Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Risk

8/25/2011
01:21 PM
50%
50%

Fingerprint Readers Boost Healthcare Security

Biometrics technology locks up Children's Clinics patient data while cutting down on password-reset requests.

12 Innovative Mobile Healthcare Apps
(click image for larger view)
Slideshow: 12 Innovative Mobile Healthcare Apps
Children's Clinics for Rehabilitative Services has rolled out DigitalPersona Pro data protection and access security software and U.are.U fingerprint readers to prevent unauthorized access to patient records. The systems will be used by medical staff to access the more than 11,700 patient records stored in its NextGen electronic health record (EHR) system.

DigitalPersona's biometrics technology was chosen by the southern Arizona healthcare provider because it enhances workflow efficiency, strengthens patient data security, and significantly reduces IT helpdesk requests for lost or forgotten passwords, William Mayo, information systems supervisor at Children's Clinics for Rehabilitative Services, told InformationWeek Healthcare.

"In our environment almost all our providers are part-time providers who are only here a couple times a month. We adopted the technology so that [they] would not have to remember another set of usernames and passwords," Mayo said. "It also enabled us to simplify and speed up the login process. Before implementing biometric technology we were relying on using usernames and passwords to access clinic resources."

With more than 25 specialty clinics, primary care facilities, and therapy services, Children's Clinics provides families a wide range of healthcare services. With approximately 40% of the clinic's staff being part-time contract providers who attend to patients a few times per month, many providers had difficulty using the system because they would forget their passwords. According to officials at Children's Clinics, time and resources were often wasted in the effort to recover and reissue passwords which caused frustration to both providers and patients.

"Bringing up an EHR on an accelerated timeline that is mainly being used by part-time providers was a real challenge. Using the fingerprint readers has enabled our providers to quickly access our EHR, removing a potential stumbling block," Mayo said.

He also noted that since the providers move from room to room, each clinical machine has a USB fingerprint reader sitting next to the keyboard and mouse. Doctors place their finger on the reader to log into the PC and again to launch the EHR application.

According to officials at DigitalPersona, the biometric technology addresses compliance with industry regulations, such as the Health Insurance Portability and Accountability Act (HIPAA) and the Health Information Technology for Economic and Clinical Health (HITECH) Act, by helping health delivery organizations enforce authentication measures to prevent unauthorized access of patients' health records. By using the technology, the staff at Children's Clinics can access a number of applications including Ramsoft PACS, other community EHR systems, and radiology images.

Jim Fulton, DigitalPersona VP of marketing, said in an interview that while DigitalPersona's solution is used at Children's Clinics for medical staff accessing the Clinic's systems internally, some clients use the technology remotely.

"In some other customer deployments our solution is used by doctors whether on premises or remotely [to access patient information] from properly authorized notebooks. Additionally, some of our customers have used our technology for patient-facing applications, such as to check health coverage," Fulton said.

Fulton added that the healthcare sector is DigitalPersona's largest vertical market due to HIPAA and HITECH regulations and the need to secure access to personal health information.

"Fingerprint biometrics reduces the chances that patient records can be viewed by the wrong person by preventing the sharing of authentication credentials. In addition, it helps healthcare organizations be more efficient since they don't have to deal with people losing or forgetting their fingers," Fulton said.

Find out how health IT leaders are dealing with the industry's pain points, from allowing unfettered patient data access to sharing electronic records. Also in the new, all-digital issue of InformationWeek Healthcare: There needs to be better e-communication between technologists and clinicians. Download the issue now. (Free registration required.)

Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
COVID-19: Latest Security News & Commentary
Dark Reading Staff 11/19/2020
New Proposed DNS Security Features Released
Kelly Jackson Higgins, Executive Editor at Dark Reading,  11/19/2020
How to Identify Cobalt Strike on Your Network
Zohar Buber, Security Analyst,  11/18/2020
Register for Dark Reading Newsletters
White Papers
Video
Cartoon Contest
Write a Caption, Win an Amazon Gift Card! Click Here
Latest Comment: This comment is waiting for review by our moderators.
Current Issue
2021 Top Enterprise IT Trends
We've identified the key trends that are poised to impact the IT landscape in 2021. Find out why they're important and how they will affect you today!
Flash Poll
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2020-25159
PUBLISHED: 2020-11-24
499ES EtherNet/IP (ENIP) Adaptor Source Code is vulnerable to a stack-based buffer overflow, which may allow an attacker to send a specially crafted packet that may result in a denial-of-service condition or code execution.
CVE-2020-25654
PUBLISHED: 2020-11-24
An ACL bypass flaw was found in pacemaker before 1.1.24-rc1 and 2.0.5-rc2. An attacker having a local account on the cluster and in the haclient group could use IPC communication with various daemons directly to perform certain tasks that they would be prevented by ACLs from doing if they went throu...
CVE-2020-28329
PUBLISHED: 2020-11-24
Barco wePresent WiPG-1600W firmware includes a hardcoded API account and password that is discoverable by inspecting the firmware image. A malicious actor could use this password to access authenticated, administrative functions in the API. Affected Version(s): 2.5.1.8, 2.5.0.25, 2.5.0.24, 2.4.1.19.
CVE-2020-29053
PUBLISHED: 2020-11-24
HRSALE 2.0.0 allows XSS via the admin/project/projects_calendar set_date parameter.
CVE-2020-25640
PUBLISHED: 2020-11-24
A flaw was discovered in WildFly before 21.0.0.Final where, Resource adapter logs plain text JMS password at warning level on connection error, inserting sensitive information in the log file.