User authentication algorithm with role-based access control for electronic health systems to prevent abuse of patient privacy

The results of the change from conventional paper-based health records to Electronic Health Records (EHRs) have had an effect on both healthcare professionals and patients. On the one hand, the electronic health system offers huge benefits to patients and health professionals. On the other hand, it poses new privacy and security risks to users of EHRs. Healthcare professionals need to see the patients' health records as much as possible to make decisions in terms of treating the patient. However, the patient needs to share only relevant health records with healthcare professionals. The concerns with regard to using e-health records relate to security and patient privacy. In this paper, the authors propose a user authentication algorithm and role based access control to support patient privacy in terms of electronic health systems.