Medical Device Authentication and Authorization Protocol in Indonesian Telemedicine Systems

Indonesia is an archipelago comprising approximately 13.000 islands. This geographical condition is one of the challenges in distributing equal health development services throughout Indonesia. Telemedicine is one way to overcome spreading it as a type of medical service that can overcome geographical distance constraints. Medical devices are vital parts of the telemedicine system; they need to be standardized so that they will not provide invalid data. This is in accordance with the applicable law in Indonesia. Every medical device used in health services must be tested and calibrated periodically by the Health Facilities Testing Center (BPFK) and / or an institution of testing of authorized health facilities. This paper proposes a new authentication and authorization protocol, which enables authentication and authorization of medical devices digitally from the authorities (BPFK). With this protocol, information about the validity of test and calibration of medical devices used can be conveyed well in the telemedicine system. The protocol mechanism provides guarantees for authentication and authorization of medical devices in the telemedicine system. This protocol also guarantees confidentiality and freshness of the data sent from medical devices to health facilities.