The nephrology eHealth-system of the metropolitan region of Hannover for digitalization of care, establishment of decision support systems and analysis of health care quality.

BACKGROUND: Even though a high demand for sector spanning communication exists, so far no eHealth platform for nephrology is established within Germany. This leads to insufficient communication between medical providers and therefore suboptimal nephrologic care. In addition, Clinical Decision Support Systems have not been used in Nephrology until now. METHODS: The aim of NEPHRO-DIGITAL is to create a eHealth platform in the Hannover region that facilitates integrated, cross-sectoral data exchange and includes teleconsultation between outpatient nephrology, primary care, pediatricians and nephrology clinics to reduce communication deficits and prevent data loss, and to enable the creation and implementation of an interoperable clinical decision support system. This system will be based on input data from multiple sources for early identification of patients with cardiovascular comorbidity and progression of renal insufficiency. Especially patients will be able to enter and access their own data. A transfer to a second nephrology center (metropolitan region of Erlangen-Nuremburg) is included in the study to prove feasibility and scalability of the approach. DISCUSSION: A decision support system should lead to earlier therapeutic interventions and thereby improve the prognosis of patients as well as their treatment satisfaction and quality of life. The system will be integrated in the data integration centres of two large German university medicine consortia (HiGHmed ( highmed.org ) and MIRACUM ( miracum.org )). TRIAL REGISTRATION: ISRCTN16755335 (09.07.2019).

The lower saxony bank of health. rationale, principles, services, organization and architectural framework.

INTRODUCTION: This article is part of a Focus Theme of METHODS of Information in Medicine on Health Record Banking. BACKGROUND: Poor communication of health care information between health care providers (HCP) is still a major problem. One recent approach is the concept of Health Record Banking. OBJECTIVES: With this report we want to introduce the Lower Saxony Bank of Health (LSBH) to the international community. The main objective of this paper is to report and explain: 1) why this organization has been founded, 2) which basic principles have been set, 3) which services will be provided, 4) which type of organization has been chosen, and 5) which architectural framework has been selected. METHODS: To report and discuss how we plan to achieve the intended objectives. RESULTS: The LSBH was founded as an entrepreneurial company, regarding itself as a neutral third-party information broker. The bank does not store medical documents on its central servers but offers a document registry with links to documents stored at participating health care providers. Subject to valid patient consent, the LSBH grants access to these documents to authorized health care providers. To implement our services, we chose the established technical frameworks of the Integrating the Healthcare Enterprise (IHE) initiative using cross-enterprise document sharing (XDS). CONCLUSIONS: Different approaches to establish health information exchange (HIE) are in early stages and some have failed in the past. Health Record Banking can address major challenges described in the literature about HIE. The future will show if our provider-sponsored business model is sustainable. After reaching a stable network, we intend to add additional HCPs, e.g., care homes or ambulance services, to the network.

Authentication systems for securing clinical documentation workflows. A systematic literature review.

CONTEXT: Integration of electronic signatures embedded in health care processes in Germany challenges health care service and supply facilities. The suitability of the signature level of an eligible authentication procedure is confirmed for a large part of documents in clinical practice. However, the concrete design of such a procedure remains unclear. OBJECTIVE: To create a summary of usable user authentication systems suitable for clinical workflows. DATA SOURCE: A Systematic literature review based on nine online bibliographic databases. Search keywords included authentication, access control, information systems, information security and biometrics with terms user authentication, user identification and login in title or abstract. Searches were run between 7 and 12 September 2011. Relevant conference proceedings were searched manually in February 2013. Backward reference search of selected results was done. SELECTION: Only publications fully describing authentication systems used or usable were included. Algorithms or purely theoretical concepts were excluded. Three authors did selection independently. DATA EXTRACTION AND ASSESSMENT: Semi-structured extraction of system characteristics was done by the main author. Identified procedures were assessed for security and fulfillment of relevant laws and guidelines as well as for applicability. Suitability for clinical workflows was derived from the assessments using a weighted sum proposed by Bonneau. RESULTS: Of 7575 citations retrieved, 55 publications meet our inclusion criteria. They describe 48 different authentication systems; 39 were biometric and nine graphical password systems. Assessment of authentication systems showed high error rates above European CENELEC standards and a lack of applicability of biometric systems. Graphical passwords did not add overall value compared to conventional passwords. Continuous authentication can add an additional layer of safety. Only few systems are suitable partially or entirely for use in clinical processes. CONCLUSIONS: Suitability strongly depends on national or institutional requirements. Four authentication systems seem to fulfill requirements of authentication procedures for clinical workflows. Research is needed in the area of continuous authentication with biometric methods. A proper authentication system should combine all factors of authentication implementing and connecting secure individual measures.