Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Risk

8/25/2011
01:21 PM
50%
50%

Fingerprint Readers Boost Healthcare Security

Biometrics technology locks up Children's Clinics patient data while cutting down on password-reset requests.

12 Innovative Mobile Healthcare Apps
(click image for larger view)
Slideshow: 12 Innovative Mobile Healthcare Apps
Children's Clinics for Rehabilitative Services has rolled out DigitalPersona Pro data protection and access security software and U.are.U fingerprint readers to prevent unauthorized access to patient records. The systems will be used by medical staff to access the more than 11,700 patient records stored in its NextGen electronic health record (EHR) system.

DigitalPersona's biometrics technology was chosen by the southern Arizona healthcare provider because it enhances workflow efficiency, strengthens patient data security, and significantly reduces IT helpdesk requests for lost or forgotten passwords, William Mayo, information systems supervisor at Children's Clinics for Rehabilitative Services, told InformationWeek Healthcare.

"In our environment almost all our providers are part-time providers who are only here a couple times a month. We adopted the technology so that [they] would not have to remember another set of usernames and passwords," Mayo said. "It also enabled us to simplify and speed up the login process. Before implementing biometric technology we were relying on using usernames and passwords to access clinic resources."

With more than 25 specialty clinics, primary care facilities, and therapy services, Children's Clinics provides families a wide range of healthcare services. With approximately 40% of the clinic's staff being part-time contract providers who attend to patients a few times per month, many providers had difficulty using the system because they would forget their passwords. According to officials at Children's Clinics, time and resources were often wasted in the effort to recover and reissue passwords which caused frustration to both providers and patients.

"Bringing up an EHR on an accelerated timeline that is mainly being used by part-time providers was a real challenge. Using the fingerprint readers has enabled our providers to quickly access our EHR, removing a potential stumbling block," Mayo said.

He also noted that since the providers move from room to room, each clinical machine has a USB fingerprint reader sitting next to the keyboard and mouse. Doctors place their finger on the reader to log into the PC and again to launch the EHR application.

According to officials at DigitalPersona, the biometric technology addresses compliance with industry regulations, such as the Health Insurance Portability and Accountability Act (HIPAA) and the Health Information Technology for Economic and Clinical Health (HITECH) Act, by helping health delivery organizations enforce authentication measures to prevent unauthorized access of patients' health records. By using the technology, the staff at Children's Clinics can access a number of applications including Ramsoft PACS, other community EHR systems, and radiology images.

Jim Fulton, DigitalPersona VP of marketing, said in an interview that while DigitalPersona's solution is used at Children's Clinics for medical staff accessing the Clinic's systems internally, some clients use the technology remotely.

"In some other customer deployments our solution is used by doctors whether on premises or remotely [to access patient information] from properly authorized notebooks. Additionally, some of our customers have used our technology for patient-facing applications, such as to check health coverage," Fulton said.

Fulton added that the healthcare sector is DigitalPersona's largest vertical market due to HIPAA and HITECH regulations and the need to secure access to personal health information.

"Fingerprint biometrics reduces the chances that patient records can be viewed by the wrong person by preventing the sharing of authentication credentials. In addition, it helps healthcare organizations be more efficient since they don't have to deal with people losing or forgetting their fingers," Fulton said.

Find out how health IT leaders are dealing with the industry's pain points, from allowing unfettered patient data access to sharing electronic records. Also in the new, all-digital issue of InformationWeek Healthcare: There needs to be better e-communication between technologists and clinicians. Download the issue now. (Free registration required.)

Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
RDP Bug Takes New Approach to Host Compromise
Kelly Sheridan, Staff Editor, Dark Reading,  7/18/2019
The Problem with Proprietary Testing: NSS Labs vs. CrowdStrike
Brian Monkman, Executive Director at NetSecOPEN,  7/19/2019
Register for Dark Reading Newsletters
White Papers
Video
Cartoon Contest
Current Issue
Building and Managing an IT Security Operations Program
As cyber threats grow, many organizations are building security operations centers (SOCs) to improve their defenses. In this Tech Digest you will learn tips on how to get the most out of a SOC in your organization - and what to do if you can't afford to build one.
Flash Poll
The State of IT Operations and Cybersecurity Operations
The State of IT Operations and Cybersecurity Operations
Your enterprise's cyber risk may depend upon the relationship between the IT team and the security team. Heres some insight on what's working and what isn't in the data center.
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2019-10101
PUBLISHED: 2019-07-23
ServiceStack ServiceStack Framework 4.5.14 is affected by: Cross Site Scripting (XSS). The impact is: JavaScrpit is reflected in the server response, hence executed by the browser. The component is: the query used in the GET request is prone. The attack vector is: Since there is no server-side valid...
CVE-2019-10102
PUBLISHED: 2019-07-23
Voice Builder Prior to commit c145d4604df67e6fc625992412eef0bf9a85e26b and f6660e6d8f0d1d931359d591dbdec580fef36d36 is affected by: CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection'). The impact is: Remote code execution with the same privileges as the...
CVE-2019-10102
PUBLISHED: 2019-07-23
Jeesite 1.2.7 is affected by: SQL Injection. The impact is: sensitive information disclosure. The component is: updateProcInsIdByBusinessId() function in src/main/java/com.thinkgem.jeesite/modules/act/ActDao.java has SQL Injection vulnerability. The attack vector is: network connectivity,authenticat...
CVE-2018-18670
PUBLISHED: 2019-07-23
GNUBOARD5 5.3.1.9 has XSS that allows remote attackers to inject arbitrary web script or HTML via the "Extra Contents" parameter, aka the adm/config_form_update.php cf_1~10 parameter.
CVE-2018-18672
PUBLISHED: 2019-07-23
GNUBOARD5 5.3.1.9 has XSS that allows remote attackers to inject arbitrary web script or HTML via the "board head contents" parameter, aka the adm/board_form_update.php bo_content_head parameter.