eHealth Blind Pseudonymisation

Use case

The Belgian eHealth platform is a prominent public social security institution in Belgium. It provides an electronic platform that facilitates secure and efficient information access for all stakeholders in public health, including care providers, institutions, health insurance funds, and patients.

Digital prescriptions are created and consulted by health care professionals and stored by a central service. To maximize security and privacy, the following requirements need to be realized;

  • The healthcare providers learn the citizen identifiers, but not the pseudonyms,
  • The backend service learns the backend-specific pseudonyms, but not the citizen identifiers,
  • The service itself sees neither.

And all this is an efficient way, allowing it’s use in real-time processes.

My contribution

In collaboration with the project team developing a service for the referral prescriptions, as well with the cyber security team of Smals, I proposed and fine-tuned the conceptual solution.

I have also built a Proof of Concept (PoC) on which helped the development team of eHealth to build the enterprise-ready solutions. During the development phase, I still had a role to play under the form of guidance and support.

Current state

eHealths blind pseudonymisation service is live and being used for referral prescriptions, which are certificates, issued by a doctor, to start a certain treatment, such as physiotherapy, dietary guidance or speech therapy.

This service is playing an increasingly pivotal role in securing various aspects of centrally stored healthcare data, including electronic prescriptions, medication regimens, medical record summaries, and information related to vaccinations, allergies and intolerances, and fertility data.

References

TODO

POSTS, TALKS