this work, on-demand access to Electronic Health Records of a patient is analyzed and a protocol based on chains of trust for such a scenario is presented. As these records may not be immediately available to the requesting party, several parties may need to be contacted to ensure to validate the identity of the requester and deliver the records. The construction of a prototype is discussed, focusing on the implementation decisions as well as its evaluation and the difficulties encountered during development.